monday.com Licencing

Service scope

Software add-on or extension: No
Cloud deployment model: Private cloud
Service constraints: N/A
System requirements: N/A for Cloud (SaaS) offering

User support

Email or online ticketing support: Email or online ticketing
Support response times: Fastest response time SLA is 30mins

Full details available at https://support.monday.com/hc/en-us
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
Phone support: Yes
Phone support availability: 9 to 5 (UK time), 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Full details of monday.com support is available at https://support.monday.com/hc/en-usl

Automation Consultants provides additional Managed Services support at additional cost.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: Instant, immediate trial creation. Trial can then be converted to full permanent product.
Service documentation: Yes
Documentation formats: HTML

ODF

PDF
End-of-contract data extraction: All data can be exported from systems by CSV, XML, word, pdf or many other file types.
End-of-contract process: Monday.com will remove access to products after several warnings and will delete all data following this closure.

Using the service

Web browser interface: Yes
Supported browsers: Internet Explorer 11

Microsoft Edge

Firefox

Chrome

Safari

Opera
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: Full details at https://support.monday.com/hc/en-us/articles/360015779760-Key-differences-between-the-mobile-app-and-your-browser#:~:text=On%20your%20desktop%2C%20you%20will,or%20workspaces%20you%20are%20subscribed.
Service interface: No
User support accessibility: WCAG 2.1 AA or EN 301 549
API: Yes
What users can and can't do using the API: Extensive documentation available at https://developer.monday.com/apps/docs/mondayapi
API documentation: Yes
API documentation formats: HTML
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: Widely customisable through general functionality and wider API usage

Scaling

Independence of resources: Products are hosted on AWS and are designed to scale. Full details are available at https://engineering.monday.com/unlocking-performance-a-journey-of-scaling-up-with-elasticsearch/

Analytics

Service usage metrics: Yes
Metrics types: Atlassian offers a wide range of service metrics readily available through customisable reports and dashboards
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request

Resellers

Supplier type: Reseller providing extra features and support
Organisation whose services are being resold: Monday.com

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Physical access control, complying with another standard

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding
Data sanitisation process: Yes
Data sanitisation type: Explicit overwriting of storage before reallocation

Deleted data can’t be directly accessed
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: All data can be exported instantly from systems by CSV, PDF...
Data export formats: CSV

Other
Other data export formats: PDF

HTML
Data import formats: CSV

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: 99.9% Guaranteed
Full details of historic data available at https://status.monday.com/uptime
Approach to resilience: Full details at https://monday.com/trustcenter
Outage reporting: Live dashboards are available at https://status.monday.com/uptime
Email communication also shared.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google Apps)

Other
Other user authentication: Optional standards can be implemented
Access restrictions in management interfaces and support channels: Enforced access security with optional levels of severity.
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google Apps)

Dedicated link (for example VPN)

Username or password

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: At least 12 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: At least 12 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: British Assessment Bureau
ISO/IEC 27001 accreditation date: 14/12/2023
What the ISO/IEC 27001 doesn’t cover: N/A
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: No

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: CSA CCM version 3.0

ISO/IEC 27001

Other
Other security governance standards: Service Organization Control (SOC) 1
Service Organization Control (SOC) 2
Service Organization Control (SOC) 3
Information security policies and processes: Full details at https://monday.com/trustcenter

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: Vendor publishes all changes at https://support.monday.com/hc/en-us/articles/9883737292946-Release-notes-2023
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: Full details of any vulnerabilities and actions to defend against these are published at https://support.monday.com/hc/en-us/articles/115005325085-Is-my-data-secure
Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach: Full details of vulnerabilities, monitoring and actions to defend against these are published at https://support.monday.com/hc/en-us/articles/115005325085-Is-my-data-secure
Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach: Full details provided at https://monday.com/trustcenter/securitypolicies

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: No

Social Value

Fighting climate change

Automation Consultants’ Cloud services facilitate and promote means of remote working, helping our customers to connect with teams across great distances and remove the need to for unnecessary travel. Tangible reductions in carbon emissions can be traced through use of the tools we support, for instance Atlassian Jira Software or monday.com, which allow teams to work together remotely without face-to-face interaction. The cloud hosting of the software systems and solutions that Automation Consultants provides also contribute to an overall reduction in carbon footprint. This can be seen through the more efficient storage of data on Cloud hosting suppliers such as AWS and MS Azure when compared to local hosting solutions and in-house data centres. Within our own organisation, staff still work remotely most of the time. Many of our projects that would have once been on-site are now performed remotely including internal projects. This has resulted in a net-reduction of thousands of miles of weekly travel through commuting and off-site visits. Automation Consultants also has a Carbon Reduction plan which commits AC to net zero by 2035. This extends to our services. A copy of this policy can be shared upon request.

Pricing

Price: £17 to £350 a user a month
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: Trial version has full functionality
Link to free trial: https://auth.monday.com/users/sign_up_new

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

monday.com Licencing

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents