Make monday.com work with Microsoft 365 & SharePoint →
Aircall logo

Aircall

Aircall

4.5 (8)

4,075 installs, since June 30, 2021.   83 installs/month.   Updated March 24, 2024.

7 days trial Existing legacy
Gallery image Gallery image Gallery image

The Aircall phone enhances call efficiency and automates call logging within monday.com CRM.

“Connect Aircall with monday.com to turn conversations into actionable customer data—stored, organized, and leveraged all from monday.com.


Aircall is the first phone solution to integrate with monday.com. Aircall provides the perfect phone solution for capturing data, and monday.com sorts that data within bespoke, intelligent workspaces.

It’s the perfect combination: automate workflows, personalize conversations, and work faster—with fewer headaches.


Work Smarter with Automations

Collect valuable call data—contact information, call recordings, tags, notes, and more—and use that data to trigger custom automations. Set up monday automations to send follow-ups, create new tickets, or move tasks between workspaces without lifting a finger.


Start Your Calls with Context

Take calls prepared, with all the information you need to make conversations count. Inbound calls surface a card in the Aircall phone that contains essential data, helping teams personalize conversations and elevate the customer experience in seconds—no prep required.


Instant, Actionable Customer Data

Whether working on deals, tickets, or campaigns, Aircall and monday.com organize conversations to keep teams on track. Users can tag calls in their phone, and admins can select those tags in monday.com for an instant snapshot of all associated calls.


Simple, Secure Installation

Install the monday.com integration from the Aircall App Marketplace in minutes, then get started. Fast, secure, and guaranteed to optimize teams’ workflows.


Want to learn more?

Schedule a demo or reach out to our sales team at [email protected]

Security & Compliance

Security

Does the developer periodically perform penetration testing?

Not answered

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Not answered

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
We don't perform any redirection on our app and we always check that the origin of the request is coming from monday.com. Also we rely on the JWT being valid and correctly signed before doing anything in our integration.

Does the app protect against mass parameter assignment attacks?

Yes
We don't store data in our databases by directly handling what is sent from the requests. Since we only store information like ID's, we won't store anything extra that an attacker can send to us. We also have validation on the payload in order to validate if we're receiving the correct type of a given field, for example if we expect a number instead of a string, etc.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
Yes, since we rely on the parameters sent in the body of the request for our Actions handling, the libraries we use to decode JSONs handle that and we don't store any plain text value in our database other than ID's.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
For all the state-changing actions, we rely on successfully decoding the JWT signed by Monday APP Client Secret, so we know it's a valid token, we validate that on our end making sure the token is linked to a valid integration and that it's allowed to perform the subsequent actions.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
If a data breach occurs, our security team would reach out to monday.com by email stating the problem and the impact.

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
We run Snyk pipelines in all our repositories and our SRE team is constantly updating our database versions when needed. Also, we have a policy in place with the SLA to fix security issues, which is the following: - Critical: 7 days - High: 30 days - Medium: 60 days - Low: Remediation is not mandatory

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Not answered

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

Not answered

Is the app compliant with the General Data Protection Regulation (GDPR)?

Not answered

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

Not answered

Where does the app store logs data?

Not answered

Where does the app store the app data?

Not answered

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
All of our logs have redactor interceptors which are responsible for redacting out secrets and strings that can be related to PII data from the customer's side. We only keep ID's that help us debug in case of issues.

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
For our monday.com integration, the only data related to our customers that is stored in our backend are ID's from monday.com's side. Those ID's are stored on our database where the unique identifier is the Call. Calls are separated from Companies, so no data from one company can be mixed with another.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
We use Okta to access services like AWS and other internal systems. For internal systems that have customer data, a Google Sign-on is required and in order to log into GSuite, Okta is needed.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
Aircall follows a formal process to grant or revoke access to its resources. System access is based on the concepts of "least-possible-privilege" and a "need-to-know" basis to ensure that authorized access is consistent with the defined responsibilities.

Reviews

May 15, 2025

AK: Please make it possible to log calls in the activity board

May 9, 2025

SP: Would like aircall to update calls in activity feed rather than a separate board

March 7, 2024

PS: Very helpful on my day to day job!

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

ID: 100000001App ID: 37922Listing updated: February 5, 2025