Make monday.com work with Microsoft 365 & SharePoint →
GitHub Gists Embedded logo

GitHub Gists Embedded

David Simpson Apps

523 installs, since April 28, 2022.   13 installs/month.   Updated March 24, 2024.

14 days trial Existing legacy
Gallery image Gallery image Gallery image

Enhance your monday.com account with source code directly from GitHub Gists Embedded!

Enhance your monday.com account with source code directly from GitHub Gists Embedded!


With this awesome feature, you can easily embed any GitHub Gist Embedded within your monday.com board or dashboard providing your developers with the code snippets they need in-context without leaving monday.com.

Security & Compliance

Security

Does the developer periodically perform penetration testing?

Yes

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
The app does not redirect anywhere and no forwards are permitted.

Does the app protect against mass parameter assignment attacks?

No
n/a

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
We use a very restrictive Content Security Policy (CSP) to significantly reduce the risk of cross-site scripting (XSS) attacks. We sanitise all user supplied input with standard libraries which, for example, escape HTML tags and remove invalid input.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

No
n/a

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
nitial notification would be an email to [email protected]. Subsequently we will follow the process described at: https://dsapps.atlassian.net/wiki/spaces/SEC/pages/4800970753/App+security+incident+management+-+monday.com+apps?NO_SSR=1

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
Our security bugfix policies including patching times are published here: https://dsapps.dev/policies/security-bugfix/ In reality, our fix times are much quicker than the published timeframes.

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Yes

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

Not answered

Is the app compliant with the General Data Protection Regulation (GDPR)?

Yes

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

No

Where does the app store logs data?

aws

Where does the app store the app data?

monday

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
This app is static HTML, so the only logs collected are access logs (which contain no secrets or PII) and analytics (we ensure that no secrets or PII are sent to analytics).

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
No customer data is stored by us. All data is stored in monday.com settings or storage.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
Multi-factor authentication is enforced for all company systems. All systems require multi-factor authentication using an authenticator app.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
Only company employees who need the data have access to it. We rely on the principle of least privilege for all systems in our company. It you do not need access, you do not have access. Access is monitored regularly and privileges revoked.

Reviews

No reviews yet.

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

ID: 10000052App ID: 10023080Listing updated: January 19, 2025