Make monday.com work with Microsoft 365 & SharePoint →
Microsoft 365 SharePoint • Automate & Embed logo

Microsoft 365 SharePoint • Automate & Embed

David Simpson Apps Security badge

5 (22)

22,086 installs, since July 4, 2022.   613 installs/month.   Updated June 17, 2025.

Hosted by monday.com 14 days trial Existing legacy
Gallery image Gallery image Gallery image Gallery image

SharePoint Automations. Export to PDF, Word, Excel, Email.

Securely manage & embed Microsoft 365, SharePoint & OneDrive files. Generate HTML emails, Word docs & PDFs from monday.com data. Import & Export Excel files saved in SharePoint.


Unlimited automations for all account sizes.


⚡️ File management automations for SharePoint:


Folder creation automations

  • Simple folder generation– when an item is created, create a folder
  • Simple folder generation for subitems– When a subitem is created, create a folder in the parent item’s folder.
  • Templated folder generation– Automatically build project documentation from templates in SharePoint.


File sync automations

  • Sync files to SharePoint– Sync files from columns and updates


File management for connected boards

  • Export files in columns to folder for linked items
  • Move the configured folder for linked items


Miscellaneous file management automations

  • Move a folder
  • Rename a folder



⚡️ Data import & export automations


  • Import & export for Excel
  • Export to Word– Templated document generation
  • Export to Word & send email with PDF copy attached
  • Export to HTML email– Templated email generation


🔒 Securely embed files & folders from Microsoft 365

  • Access your files & folders with permissions from Microsoft 365 respected.


📝 Easily edit your Office files

Open your files directly from monday.com in desktop Office apps.


📊 Build monday.com dashboards using data from Excel


🗣️ Multi-language support 🇬🇧 🇪🇸 🇩🇪 🇫🇷 🇮🇹 🇳🇱 🇵🇹


📅 Book a demo


🚀 Getting Started Guide


What's new


📮 Request a feature

Security & Compliance

Security

Does the developer periodically perform penetration testing?

Yes

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
Redirects are all checked from an allow list of internal links, monday.com and Microsoft 365 URLs.

Does the app protect against mass parameter assignment attacks?

Yes
We use allow lists and strongly typed models to update data. Everything else that is passed along to the strongly typed properties is ignored.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
We use a very restrictive Content Security Policy (CSP) to significantly reduce the risk of cross-site scripting (XSS) attacks. We sanitise all user supplied input with standard libraries which, for example, escape HTML tags and remove invalid input.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
All state changing actions are to be accompagnied by a JWT token signed by our apps secret key. When the JWT token cannot be validated using our secret key, the request is rejected with a 401 HTTP request header.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
Initial notification would be an email to [email protected]. Subsequently we will follow the process described at: https://dsapps.atlassian.net/wiki/spaces/SEC/pages/4800970753

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
Our security bugfix policies including patching times are published here: https://dsapps.dev/policies/security-bugfix/ In reality, our fix times are much quicker than the published timeframes: Critical severity bugs (CVSS v2 score >= 8, CVSS v3 score >= 9) are normally fixed within 2 weeks High severity bugs (CVSS v2 score >= 6, CVSS v3 score >= 7) are normally fixed within 3 weeks Medium severity bugs (CVSS v2 score >~= 3, CVSS v3 score >= 4) are normally fixed within 4 weeks

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Yes

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

Not answered

Is the app compliant with the General Data Protection Regulation (GDPR)?

Yes

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

No
No customer data is sent outside of monday.com except for that which the customer themselves request to be stored within their own Microsoft 365 account.

Where does the app store logs data?

monday

Where does the app store the app data?

monday

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
We do not log any PII, we only log information needed for debugging and if relevant, we log IDs (numbers) instead of the actual PII information. (Like board IDs & user IDs)

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
All data is stored within monday-code storage and private data such as user tokens are stored using monday-code secure storage. Both of these requires an active & valid JWT token to access the customers data. A JWT token only allows for access of data of a single customer.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
Multi-factor authentication is enforced for all company systems. All systems require multi-factor authentication using an authenticator app. Where possible we also enforce usage of FIDO2 security keys.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
Only company employees who need the data have access to it. We rely on the principle of least privilege for all systems in our company. It you do not need access, you do not have access. Access is monitored regularly and privileges revoked.

Reviews

May 30, 2025

M: David is really responsive and helpful. His apps help fill in the gaps between the inconvenience silos created between Monday and Microsoft, by enabling us as a company to reduce capacity issues and better developing the flow of data by simple automations

February 13, 2025

SE: Love this app it has saved us so much manual input, I would highly recommend this app for anyone who uses Sharepoint for files storage. David is also very helpful and has helped us to get the most from this app as we improve our workflows.

January 16, 2025

HR: David has been super helpful and the App has only increased our ability to use Monday

December 4, 2024

VB: Excellent work, really professional would highly recommend.

December 2, 2024

SK: amazing app, keep up the good work :)

July 29, 2023

RB: This is a great app for Monday! Works well!

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

ID: 10000076App ID: 10029356Listing updated: June 9, 2025