Unlimited Subitems lets you extend the native monday.com information hierarchy by adding as many levels of subitems as you need. A visual tree view lets you modify and drill down into your extended project structure, so you can accurately reflect the way you organize your work in monday.com.
🎯 Accurately reflect your project in monday.com: large projects require tracking at multiple levels. Structure your tasks in their correct hierarchy by adding all the levels of subitems you need.
✅ Track multiple assignees, statuses, and timeframes for a single monday.com subtask: project components often have more than one part. Break down any subtask into child components so you can manage the status, timing, and team members working on each individual part.
👁 See everything at a glance: get a clear and simple overview of your extended board hierarchy to quickly identify specific problem areas, understand project component timings, and determine who is working on what.
🎉 No more workarounds: tired of using checklists on subitems to reflect multiple subitem deliverables? Do it the right way and create individual subitems to capture and track all the information you need.
We’d love to hear your thoughts! Share your feedback in our feedback form or submit your app ideas in our ideas portal to help us improve your experience! For more information on how to get started and become more familiar with the app, visit our how to use page or read our release notes!
Security & Compliance
Security
Does the developer periodically perform penetration testing?
No
Does the developer have a dedicated security and privacy point of contact for such issues or questions?
Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?
Yes
The only redirects we do are to trusted content in our own infrastruture.
Does the app protect against mass parameter assignment attacks?
No
Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?
Yes
We use React and by using React components for the inputs, data is trusted and sanitized.
Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?
Yes
Since this application doesn't rely on any server-side processing and solely operates within monday's iframe, utilizing only the monday.com SDK to make requests, it is inherently secure against CSRF
Does the developer have mechanisms to notify monday.com in case of a security breach?
Yes
Incident is reported to customers affected as soon as possible, maximum within 72 hours. Incident is reported to [email protected] as soon as possible, within 24 hours. If Adaptavist is controller to the information breached (not only processor) regulatory authorities are notified, same time limits apply. As an ISO 27001 certified Adaptavist Group has a group level incident process and a deticated Breach Process
Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?
Yes
Manual check at time of release
Compliance
Is the app certified with the information security standard ISO/IEC 27001:2022?
Not answered
Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?
Yes
HIPAA requirements do not normally apply to Upscale and its products, since we do not store or process protected health information (PHI). As such, a Business Associate Agreement (BAA) is not required.
Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?
Yes
Upscale is a part of the Adaptavist Group Ltd. The Adaptavist Group has a SOC 2 Type 2 report, audited and published by Deloitte.
Is the app compliant with the General Data Protection Regulation (GDPR)?
Yes
Data
Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).
Not answered
Where does the app store logs data?
Not answered
Where does the app store the app data?
Not answered
Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?
Yes
When the information is sent to any tracing tool (Sentry and Segment) the information is pseudo-anonymised. Therefore, only the user or account ID is sent, and all the information that can be sensitive is discarded or hidden.
Is customer data segregated from the data of other customers (for example logically or physically)?
Yes
In our monday.com app, we prioritize the privacy and security of our customers' data. Although we do not store data in any database, we ensure data segregation through the following methods: Logical Segregation: We use third-party services like Sentry and Hubspot for data processing. These services provide logical segregation of data, meaning that each customer's data is isolated in its own environment and cannot be accessed by other customers. This is achieved through unique identifiers associated with each customer's data. Anonymization: To further enhance privacy, we anonymize all data before it is processed by Sentry and Hubspot. This means that any personally identifiable information (PII) is removed or replaced with random characters. This ensures that even if a data breach were to occur, the data would be useless as it could not be traced back to any individual. Access Control: We implement strict access control measures. Only authorized personnel with the necessary permissions can access the data. This further ensures that customer data is segregated and protected from unauthorized access. Data Encryption: All data is encrypted both in transit and at rest. This means that even if data were intercepted, it would be unreadable without the decryption keys. Third-Party Compliance: Our third-party service providers, Sentry and Hubspot, are compliant with various data protection regulations and standards. This ensures that they also follow best practices for data segregation and security. In summary, while we do not physically store customer data, we ensure its segregation and protection through logical means, anonymization, access control, encryption, and by partnering with compliant third-party service providers.
Privacy
Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?
Yes
Our access to systems requires two-step verification to ensure our account is secure and no one else can access resources even if our password is stolen.
Does the developer protect access to customer data based on the principle of least privilege?
Yes
In general, various people within the Adaptavist Group may need access to the information that you provide us. They may need this for technical, commercial or compliance reasons, and this will be done in accordance with Adaptavist Group’s internal access control policy.
Reviews
May 13, 2025
AL: We manage complex projects with multiple layers of tasks, and this app finally lets us build the structured hierarchies we’ve needed. The support team was also incredibly responsive and helpful. We had a couple of setup questions, and they got back to us
Developer response:
Thank you for your review! We're delighted that our app helps you manage complex project hierarchies and that our support team could assist you quickly.
April 29, 2025
MT: Love the unlimited subitems, been waiting for this.
Developer response:
Thank you for your feedback! We're glad you’re enjoying the unlimited subitems feature, it’s great to hear it’s something you’ve been waiting for!
January 29, 2025
EN: terrible to deal with the worst customer service ive ever dealt with and a very poor product - buyer be warned
Developer response:
We're sorry to hear about your experience and that we fell short of your expectations. We take feedback like this seriously and regret that your interaction with both our product and service was frustrating. Your comments have been shared with our team.
September 20, 2024
LO: It's great in theory, but only works okay. I know & hope it becomes better. It's not a seamless flow because you have use a different tab to use multiple subitems and that tab doesn't display thing nicely or isn't easily editable like the main tab.
Developer response:
We're sorry to hear the experience hasn’t been as smooth as you'd like. Insights like yours help guide those updates. The app works well for basic use cases, and we’re continuing to enhance the interface for a more seamless workflow.
June 21, 2024
RJ: Loses must Monday.com functionality.
Developer response:
Thanks for your feedback. We’ve made significant improvements to the app, including better compatibility with monday.com features. We’re committed to continually enhancing the experience to ensure smoother integration and more reliable performance.
March 8, 2024
GN: Does not truly integrate with Monday.com.
Developer response:
Thanks for your feedback. We're sorry to hear the integration didn’t meet your expectations. Our app is built to work closely with monday.com features, and we’re continually improving it to offer a more seamless and integrated experience.
February 27, 2024
JD: Really like this add in
January 23, 2024
C: doesn't work and no respons on emails about this
Developer response:
We're sorry to hear you're having trouble and haven’t received a response. We couldn’t find any support ticket or email from the address registered with your account. Could you please submit a support ticket using the "Contact Developer" link in the app?
January 18, 2024
KD: Great for what I need! Wish it was more friendly with duplicating nested children levels
July 27, 2023
AD: This works well, but it is REALLY annoying that you can't access this ability from the Main Table and have to go into a separate window.
Installation history
We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.
