eazyBI is a powerful, fully featured Business Intelligence, analytics, and reporting tool – now integrated natively into monday.com. Finally, get the insights you need.
Create as many reports, charts, or dashboards as you need.
Identify trends and correlations, opportunities and threats, track progress and productivity, and make better data-based decisions with all your data, KPIs, and reports in one place.
With eazyBI, simple things are easy, but complex things are still possible - from simple drag & drop reports and charts to advanced custom calculations.
Measure any standard or custom fields across all boards.
Track hours spent, status transitions, time in status, and time to completion.
Add one-click calculations, statistics, trends, cumulative sums, and more.
Visualize, analyze and explore your monday.com data from any perspective.
Blend and analyze data from external data sources like SQL databases, Google Sheets, Spreadsheets, CSV, or REST API.
Use eazyBI widgets to add eazyBI reports and dashboards to monday.com boards to keep teams informed, productive, accountable, and responsible.
You can drill into details, across dimensions, or drill through to the list of items – all from within the widget, with a direct link back to monday.com items. With automatic daily data updates, all your reports will always be up-to-date – everywhere.
Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?
Yes
Most of the redirects are internal, we use standard validation for external URLs.
Does the app protect against mass parameter assignment attacks?
Yes
eazyBI uses 'permit' methods that checks the parameters provided from the request.
Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?
Yes
eazyBI has a Software Development Life Cycle Policy and Vulnerability Management Policy in place that covers industry-level patch management and security coverage. eazyBI app is developed taking into account RubyOnRails best practice security standards. To prevent XSS attacks, Rails automatically escapes all data sent from Rails to HTLM output. In the example above, we demonstrated that pasting JavaScript code into the text field can lead to XSS. This is because we use valid HTML tags for scripts (), so the victim’s browser interprets it as any other HTML code. https://www.stackhawk.com/blog/rails-xss-examples-and-prevention/#xss-in-rails
Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?
Yes
eazyBI has a Software Development Life Cycle Policy and Vulnerability Management Policy in place that covers industry-level patch management and security coverage. eazyBI uses RubyOnRails built in protection against CSRF. Rails automatically generates a CSRF token whenever the application requests a form, as explained here: https://www.writesoftwarewell.com/how-rails-authenticity-tokens-protect-against-csrf/
Does the developer have mechanisms to notify monday.com in case of a security breach?
Yes
Via email within 48h, as stated in Incident Response Plan.
Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?
Yes
eazyBI has a Software Development Life Cycle Policy and Vulnerability Management Policy in place that covers industry-level patch management and security coverage.
Compliance
Is the app certified with the information security standard ISO/IEC 27001:2022?
Not answered
Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?
No
Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?
Yes
SOC 2 Type II
Is the app compliant with the General Data Protection Regulation (GDPR)?
Yes
SOC 2 scope has Privacy Trust Services Criteria
Data
Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).
Not answered
Where does the app store logs data?
Not answered
Where does the app store the app data?
Not answered
Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?
Yes
Sensitive parameters are filtered and masked.
Is customer data segregated from the data of other customers (for example logically or physically)?
Yes
Customer data is physically separated at the database level using a separate database scheme for each customer to segregate customer data from the data of other customers.
Privacy
Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?
Yes
All eazyBI personnel has undergone security training, all systems containing any information that can contain customer information is accessed only by authenticated users with MFA.
Does the developer protect access to customer data based on the principle of least privilege?
Yes
All access requests are treated on a "least-access principle”. eazyBI has System Access Control and Data Protection policies. Customer data can be accessed by support specialist, if the client has provided the data or submitted appropriate request.
Reviews
No reviews yet.
Installation history
We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.
