Make monday.com work with Microsoft 365 & SharePoint →
Sync Poker - Planning & Estimation logo

Sync Poker - Planning & Estimation

Do Async

95 installs, since August 16, 2023.   4 installs/month.   Updated March 24, 2024.

Free No touch
Gallery image Gallery image Gallery image Gallery image

Planning Poker for estimating your backlog for collocated, distributed, and remote teams.

🃏 Sync Poker for monday.com is a consensus-based, gamified agile estimating and planning application. It utilizes a technique called Planning Poker, also known as Scrum Poker.


Sync Poker for monday.com suits various teams, such as collocated, distributed, hybrid, or remote Agile teams. It increases the accuracy 🎯 of estimations, team collaboration, transparency, and fairness.


With Sync Poker, you can be sure you get the following:

  • 🧑‍🤝‍🧑 Collaboration. Prepare a game ahead of the estimation meeting and allow all participants to add items.
  • 🎢 Real-time. All estimates are given in an interactive synchronous way.
  • 🏹 Unbiased voting. Each member provides the estimate based on their understanding in private.
  • ⚙️ Suits for any project. You only need a numeric column for storing estimation results.


If you are more interested in more time-efficient asynchronous estimation, check our Async Poker app out.

Security & Compliance

Security

Does the developer periodically perform penetration testing?

Not answered

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Not answered

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
There is no possibility for users to share a link on somehow make our app to redirect a user somewhere.

Does the app protect against mass parameter assignment attacks?

Yes
We only allow parameters that are described in our input types.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
We sanitize user's input with https://github.com/apostrophecms/sanitize-html And we have set up WAF rules on cloudflare.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
We do not use cookies for session and authentication. We use monday SDK seamless authentication.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
We notify monday.com by sending an email to [email protected] as soon we identify a breach.

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
Database and hosting updates and security patches: We use Heroku, and all patches are handled by heroku. Security patches to the application: We host our code on github and use dependabot. Dependabot creates a new pull request whenever there is a new security update. We check the update and deploy the app.

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Not answered

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

Not answered

Is the app compliant with the General Data Protection Regulation (GDPR)?

Not answered

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

Not answered

Where does the app store logs data?

Not answered

Where does the app store the app data?

Not answered

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
Firs of all we ensure that app does not log sensitive and secret data. We use Datadog for logging and we enabled Sensitive Data Scanner and applied a rule to redact sensitive data if found

Is customer data segregated from the data of other customers (for example logically or physically)?

No
It's a classical multi-tenan application. We have logical separation by account_id that we receive with JWT token

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
That's a rule. MFA is enforced an all services which allow to do that.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
Only me

Reviews

No reviews yet.

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

ID: 10000277App ID: 10089317Listing updated: October 13, 2024