Make monday.com work with Microsoft 365 & SharePoint →
MoreApp Forms logo

MoreApp Forms

MoreApp Forms

52 installs, since June 13, 2024.   4 installs/month.   Updated May 16, 2024.

Free No touch
Gallery image Gallery image Gallery image

Your MoreApp tasks on monday.com

MoreApp: the field service management tool.

Where planning and execution come together.


MoreApp is a solution for field services that allows companies to digitise forms and automate workflows. This integration is designed for users who seamlessly want to connect MoreApp’s digital forms with the monday.com dashboard.


1. 🎯 Meet your status quo

All your tasks are in one place with this integration.


Easily check the status of all your tasks in your dashboard or get notified when a status changes. Your life will become a whole lot easier when integrating your MoreApp forms with monday.com.


There is more:

  • Receive data in real-time and take immediate action
  • Create new tasks and items for different scenarios
  • Choose more extensive options like a calendar view and contracts


2. 🚀 Start digitising

A sustainable solution for field service operations.


With MoreApp you limit paper usage, save time and money and optimise your processes. It's a big win for the planet and an even bigger win for you.


3. 🔗 Connect MoreApp with your tools

Automate your workflows and get things done.


The power of MoreApp is connectivity. Integrate with your software and streamline your workflows.


MoreApp prioritises privacy and security above everything else. Our ISO 27001 and ISO 27701 certifications ensure the highest standards of data management.


For more details check out our Developer Docs or visit our Help Center.

Security & Compliance

Security

Does the developer periodically perform penetration testing?

Yes
Periodic pen-test is required by the ISO27001 norm. We've set our interval to "at least once a year".

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
We ensure no "user input" is used to make redirects. We also setup a very strict CSP to only allow loading scripts, images, and styles from our own server.

Does the app protect against mass parameter assignment attacks?

Yes
Our monday-app does not rely on such auto-binding / ORM-layers. We sanitize requests using schema-validation, and make case-specific MongoDB-queries.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
We sanitize all user inputs before performing MongoDB queries. We also apply schema-validation on all requests to our server.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
We use your official monday-sdk to grab a sessionToken provided when navigating from your settings page. This sessionToken is passed along to our server on each request, for server-side validation.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
If we notice a customer is affected by a security breach, we notify the customer. If needed, we also notify the AP (Dutch Data Protection Authority) as required by GDPR. If a security specifically hits customers that use our monday-integration, we will notify monday.com as well.

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
Most critical systems apply auto-upgrading, like our managed GKE cluster (GCP's Kubernetes Engine) and our MongoDB Atlas clusters. We use container-optimized OS-es in our GKE cluster, which are auto-patched on the OS-level. PRs for dependency-patches are done automatically via Renovate (similar to Github's Dependabot).

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

No
HIPAA is very much US-centered. This is not (yet) relevant for us.

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

No
We are ISO27001 + ISO27701 certified though. We're thinking of adding SOC2 next year though as this helps to expand in the US where SOC2 is more common than ISO27001.

Is the app compliant with the General Data Protection Regulation (GDPR)?

Yes
We're a Dutch (EU) company, so we have to comply with GDPR by law. Next to that, we are ISO27001 and ISO27701 (Privacy module) certified.

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

Not answered

Where does the app store logs data?

Not answered

Where does the app store the app data?

Not answered

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
We have strict guidelines on what to log, and it's part of our PR review process to be very strict in that: only log what needs to be logged. We make sure we keep user-data out of URLs that are posted to the server, as this would end up in access-logs.

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
We apply logical separation in our databases and file-storage. Each customer has a unique "customerID" which is passed to all database-queries. MongoDB-collections are indexed by this customerID. For file-storage, we store customer-related files in their own directory (using that customerID). API-calls usually require the CustomerID to retrieve/post data. The API-key needed to make API-calls is also registered with a specific CustomerID.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
Access to our systems processing customer data is only available to the operational Dev-team, using a user-specific login requiring 2FA and a VPN-connection.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
By default, only our operational Dev-team has access to the database(s) with customer data. Administrative / superuser access is only applied to individuals, not using shared accounts.

Reviews

No reviews yet.

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

ID: 10000501App ID: 10099770Listing updated: July 21, 2024