Make monday.com work with Microsoft 365 & SharePoint โ†’
SecureChat Pro - Private Chat logo

SecureChat Pro - Private Chat

RevApps Incorporated โ€ข

โ˜… 5 (6)

241 installs, since July 1, 2024.   20 installs/month.   Updated November 1, 2024.

14 day trial No touch
Gallery image Gallery image Gallery image Gallery image

Texting app, private chat, document sharing & AI insights ๐Ÿš€

Your communication, your team, your privacy

#1 way to securely communicate with your team!


When your team needs to...

  • Collaborate together in real time โšก
  • Manage your company data securely ๐Ÿ”
  • โœจ Use AI to get projects done faster ๐Ÿ’ซ


SecureChat Pro is your solution.


Try the app free- Click "Use App" and start communicating like never before!


๐Ÿ’ป Features

  • ๐Ÿ”’ Team Chat & Private Chat: Live chat for Boards, Items, and Workspaces include the entire team or select specific people to include in a private chat
  • ๐Ÿ“ค Document Sharing: Share those important documents across your team (PDFs, images, videos, audio files, and GIFs)
  • ๐ŸŸข Instant Updates: Chat in real time, see who is online and who is currently typing
  • ๐Ÿ”” Notifications: Never miss an update, simply mention @name and get their attention
  • ๐Ÿฅณ Emojis: Express yourself with rich Emoji reactions and Emojis natively inside your chats
  • ๐Ÿงต Replies and Threads: Organize your communication with replying to specific messages
  • ๐Ÿš€ AI Integration: Our new AI technology helps you find action items, decisions, and boost productivity across your team
  • And more!


๐Ÿ”’ Security is Everything

Your data is fully encrypted, permissions can be adjusted, and you can let the professionals take care of your data integrity.


โš™๏ธ Privacy is Everything

Control who has access to chats to create a Private Chat for just specific team members or leave it open for anyone in your organization to collaborate.


โšกSpeed is Everything

Get instant updates faster than you can blink. See who is online, who is typing, and get messages instantaneously.


๐ŸŽจ Design is Everything

Your company doesn't settle for average, and you shouldn't settle with your vendors. Use products your team loves.


๐Ÿš€ Success is Everything

Download now to unlock success for your team today!


Want more details? 


See our installation & setup instructions

Book a personal 1:1 call with me

Security & Compliance

Security

Does the developer periodically perform penetration testing?

No
Not yet- we plan on conducting this soon.

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
On our client side, any redirect will create a standard Alert in the browser warning them of leaving the site. The only domains that are listed as trusted are "monday.com" and "revapps.io"

Does the app protect against mass parameter assignment attacks?

Yes
All user supplied parameters (accountId, userId, etc) are validated with the JWT after it has been verified. If there is any discrepancy, we simply return a 401 response code. There are no "default trusted parameters", we always verify each API call with the JWT.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
On the client side we use DOMpurify with React to sanitize the inputs, and on the API side we use AWS WAF (Web Access Firewall) with several rules to validate requests, including a subscription for XSS protection for the WAF.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
We have an internal token that we verify upon every single state changing API request that is explicitly set into client side state and nowhere else. Our API sets this CSRF protection token in the headers upon user authentication, then validates it for any HTTPS POST, PATCH, and DELETE request.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
I have a Security Runbook with step by step instructions in case of a security breach to reach out to monday.com Security Breach Protocol Background Information Monitor AWS CloudTrail, Cloudwatch, and other reporting mechanisms to observe network traffic and AWS resource management for anything out of the ordinary. In the event there is a possible security breach, even a "feeling", we will make sure to rotate all keys and secrets for everyone in the account. Steps in case of a Breach Immediately rotate all AWS Keys in SecretsManager, IAM, and Github Immediately rotate passwords for each AWS Account access Immediately fill out a Support Ticket with monday.com and email them https://support.monday.com/hc/en-us/requests/new?ticket_form_id=13855862562962 https://monday.com/helpcenter/contact-support?_ga=2.171170848.1277700123.1716697138-27270506.1680022566&_gac=1.156828361.1714329733.CjwKCAjw57exBhAsEiwAaIxaZoA0FAf_wmIK-0X4xngX0b8mxpUOWOXyjWJ1wwv1hbCxwrOJg5WY5RoChecQAvD_BwE Email Template: Dear monday.com, We are contacting you on behalf of SecureChat, an application listed on the monday.com app store. We have realized there was a security breach within our internal systems and we have taken the following actions: Rotated all keys and passwords Identified the threat and the resources they have accessed Removed the bad actor/ vendor and terminated services Please reach out to [email protected] for additional information so we can further discuss. All the best,

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
Yes, we use AWS ECR for our API to containerize the images, which automatically gives us a security scan of the Docker Image and all packages within that image. We ensure to patch Critical, High, and Medium bugs as soon as they are discovered, and we address Low vulnerabilities within the next API update that we do, which is usually within a day or two.

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

No
Not yet- we also plan on working with Drata to achieve this.

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

No
Not yet- we can provide a letter of attestation from our security vendor, Drata, that we are actively working towards SOC 2 compliance.

Is the app compliant with the General Data Protection Regulation (GDPR)?

Yes
We have all terms listed in our Privacy Policy and Terms of Service, ensure that only data collected is for the business needs of the app.

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

Not answered

Where does the app store logs data?

Not answered

Where does the app store the app data?

Not answered

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
Yes, we implemented Winston (a popular Node.js npm package) configured to ensure no secrets or PII are ever logged into AWS Cloudwatch. This logger configuration is set up for our ECS Service and Lambda functions.

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
Data is separated logically by the Account ID, and then further separated by the Item ID or Board ID under the Account ID. All data is categorized by Account ID.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
We use AWS SSO with enforced MFA (and other password strength requirements) for our AWS Accounts, which contain customer data. MFA is enforced at the login level and is required every 8 hours.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
The two founders of the company and our software engineer, who has a valid employment contract with RevApps Incorporated, are the only people who have access to our AWS Account, which contains customer data.

Reviews

July 22, 2024

VB: Utilizing this app for communicating with my team and breaking down complex projects into manageable tasks has simplified my life and increased productivity immensely!

July 22, 2024

AB: Great app! I feel better having a secure chat to communicate with my team. This app is very easy to use, functional, and has a lot of features. There are a lot of newly added features to implement in the chat. I highly recommend downloading this app!

July 12, 2024

HH: I'm a huge fan of the UI. It's super clean. The option to add media as well as see who is online is super helpful for my team. Worth the download for sure!

July 10, 2024

R: Really nice privacy features! Super useful. - R

July 8, 2024

AI: Wonderful Interface for the app! - Alex

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

ID: 10000515 โ€ข App ID: 10153459 โ€ข Listing updated: August 12, 2024