Make monday.com work with Microsoft 365 & SharePoint →
Notion Embedder logo

Notion Embedder

UpSmith Security badge

164 installs, since August 7, 2024.   14 installs/month.   Updated August 7, 2024.

Hosted by monday.com 14 days trial No touch
Gallery image Gallery image Gallery image

Embed live Notion page and keep your team on the same page!

Embed public Notion pages directly into your Items, Boards, Dashboards, or Workspace views in monday.com and keep your team in sync effortlessly.


Access the information you need without switching apps, ensuring a seamless workflow and real-time updates.


Supports a wide range of Notion blocks:

  • Page Elements: Page, Text, Heading 1/2/3, Quote, Callout, Toggle
  • Lists: Bookmark, Bulleted List, Numbered List, Todos (checkboxes)
  • Content: Table of Contents, Divider, Column, Column List
  • Media: Image, Video, Audio, Embed, PDF, File, Link, Page Link, External Page Link
  • Integrations: Figma, Google Maps, Google Drive, Tweet
  • Special Elements: Equation (block and inline), Code (block and inline), Collections (table, gallery, board, list).

🚀 Get started quickly with our Documentation


ℹ️ Support

Need help or a feature request? Contact us at [email protected] or you can leave your details here

We're available to help with any issues or questions.

Security & Compliance

Security

Does the developer periodically perform penetration testing?

No

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Not answered

Does the app protect against mass parameter assignment attacks?

Yes
N/A - no backend mutation endpoint at the moment

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
We call encodeURIComponent before calling `monday.storage.setItem`

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
N/A - currently we don't have backend endpoint for mutation. Updates happen through monday SDK (`monday.storage.setItem`)

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
We are actively preventing security breach by regularly patching known vulnerabilities and monitoring suspicious activities. However, in the event of security breach, we will Confirm and assess the impact the security breach. Communicate security breach to monday.com by submitting technical ticket Contain the breach to prevent further damage by patching any vulnerability and regenerating exposed secrets Review and improve security measures to prevent future breaches.

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
Using snyk to be notified and patch of vulnerabilities

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Yes
Not dealing with any HIPAA information

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

No

Is the app compliant with the General Data Protection Regulation (GDPR)?

Yes
Not storing any PII

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

Not answered

Where does the app store logs data?

monday

Where does the app store the app data?

monday

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
We are only logging certain parameters (instead of, say, logging the whole request object)

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
Using monday storage which provides segregation

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
MFA is enabled for the monday.com account which has access to monday logs and storage.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
Only the monday.com account owner has access to customer data in monday logs and storage. Very strict password policy and MFA are enabled for this account, and access token is regenerated (rotated) every 3 months.

Reviews

No reviews yet.

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

ID: 10000562App ID: 10150293Listing updated: October 15, 2024