Make monday.com work with Microsoft 365 & SharePoint →
Lynx logo

Lynx

B3 Software

14 installs, since November 5, 2025.   7 installs/month.   Updated December 15, 2025.

Paid No touch

Cross-board item sharing with real-time updates made simple

Cross-board workflows that update themselves ⚡

Lynx helps you share items across boards so each team can keep its own board while seeing the same work. Set how boards relate once, and Lynx keeps the important fields up to date – no more copy-paste or “which board is the latest?” confusion.


💡 What Lynx solves

  • Stop manual updates across boards – change it once, it updates where it matters.
  • Avoid version conflicts – everyone sees the same reliable data.
  • Share items across boards so every team sees the same work in their own board, with automations moving work between boards for you.


🔗 Relationships: how your boards talk

A Relationship is a reusable rule for how data moves between boards:

  • Pick the boards you want to connect (one-to-one or one-to-many).
  • Choose which columns should stay matched, including compatible cross-type mappings.
  • Keep fields aligned even when boards are structured differently.

Relationships grow with you: add a new column to a Relationship, update that field on one shared item, and Lynx updates it for all items shared by that Relationship.


🤖 Automation-ready data flow

Use your Relationships inside monday.com automations so workflows run on their own:

  • Example: when a status becomes “Approved” or an owner is assigned, use a Relationship to create or update the related item on another board and keep key fields (like status or dates) aligned.


📊 Master boards & connected data

Use Lynx to roll up many project or team boards into one master, and to bring budgets from different teams into a single accounting board for live budget vs. actuals – all without spreadsheets.


🧩 Power features, safe by design

  • See all connections and manage them in one place.
  • Always current – shared items reflect the latest details on every board.
  • Flexible mapping – pick exactly which columns stay matched, including compatible cross-type mappings.
  • Context-aware naming – keep item names the same everywhere or adapt them per board (e.g. “Client Onboarding #47” vs “Setup – Acme Corp”).
  • Bulk Actions - share multiple items across boards in one click using a relationship (set it once, select items, apply).


📞 Start for Free

Experience effortless synchronization - connect your boards and try Lynx today.


💚 Nonprofits can get free or discounted access. 10% of profits go to charity.

Security & Compliance

Security

Does the developer periodically perform penetration testing?

No
The application undergoes continuous internal security testing as part of development and maintenance, including ECR automated vulnerability scanning, AWS WAF attack monitoring, CloudWatch alerting for anomalies, security-focused code reviews, and input validation testing. However, formal external penetration testing by independent third-party security firms is not currently performed on a regular basis.

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes
contact@b3-software.com

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
The application minimizes redirect usage and restricts all redirects to approved monday.com domains. The OAuth flow redirects only to monday.com's authorization endpoints. The frontend React application operates within monday.com's iframe context, eliminating most redirect scenarios. No user-controlled redirects are implemented.

Does the app protect against mass parameter assignment attacks?

Yes
The application protects against mass parameter assignment by using strongly-typed data structures that explicitly define which fields can be accepted from API requests. Similar to a form with predefined fields, users cannot add or modify fields that aren't explicitly defined in the application. All inputs are validated against a whitelist of allowed fields and data types before any operations occur.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
The application implements comprehensive XSS protection through multi-layered input validation and sanitization. Frontend uses DOMPurify for HTML sanitization, while backend employs strict input validation with XSS pattern detection. AWS WAF with OWASP Core Rule Set provides an additional network-layer defense against known XSS attack patterns. All user-supplied data and monday.com API responses are sanitized before display or storage.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
The application is protected against CSRF attacks through its API-based architecture using JWT bearer token authentication, following OWASP CSRF Prevention Cheat Sheet recommendations for token-based APIs. All state-changing operations require valid JWT tokens in the Authorization header, which cannot be automatically sent by browsers in cross-origin scenarios. The application does not use cookie-based authentication, eliminating the primary CSRF attack vector.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
The development team has established communication channels and processes to notify monday.com of any security incidents.

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
The application uses AWS managed services for automatic security patching and implements a systematic deployment process with automated security scanning. Infrastructure components receive automatic security patches from AWS. Application code updates are deployed through an automated build process with vulnerability scanning and deployment gates.

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Not answered

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

Not answered

Is the app compliant with the General Data Protection Regulation (GDPR)?

Not answered

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

No
The application is hosted on AWS infrastructure (us-east-1 region) and transmits data exclusively to monday.com's GraphQL API for synchronization purposes. AWS serves as the hosting provider where data is processed through Lambda functions and temporarily stored in DynamoDB and Redis cache. No customer data is transmitted to any third-party services, analytics platforms, or external systems beyond monday.com. All data transmission occurs over encrypted HTTPS connections. The application acts as a bridge between monday.com boards, with monday.com being the only external service receiving customer data. For detailed information about data processing practices, please refer to our Privacy Policy [https://lynx.b3-software.com/privacy].

Where does the app store logs data?

aws
AWS CloudWatch

Where does the app store the app data?

DB
AWS DynamoDB

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
The application implements environment-aware logging with automatic PII redaction in production environments. All logs contain only system identifiers (Account ID, Board ID, Item ID, Column IDs) and never include user-generated content, secrets, or personally identifiable information.

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
Customer data is logically segregated using AWS DynamoDB with account-based partitioning. Each customer's data is isolated using unique partition keys (Account ID), ensuring strict data boundaries. All database queries, cache operations, and API requests enforce account-level isolation, preventing cross-customer data access.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
Multi-factor authentication (MFA) is enforced for all employee access to production systems and AWS infrastructure. This includes AWS Console access, GitHub repository access, and any systems that process or store customer data.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
The application implements least privilege access through multiple layers: JWT-based authentication with role validation, Lambda function-specific IAM roles with minimal permissions, account ID validation at every access point, and monday.com API token scoping. Each component has only the permissions necessary for its specific function.

Reviews

No reviews yet.

Historical data

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

Total number of installs

Change in total number of installs in last 7 days

Compares the number of installs on each date with 7 days previously:

Max
Min
Current

Change in total number of installs in last 30 days

Compares the number of installs on each date with 30 days previously:

Max
Min
Current

Change in total number of installs in last 90 days

Compares the number of installs on each date with 90 days previously:

Max
Min
Current

Ratings history

Categories history

Each of the following is a yes/no answer, so the graphs show 1 for yes, and 0 for no.

In "Featured" category?

In "Editor's choice" category?

In "Trending this week" category?

App metadata

ID: 10000969App ID: 10323955Listing updated: December 15, 2025