Make monday.com work with Microsoft 365 & SharePoint →
Lynx logo

Lynx

B3 Software

18 installs, since November 5, 2025.   4 installs/month.   Updated January 22, 2026.

Paid No touch

One item across boards. Without breaking workflows.

Still copying the same item across boards?

Duplicating items across boards, manually updating mirrored columns, and watching automations fail is how many teams try to scale in monday.com, until it becomes slow, fragile, and hard to maintain.

Lynx fixes this by letting you define how boards connect once, then keeping the same item in sync everywhere.

No mirrors. No copy-paste.


Duplicating items just to keep teams aligned?

Link items and subitems to multiple boards, even across workspaces, so everyone sees the same statuses, dates, and owners without conflicting versions or manual reconciliation.


Tired of rebuilding the same linking logic again and again?

Define your board connections once as reusable templates, then apply them everywhere, for manual linking, bulk actions, and automations,  without starting from scratch.


Wish item linking could happen automatically?

Automatically link items using custom automation recipes or choose from more than a dozen predefined templates. Decide exactly when and how items connect as your workflow runs.


Need control over what actually stays in sync?

Cherry-pick which columns should stay aligned between linked items, including compatible cross-type mappings like Text ↔ Numbers, Checkbox ↔ Numbers, or Date ↔ Text and many others, with new ones coming in the future.


Want conversations and context to stay aligned too?

Sync item updates and comments across linked items so discussions, decisions, and progress stay connected, no matter which board your team is working in.


Common use cases include:

  • Keeping a master board in sync with multiple team boards
  • Creating custom facing board with data from multiple boards
  • Sharing the same item across departments without duplication
  • Automatically linking items when new work is created or status changes
  • Replacing fragile mirror-column setups with reliable syncing

Start free today and bring your boards, data, and conversations back into sync.



Security & Compliance

Security

Does the developer periodically perform penetration testing?

No
The application undergoes continuous internal security testing as part of development and maintenance, including ECR automated vulnerability scanning, AWS WAF attack monitoring, CloudWatch alerting for anomalies, security-focused code reviews, and input validation testing. However, formal external penetration testing by independent third-party security firms is not currently performed on a regular basis.

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes
contact@b3-software.com

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes
The application minimizes redirect usage and restricts all redirects to approved monday.com domains. The OAuth flow redirects only to monday.com's authorization endpoints. The frontend React application operates within monday.com's iframe context, eliminating most redirect scenarios. No user-controlled redirects are implemented.

Does the app protect against mass parameter assignment attacks?

Yes
The application protects against mass parameter assignment by using strongly-typed data structures that explicitly define which fields can be accepted from API requests. Similar to a form with predefined fields, users cannot add or modify fields that aren't explicitly defined in the application. All inputs are validated against a whitelist of allowed fields and data types before any operations occur.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes
The application implements comprehensive XSS protection through multi-layered input validation and sanitization. Frontend uses DOMPurify for HTML sanitization, while backend employs strict input validation with XSS pattern detection. AWS WAF with OWASP Core Rule Set provides an additional network-layer defense against known XSS attack patterns. All user-supplied data and monday.com API responses are sanitized before display or storage.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes
The application is protected against CSRF attacks through its API-based architecture using JWT bearer token authentication, following OWASP CSRF Prevention Cheat Sheet recommendations for token-based APIs. All state-changing operations require valid JWT tokens in the Authorization header, which cannot be automatically sent by browsers in cross-origin scenarios. The application does not use cookie-based authentication, eliminating the primary CSRF attack vector.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes
The development team has established communication channels and processes to notify monday.com of any security incidents.

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes
The application uses AWS managed services for automatic security patching and implements a systematic deployment process with automated security scanning. Infrastructure components receive automatic security patches from AWS. Application code updates are deployed through an automated build process with vulnerability scanning and deployment gates.

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Not answered

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

Not answered

Is the app compliant with the General Data Protection Regulation (GDPR)?

Not answered

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

No
The application is hosted on AWS infrastructure (us-east-1 region) and transmits data exclusively to monday.com's GraphQL API for synchronization purposes. AWS serves as the hosting provider where data is processed through Lambda functions and temporarily stored in DynamoDB and Redis cache. No customer data is transmitted to any third-party services, analytics platforms, or external systems beyond monday.com. All data transmission occurs over encrypted HTTPS connections. The application acts as a bridge between monday.com boards, with monday.com being the only external service receiving customer data. For detailed information about data processing practices, please refer to our Privacy Policy [https://lynx.b3-software.com/privacy].

Where does the app store logs data?

aws
AWS CloudWatch

Where does the app store the app data?

DB
AWS DynamoDB

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes
The application implements environment-aware logging with automatic PII redaction in production environments. All logs contain only system identifiers (Account ID, Board ID, Item ID, Column IDs) and never include user-generated content, secrets, or personally identifiable information.

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes
Customer data is logically segregated using AWS DynamoDB with account-based partitioning. Each customer's data is isolated using unique partition keys (Account ID), ensuring strict data boundaries. All database queries, cache operations, and API requests enforce account-level isolation, preventing cross-customer data access.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes
Multi-factor authentication (MFA) is enforced for all employee access to production systems and AWS infrastructure. This includes AWS Console access, GitHub repository access, and any systems that process or store customer data.

Does the developer protect access to customer data based on the principle of least privilege?

Yes
The application implements least privilege access through multiple layers: JWT-based authentication with role validation, Lambda function-specific IAM roles with minimal permissions, account ID validation at every access point, and monday.com API token scoping. Each component has only the permissions necessary for its specific function.

Reviews

No reviews yet.

Historical data

Installation history

We have data for December 28, 2024 onwards only. Collected sometime after 00:00 UTC daily.

Total number of installs

Change in total number of installs in last 1 day(s)

Compares the number of installs on each date with 1 days previously:

Max
Min
Current

Change in total number of installs in last 7 day(s)

Compares the number of installs on each date with 7 days previously:

Max
Min
Current

Change in total number of installs in last 30 day(s)

Compares the number of installs on each date with 30 days previously:

Max
Min
Current

Change in total number of installs in last 90 day(s)

Compares the number of installs on each date with 90 days previously:

Max
Min
Current

Change in total number of installs in last 180 day(s)

Compares the number of installs on each date with 180 days previously:

Max
Min
Current

Ratings history

Categories history

Each of the following is a yes/no answer, so the graphs show 1 for yes, and 0 for no.

In "Featured" category?

In "Editor's choice" category?

In "Trending this week" category?

App metadata

ID: 10000969App ID: 10323955Listing updated: January 26, 2026