CloudTalk

App metadata

{
  "id": 10001142,
  "marketplace_developer_id": 100000216,
  "app_id": 10366767,
  "app_type": "app",
  "security_info": {},
  "gallery_assets": [
    {
      "url": "https://cdn.monday.com/marketplace/10001142/10001142_2026_3_21_10_6_35_xwj8tnk.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001142/10001142_2026_3_21_10_6_40_eadyykp.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001142/10001142_2026_3_21_10_6_45_0q253uw.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001142/10001142_2026_3_21_10_6_50_zwefk9q.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001142/10001142_2026_3_21_10_6_55_qd5r2sk.png",
      "type": "image"
    }
  ],
  "description": "<p><strong>App long description:</strong></p><p>Connect CloudTalk to&nbsp;<a href=\"http://monday.com/\" rel=\"noopener noreferrer\" target=\"_blank\"><strong>monday.com</strong></a><strong>&nbsp;CRM</strong>&nbsp;to centralize your communication workflows, synchronize contact data, and access customer intelligence directly within your existing boards.</p><p><strong>Why teams love CloudTalk +&nbsp;</strong><a href=\"http://monday.com/\" rel=\"noopener noreferrer\" target=\"_blank\"><strong>monday.com</strong></a><strong>&nbsp;CRM?</strong></p><ul><li><strong>Global Reach, Local Presence:</strong>&nbsp;Expand your business instantly with&nbsp;<strong>local numbers in 160+ countries</strong>. Manage international teams and reach customers anywhere without leaving your&nbsp;<a href=\"http://monday.com/\" rel=\"noopener noreferrer\" target=\"_blank\">monday.com</a>&nbsp;workspace.</li><li><strong>AI-Powered Call Insights:</strong>&nbsp;Don't just log calls—understand them. Every conversation automatically includes an&nbsp;<strong>AI Call Summary</strong>,&nbsp;<strong>Sentiment Analysis</strong>, and&nbsp;<strong>Extracted Topics</strong>&nbsp;directly in the item update. Spot customer mood trends without listening to hours of recordings.</li><li><strong>Native \"Recipe\" Automation:</strong>&nbsp;We use&nbsp;<a href=\"http://monday.com/\" rel=\"noopener noreferrer\" target=\"_blank\">monday.com</a>'s native&nbsp;<strong>recipe-based logic</strong>. Trigger specific workflows (like \"Create a new lead\" or \"Update deal stage\") automatically when a call ends or a contact is updated,.</li><li><strong>Bi-Directional Sync:</strong>&nbsp;Keep your CRM clean. Using our&nbsp;<strong>Event-based sync</strong>, a column change in&nbsp;<a href=\"http://monday.com/\" rel=\"noopener noreferrer\" target=\"_blank\"><strong>monday.com</strong></a>updates the contact in CloudTalk instantly, and vice-versa.</li><li><strong>Deep Timeline Integration:</strong>&nbsp;View recordings, notes, and tags right where you manage your work. Call data is logged to the&nbsp;<strong>Timeline</strong>&nbsp;or specific destination columns, keeping your interface clean and organized.</li></ul><p>👉&nbsp;<a href=\"https://www.cloudtalk.io/demo/?utm_campaign=14880563-Monday.com%20Marketplace&amp;utm_source=monday_marketplace&amp;utm_medium=referral\" rel=\"noopener noreferrer\" target=\"_blank\"><strong>Book a demo with our team</strong></a>&nbsp;to see the AI integration in action.</p>",
  "short_description": "AI calling & call logging for teams using monday.com",
  "thumbnail_url": "https://cdn.monday.com/marketplace/10001142/10001142_2026_3_21_10_6_3_saoj2lr.png",
  "logo_url": "https://cdn.monday.com/marketplace/10001142/10001142_2026_3_21_10_5_46_88dlvwyk.png",
  "feedback_url": "support@cloudtalk.io",
  "privacy_policy_url": "https://www.cloudtalk.io/privacy-notice/?utm_campaign=14880563-Monday.com%20Marketplace&utm_source=monday_marketplace&utm_medium=referral",
  "featured": false,
  "name": "CloudTalk",
  "how_to_use_url": "https://docs.google.com/document/u/0/d/e/2PACX-1vT2zG849pB8RMF5-MrIPHHwdze4xvLTdGmRcgCaLuvDQRYKSaFd_yJNoC-Ub0a-mkQa_6fS1vn1UxeF/pub?pli=1",
  "external_pricing_url": null,
  "keywords": "Phone system,Calls automation,Calls analytics,VoIP solution,Sales & Support enablement,Voice Agents,AI Receptionist,Call Center Sofware,Call integration,SMS integration",
  "compliance_answers": [
    {
      "fileName": "7lce9yck.pdf",
      "questionId": 20,
      "shortAnswer": true,
      "detailedAnswer": "Yes. CloudTalk s.r.o. holds a current ISO/IEC 27001:2022 certification for its Information Security Management System (ISMS). The certification was awarded following an independent audit by an accredited certification body and is renewed annually. Our ISO 27001 certificate is available for download at trust.cloudtalk.io."
    },
    {
      "questionId": 19,
      "shortAnswer": true,
      "detailedAnswer": "Yes. When integrated with monday.com, data may flow as follows:\n• Non-customer-submitted data (e.g., account ID, board ID, user ID): Used for authentication, integration configuration, and activity logging within CloudTalk.\n• Customer-submitted data (e.g., contact names, phone numbers, email addresses, board/item data used to trigger calls or populate contact records): May be transferred to CloudTalk for call processing and CRM functionality.\nAll data transferred outside monday.com to CloudTalk is processed in accordance with our DPA, Privacy Notice, and applicable data protection laws. Data is transmitted exclusively over encrypted channels (TLS 1.2+). Our full sub-processor list is available at cloudtalk.io/sub-processors."
    },
    {
      "questionId": 18,
      "detailedAnswer": "Logs are stored in EU-based AWS systems and can be retained for up to 2 years. All logs are protected against tampering and unauthorised access, and system administrators cannot delete their own activity logs.",
      "logHostingProvider": "aws"
    },
    {
      "questionId": 17,
      "detailedAnswer": "App data is stored in Amazon AWS data centers. Primary storage is in Frankfurt, Germany (eu-central-1, EU), secondary regions include Northern Virginia, USA (us-east-1), Singapore (ap-southeast-1), Sao Paulo, Brazil (sa-east-1) and Sydney, Australia (ap-southeast-2). Call recordings and AI-generated data are stored exclusively in the EU (Frankfurt). All data is encrypted at rest using AES-256 (SSE-S3 for recordings; AWS KMS for all other data). Backups are also stored within AWS S3 and encrypted at rest.",
      "dataHostingProvider": "other"
    },
    {
      "fileName": "keiclef.pdf",
      "questionId": 15,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We conduct periodic penetration testing performed by accredited external third-party suppliers. Penetration tests are conducted at least annually, in addition to ongoing internal security audits. Testing is performed in a staging or isolated environment to protect production systems, with findings tracked and remediated according to our Vulnerability Management Policy SLAs. Penetration test reports and executive summaries are available at trust.cloudtalk.io."
    },
    {
      "questionId": 14,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We have a dedicated security and privacy point of contact:\nSecurity / Compliance: security@cloudtalk.io \nPrivacy / Data Protection: privacy@cloudtalk.io\nExternal Data Protection Officer (DPO): privacy@cloudtalk.io\nFor security vulnerability reports, we also operate a responsible disclosure programme. All security and privacy inquiries are handled by our Security team, which is responsible for enforcing policies, managing incidents, and coordinating with our external DPO and legal team."
    },
    {
      "fileName": "2vas3zv.pdf",
      "questionId": 13,
      "shortAnswer": true,
      "detailedAnswer": "Yes. CloudTalk supports HIPAA-compliant use cases for customers in the healthcare sector. We sign Business Associate Agreements (BAAs) with customers who process Protected Health Information (PHI)."
    },
    {
      "fileName": "uapd8bw.pdf",
      "questionId": 12,
      "shortAnswer": true,
      "detailedAnswer": ". The audit was conducted by an accredited independent third-party auditor. Our SOC 2 Type II report is available at trust.cloudtalk.io (NDA may be required for the full report). We renew our SOC 2 audit annually."
    },
    {
      "questionId": 11,
      "shortAnswer": true,
      "detailedAnswer": "Yes. CloudTalk is fully compliant with the General Data Protection Regulation (GDPR). We act as a data processor on behalf of our customers (controllers) when processing their data. Our compliance is supported by: a comprehensive Privacy Management System; a dedicated Privacy Officer and external Data Protection Officer (DPO privacy@cloudtalk.io ); Standard Contractual Clauses (SCCs) integrated into our standard DPA; Transfer Impact Assessments (TIAs) for all third-country transfers; participation in the EU–U.S. Data Privacy Framework (CloudTalk.io Inc.); and compliance audited under ISO 27001 and SOC 2 Type II. Our Privacy Notice and DPA are available at cloudtalk.io/privacy and trust.cloudtalk.io."
    },
    {
      "questionId": 10,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We restrict redirects and forwards to approved destinations only. Our secure development practices follow OWASP principles, which include unvalidated redirect and forward prevention as a standard control. Any redirect to an external or potentially untrusted URL is subject to validation against an approved allowlist. This control is verified through our SAST/DAST checks and external penetration tests."
    },
    {
      "questionId": 9,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We protect against mass parameter assignment (also known as mass assignment or over-posting) attacks. Our secure development practices follow OWASP guidelines, which include preventing mass assignment vulnerabilities as part of input validation and API security controls. These protections are validated through SAST/DAST scanning in our CI/CD pipeline and through periodic penetration testing."
    },
    {
      "questionId": 8,
      "shortAnswer": true,
      "detailedAnswer": "We are following our Personal Data Protection Policy requires data minimisation logs only capture what is necessary, although audit records may contain personal data. Logs are protected against tampering, and system administrators are not authorised to delete or modify their own activity records. Logging practices are reviewed during security audits and penetration tests."
    },
    {
      "questionId": 7,
      "shortAnswer": true,
      "detailedAnswer": "Yes. Multi-factor authentication (MFA/2FA) is mandatory for all employee access to systems that may process customer data. Our Access Management Policy requires 2FA wherever supported. Employees access internal systems and infrastructure via a secured VPN with mandatory 2FA. SSO with enforced MFA is the preferred authentication mechanism. Customers can also enforce 2FA for their own users through their SSO provider."
    },
    {
      "questionId": 6,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We apply the principle of least privilege across all access to customer data, enforced through our Access Management Policy. Access is granted only when there is a clear, ongoing business need and is assigned at the minimum level required for the role. We use Role-Based Access Control (RBAC) as our preferred model. AWS IAM least-privilege policies are enforced and reviewed at least annually. Access rights are reviewed during onboarding, role changes, and off-boarding, and a full annual access review is conducted by the Security team."
    },
    {
      "questionId": 5,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We perform input encoding and sanitization on all user-supplied parameters to protect against Cross-Site Scripting (XSS). Our secure development practices apply OWASP Secure Coding Principles, which include output encoding and input validation as mandatory controls. XSS vulnerabilities are explicitly identified in our Vulnerability Management Policy as code vulnerabilities to prevent. These controls are validated through SAST/DAST testing integrated into our CI/CD pipeline, as well as during periodic external penetration tests."
    },
    {
      "questionId": 4,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We implement CSRF protection on all state-changing actions. Our secure development practices follow OWASP principles, which include CSRF mitigation as a standard security requirement. CSRF protection is validated during security testing (SAST/DAST) and through our periodic penetration tests. Security requirements including protection against CSRF are incorporated into development from the design stage in line with our privacy-by-design approach."
    },
    {
      "questionId": 3,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We have a documented Incident Management Policy and Data Breach Response Policy. In the event of a confirmed security breach affecting customer data, we notify affected customers (acting as controller) without undue delay targeting within 24 hours of becoming aware. Our dedicated Data Breach Response Team, led by our Privacy Officer, coordinates notification. For GDPR purposes, supervisory authorities are notified within 72 hours. Customers can also monitor real-time status at status.cloudtalk.io and subscribe to incident notifications. Security issues can be reported to security@cloudtalk.io."
    },
    {
      "questionId": 2,
      "shortAnswer": true,
      "detailedAnswer": "Yes. We maintain a documented Vulnerability Management Policy covering the full lifecycle of vulnerabilities: identification, prioritisation, remediation, and verification. Our CI/CD pipeline includes automated security checks (SAST/DAST) that detect vulnerabilities before deployment. Patch SLAs are risk-based: Critical vulnerabilities must be fixed within the current sprint (max 2 weeks); High within the following sprint (~4 weeks); Medium within 4 sprints (~2 months); Low within 8 sprints (~3 months). Security patches for software packages and databases are applied continuously as part of our standard release process."
    },
    {
      "questionId": 1,
      "shortAnswer": true,
      "detailedAnswer": "Yes. Customer data is logically segregated at the application layer. Each customer's data is fully isolated through application-level logic, ensuring that no customer can access another customer's data. While customers share the same underlying AWS infrastructure, strict tenant isolation is enforced within the application and database layers. Data isolation is a core security requirement defined in our RND Security Policy."
    }
  ],
  "created_at": "2026-04-21T10:05:41.000Z",
  "updated_at": "2026-05-13T18:29:04.000Z",
  "automation_app_id": null,
  "marketplace_category_ids": [
    7,
    6,
    4
  ],
  "pinned_for_categories_ids": [],
  "featured_for_categories_ids": [],
  "pricing_data": "Free",
  "label": null,
  "app_values": [
    "Centralize your work on monday.com"
  ],
  "security": true,
  "display_in_template_store": false,
  "acquisition_source": "No touch",
  "is_connector": false,
  "terms_of_service_url": "https://www.cloudtalk.io/terms-and-conditions/?utm_campaign=14880563-Monday.com%20Marketplace&utm_source=monday_marketplace&utm_medium=referral",
  "available_for_tiers": [],
  "available_for_products": [],
  "google_analytics_tag_id": null,
  "is_solution": false,
  "cta_override": null,
  "app_scope_str": "me:read,boards:read,boards:write,users:read,updates:write,webhooks:write,webhooks:read",
  "app_client_id": "47d67e5642659ed5ee63cd52d2490ada",
  "app_color": {
    "hsl": {
      "h": 231.84,
      "s": 1,
      "l": 0.5098039215686274,
      "a": 1
    },
    "hex": "#0527ff",
    "rgb": {
      "r": 5,
      "g": 39,
      "b": 255,
      "a": 1
    },
    "hsv": {
      "h": 231.84,
      "s": 0.9803921568627451,
      "v": 1,
      "a": 1
    },
    "oldHue": 339.48387096774195,
    "source": "hex"
  },
  "plans": null,
  "app_live_version": {
    "updated_at": "2026-04-08T10:54:19.703Z",
    "id": 13445861
  },
  "pricing_model": null,
  "badges_data": {
    "security": true,
    "app_values": [
      "Centralize your work on monday.com"
    ],
    "pricing_data": "Free",
    "acquisition_source": "No touch",
    "display_in_template_store": false
  },
  "data": {
    "is_solution": false,
    "cta_override": null,
    "is_connector": false,
    "available_for_tiers": [],
    "terms_of_service_url": "https://www.cloudtalk.io/terms-and-conditions/?utm_campaign=14880563-Monday.com%20Marketplace&utm_source=monday_marketplace&utm_medium=referral",
    "available_for_products": [],
    "google_analytics_tag_id": null
  },
  "display": null,
  "installsDelta": {
    "totalInstalls": 128,
    "sevenDays": 2,
    "thirtyDays": 9
  }
}