Workspace Doctor

Tiberiu Jinga

16 installs, since June 15, 2026. 8 installs/month. App updated July 8, 2026. Listing updated July 21, 2026.

Hosted by monday.com Not paid No touch

Reporting & analytics Productivity & efficiency Team management

View on Marketplace

Scan, score & fix your monday workspace in one click

Workspace Doctor is a one-click health check for your monday.com account. Built for admins, ops leads, and workspace owners on large or fast-growing accounts, it scans every board for the issues that quietly slow teams down — stale work, status-label drift across boards, items assigned to people who left, and workspaces no one uses.

You get a single 0–100% health score across four categories, plus a prioritized list of findings you can act on directly: archive a stale board in one click, jump straight to affected items, and tune thresholds to your team's cadence.

🩺 What it scans:

📋 Board Health - boards no one has updated past your staleness threshold, and boards left empty past the grace period.

🏷️ Status Consistency (the headline feature) - three-layer detection of label drift: fuzzy matching for typos ("Done"/"done!"), a dictionary for synonyms ("Completed"/"Resolved"), and AI embeddings for domain terms ("Wrapped Up"). Same-column exclusion prevents false positives.

👤 User Hygiene - items still assigned to deactivated users, so handoffs don't fall through the cracks.

📊 Adoption - workspaces with very low recent activity: abandoned imports, half-started initiatives, ghost departments.

📈 Track, schedule & share - a history chart shows your score trend over 30/90/365 days. Weekly checks run on the day you choose, an email summary lands when a check finishes, and findings export to CSV for stakeholders.

💡 When to use it - before a quarterly cleanup, after a reorg or offboarding wave, or on a weekly schedule to stay tidy as you scale.

🔒 Privacy & data handling - runs entirely on monday's own infrastructure (monday code), never on third-party servers; data is encrypted at rest (AES-256). Only anonymous status labels reach the AI layer - never board content, item names, or user details. Four minimal OAuth scopes, and everything is deleted on uninstall.

💬 Questions or feedback? leano-app.com/workspace-doctor or leano-app.com/contact.

Security & Compliance

Security

Does the developer periodically perform penetration testing?

Not answered

Does the developer have a dedicated security and privacy point of contact for such issues or questions?

Yes

support@leano-app.com

Does the app restrict redirects and forwards only to approved destinations, or show a warning when redirecting to potentially untrusted content?

Yes

The only redirect is the fixed OAuth REDIRECT_URI; "View in monday" links are https:// with validated slug/board-id; never user-supplied URLs.

Does the app protect against mass parameter assignment attacks?

Yes

zod strips unknown keys (no .passthrough()); DB writes use an explicit key allow-list.

Does the app perform encoding and sanitization on all user supplied parameters to protect against Cross-Site Scripting?

Yes

zod validates every endpoint server-side; React auto-escapes all rendered data; no dangerouslySetInnerHTML/eval.

Does the developer protect all state-changing actions against Cross-Site Request Forgery (CSRF)?

Yes

Auth is a monday session JWT in the Authorization header (not cookies) → no CSRF surface; OAuth uses an HMAC-signed state.

Does the developer have mechanisms to notify monday.com in case of a security breach?

Yes

Notify monday via partner support within 24h, notify affected customers via support@leano-app.com, document remediation.

Does this developer have a process for installing application-level updates and security patches for the service (such as software packages and databases)?

Yes

Platform patches by monday code; deps via npm/npm audit; fixes deployed via mapps code:push.

Compliance

Is the app certified with the information security standard ISO/IEC 27001:2022?

Not answered

Is the app compliant with the Health Insurance Portability and Accountability Act (HIPAA)?

Not answered

Is the app certified with System and Organization Controls (SOC 2 or SOC 3)?

Not answered

Is the app compliant with the General Data Protection Regulation (GDPR)?

Yes

Lawful basis (OAuth consent), data minimization, deletion-on-uninstall, access via iframe, privacy policy.

Data

Does the app send any data outside of monday.com? If yes, indicate whether the data is customer-submitted (e.g., board names, item names, doc content) or non-customer-submitted (e.g., account ID, board ID, user ID).

Yes

Yes - short status-label strings (e.g. "Done", "In Progress") to OpenAI's text-embedding-3-small for clustering. No IDs, names, emails, PII, or item/board content. (Customer-submitted: status labels only.)

Where does the app store logs data?

monday

monday code's centralized log stream via the SDK Logger; no external log store.

Where does the app store the app data?

monday

monday code Document DB for scan results/settings; OAuth tokens in SecureStorage, encrypted at rest.

Does the developer ensure application logs do not contain secrets or personally-identifiable information (PII)?

Yes

Logs contain IDs + counts only — never tokens, names, emails, or board/item content.

Is customer data segregated from the data of other customers (for example logically or physically)?

Yes

Every query/storage op filters by accountId from the verified JWT; Document DB is per-app; no cross-account path.

Privacy

Does the developer enforce multi-factor authentication on employees access to systems which may process customer data?

Yes

Solo developer, no employees; MFA/2FA enabled on all systems that touch customer data (GitHub, monday Dev Center, OpenAI, Cloudflare, GoDaddy).

Does the developer protect access to customer data based on the principle of least privilege?

Yes

Only 4 OAuth scopes; tokens in SecureStorage (encrypted); no human reads customer data — only app code runs the operations the customer authorized.

Reviews

No reviews yet.

Historical data

Installation history

Min

Current

Ratings history

Categories history

Each of the following is a yes/no answer, so the graphs show 1 for yes, and 0 for no.

In "Featured" category?

In "Editor's choice" category?

In "Trending this week" category?

App metadata

ID: 10001222 • App ID: 11274712 • Listing updated: July 21, 2026

{
  "id": 10001222,
  "marketplace_developer_id": 100000235,
  "app_id": 11274712,
  "app_type": "app",
  "security_info": {},
  "gallery_assets": [
    {
      "url": "https://cdn.monday.com/marketplace/10001222/10001222_2026_6_7_21_6_27_of38lwl.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001222/10001222_2026_6_7_21_7_3_a7h4i99l.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001222/10001222_2026_6_7_21_7_20_cbwwk0c.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001222/10001222_2026_6_7_21_7_39_bv3p8vx.png",
      "type": "image"
    },
    {
      "url": "https://cdn.monday.com/marketplace/10001222/10001222_2026_6_7_21_7_51_xssg4il.png",
      "type": "image"
    }
  ],
  "description": "<p><strong>Workspace Doctor</strong> is a one-click health check for your monday.com account. Built for admins, ops leads, and workspace owners on large or fast-growing accounts, it scans every board for the issues that quietly slow teams down — stale work, status-label drift across boards, items assigned to people who left, and workspaces no one uses.</p><p><br></p><p>You get a single 0–100% <strong>health score</strong> across four categories, plus a prioritized list of findings you can act on directly: archive a stale board in one click, jump straight to affected items, and tune thresholds to your team's cadence.</p><p><br></p><p>🩺&nbsp;What it scans:</p><p><br></p><p>📋&nbsp;Board Health&nbsp;- boards no one has updated past your staleness threshold, and boards left empty past the grace period.</p><p><br></p><p>🏷️&nbsp;Status Consistency&nbsp;(the headline feature) - three-layer detection of <strong>label drift</strong>: fuzzy matching for typos (\"Done\"/\"done!\"), a dictionary for synonyms (\"Completed\"/\"Resolved\"), and AI embeddings for domain terms (\"Wrapped Up\"). Same-column exclusion prevents false positives.</p><p><br></p><p>👤&nbsp;User Hygiene&nbsp;- items still assigned to deactivated users, so handoffs don't fall through the cracks.</p><p><br></p><p>📊&nbsp;Adoption&nbsp;- workspaces with very low recent activity: abandoned imports, half-started initiatives, ghost departments.</p><p><br></p><p>📈&nbsp;Track, schedule &amp; share&nbsp;- a history chart shows your score trend over 30/90/365 days. Weekly checks run on the day you choose, an email summary lands when a check finishes, and findings export to CSV for stakeholders.</p><p><br></p><p>💡&nbsp;When to use it&nbsp;- before a quarterly cleanup, after a reorg or offboarding wave, or on a weekly schedule to stay tidy as you scale.</p><p><br></p><p>🔒&nbsp;Privacy &amp; data handling&nbsp;- runs entirely on monday's own infrastructure (monday code), never on third-party servers; data is encrypted at rest (AES-256). Only anonymous status labels reach the AI layer - never board content, item names, or user details. Four minimal OAuth scopes, and everything is deleted on uninstall.</p><p><br></p><p>💬 Questions or feedback? leano-app.com/workspace-doctor or leano-app.com/contact.</p>",
  "short_description": "Scan, score & fix your monday workspace in one click",
  "thumbnail_url": "https://cdn.monday.com/marketplace/10001222/10001222_2026_5_15_7_25_28_tljgro6j.png",
  "logo_url": "https://cdn.monday.com/marketplace/10001222/10001222_2026_5_15_7_25_26_bk4zg9m.png",
  "feedback_url": "https://leano-app.com/contact/",
  "privacy_policy_url": "https://leano-app.com/workspace-doctor/privacy/",
  "featured": false,
  "name": "Workspace Doctor",
  "how_to_use_url": "https://leano-app.com/workspace-doctor/docs/",
  "external_pricing_url": null,
  "keywords": "admin tools,deactivated users,label consistency,status labels,stale boards,health check,monday admin,board cleanup,workspace cleanup,workspace audit",
  "compliance_answers": [
    {
      "questionId": 19,
      "shortAnswer": true,
      "detailedAnswer": "Yes - short status-label strings (e.g. \"Done\", \"In Progress\") to OpenAI's text-embedding-3-small for clustering. No IDs, names, emails, PII, or item/board content. (Customer-submitted: status labels only.)"
    },
    {
      "questionId": 18,
      "detailedAnswer": "monday code's centralized log stream via the SDK Logger; no external log store.",
      "logHostingProvider": "monday"
    },
    {
      "questionId": 17,
      "detailedAnswer": "monday code Document DB for scan results/settings; OAuth tokens in SecureStorage, encrypted at rest.",
      "dataHostingProvider": "monday"
    },
    {
      "questionId": 14,
      "shortAnswer": true,
      "detailedAnswer": "support@leano-app.com"
    },
    {
      "questionId": 11,
      "shortAnswer": true,
      "detailedAnswer": "Lawful basis (OAuth consent), data minimization, deletion-on-uninstall, access via iframe, privacy policy."
    },
    {
      "questionId": 10,
      "shortAnswer": true,
      "detailedAnswer": "The only redirect is the fixed OAuth REDIRECT_URI; \"View in monday\" links are https:// with validated slug/board-id; never user-supplied URLs."
    },
    {
      "questionId": 9,
      "shortAnswer": true,
      "detailedAnswer": "zod strips unknown keys (no .passthrough()); DB writes use an explicit key allow-list."
    },
    {
      "questionId": 8,
      "shortAnswer": true,
      "detailedAnswer": "Logs contain IDs + counts only — never tokens, names, emails, or board/item content."
    },
    {
      "questionId": 7,
      "shortAnswer": true,
      "detailedAnswer": "Solo developer, no employees; MFA/2FA enabled on all systems that touch customer data (GitHub, monday Dev Center, OpenAI, Cloudflare, GoDaddy)."
    },
    {
      "questionId": 6,
      "shortAnswer": true,
      "detailedAnswer": "Only 4 OAuth scopes; tokens in SecureStorage (encrypted); no human reads customer data — only app code runs the operations the customer authorized."
    },
    {
      "questionId": 5,
      "shortAnswer": true,
      "detailedAnswer": "zod validates every endpoint server-side; React auto-escapes all rendered data; no dangerouslySetInnerHTML/eval."
    },
    {
      "questionId": 4,
      "shortAnswer": true,
      "detailedAnswer": "Auth is a monday session JWT in the Authorization header (not cookies) → no CSRF surface; OAuth uses an HMAC-signed state."
    },
    {
      "questionId": 3,
      "shortAnswer": true,
      "detailedAnswer": "Notify monday via partner support within 24h, notify affected customers via support@leano-app.com, document remediation."
    },
    {
      "questionId": 2,
      "shortAnswer": true,
      "detailedAnswer": "Platform patches by monday code; deps via npm/npm audit; fixes deployed via mapps code:push."
    },
    {
      "questionId": 1,
      "shortAnswer": true,
      "detailedAnswer": "Every query/storage op filters by accountId from the verified JWT; Document DB is per-app; no cross-account path."
    }
  ],
  "created_at": "2026-06-15T07:23:23.000Z",
  "updated_at": "2026-07-21T11:26:59.000Z",
  "automation_app_id": null,
  "marketplace_category_ids": [
    9,
    6,
    5
  ],
  "pinned_for_categories_ids": [],
  "featured_for_categories_ids": [],
  "pricing_data": null,
  "label": null,
  "app_values": [
    "Easier resource management"
  ],
  "security": false,
  "display_in_template_store": false,
  "acquisition_source": "No touch",
  "is_connector": false,
  "show_connections": false,
  "terms_of_service_url": "https://leano-app.com/workspace-doctor/terms/",
  "available_for_tiers": [],
  "available_for_products": [],
  "google_analytics_tag_id": null,
  "is_solution": false,
  "cta_override": null,
  "app_scope_str": "boards:read,boards:write,users:read,workspaces:read",
  "app_client_id": "c0ad03d0e2a6e0d54a5ec6093d756d95",
  "app_color": {
    "hsl": {
      "h": 144.22018348623854,
      "s": 0.6089385474860335,
      "l": 0.3509803921568627,
      "a": 1
    },
    "hex": "#23904f",
    "rgb": {
      "r": 35,
      "g": 144,
      "b": 79,
      "a": 1
    },
    "hsv": {
      "h": 144.22018348623854,
      "s": 0.7569444444444444,
      "v": 0.5647058823529412,
      "a": 1
    },
    "oldHue": 346.890756302521,
    "source": "hex"
  },
  "plans": null,
  "app_live_version": {
    "updated_at": "2026-07-08T11:39:00.899Z",
    "id": 15817447
  },
  "pricing_model": null,
  "monetization": {
    "monetizationType": "none",
    "hasFreePlan": false,
    "hasPaidPlan": false,
    "hasTrialPlan": false
  },
  "badges_data": {
    "security": false,
    "app_values": [
      "Easier resource management"
    ],
    "acquisition_source": "No touch",
    "display_in_template_store": false
  },
  "data": {
    "is_solution": false,
    "cta_override": null,
    "is_connector": false,
    "show_connections": false,
    "available_for_tiers": [],
    "terms_of_service_url": "https://leano-app.com/workspace-doctor/terms/",
    "available_for_products": [],
    "google_analytics_tag_id": null
  },
  "display": null,
  "installsDelta": {
    "totalInstalls": 16,
    "sevenDays": 2,
    "thirtyDays": 10
  }
}

Workspace Doctor

Scan, score & fix your monday workspace in one click

Security & Compliance

Security

Compliance

Data

Privacy

Reviews

Historical data

Installation history

Total number of installs

Change in total number of installs in last 1 day(s)

Change in total number of installs in last 7 day(s)

Change in total number of installs in last 30 day(s)

Change in total number of installs in last 90 day(s)

Change in total number of installs in last 180 day(s)

Ratings history

Categories history

In "Featured" category?

In "Editor's choice" category?

In "Trending this week" category?

App metadata

Table of Contents