SECURITY & TRUST
Your Data Stays in monday.com
All APMD SOFT apps keep your data within the monday.com ecosystem — either processed in your browser, or run on monday.com's own infrastructure. No APMD SOFT servers. No external data storage.
YOUR DATA STAYS IN monday.com
Two Architectures, One Guarantee
Depending on the app, data is processed either in your browser or on monday.com's own infrastructure. Neither path involves APMD SOFT servers.
Frontend-only apps
Bulk Item & Subitem Editor · Files Manager · Table Exporter
monday code–powered apps
Advanced Templates · Connect+Sync Automations
TRANSPARENCY
What We Do — What We Don't
Non-technical? Here's the plain-language version of our data practices.
What We Do
- Read your board data via monday.com API
- Process data in your browser (3 apps) or on monday.com's infrastructure (2 apps)
- Let monday.com handle all authentication
- Keep your data within the monday.com ecosystem at all times
- Let you uninstall with zero data retained on APMD SOFT's end
What We Don't Do
- Store copies of your board data on APMD SOFT servers
- Run our own backend servers or data pipelines
- Access your data at runtime — even for monday code apps
- Log, cache, or export your board data
- Retain any board data after you close or uninstall the app
Exception: Files Manager stores user-created label names (not board content) to persist your labeling preferences. These labels contain no monday.com board data.
monday code apps: Advanced Templates and Connect+Sync run backend logic on monday.com's own infrastructure. APMD SOFT has no runtime access to your data — monday.com manages the environment.
HOW WE PROTECT YOUR DATA
Security by Default
No APMD SOFT servers
Data is processed either in your browser or on monday.com's own infrastructure via monday code. Nothing passes through APMD SOFT servers.
No board data stored
We don't store your monday.com board data. Not in databases, not in logs, not in caches. Data stays in the monday.com ecosystem.
GDPR — privacy by design
Frontend-only apps process data locally. monday code apps run on monday.com's GDPR-certified infrastructure. We support your compliance obligations by design.
Security reviewed every release
Each release includes a security review before deployment to the monday.com marketplace.
Platform-managed authentication
All authentication is handled by monday.com. We never see or store your credentials.
Open to questions
We're happy to complete security questionnaires and answer questions for IT and procurement teams.
PER-APP DETAILS
What Each App Accesses
A complete breakdown of data access, storage, and processing location for every APMD SOFT app.
| App | Data accessed | Stored externally | Processing | Backend provider |
|---|---|---|---|---|
| Advanced Templates | Board structure, items, subitems, column definitions | None | monday code ‡ | monday.com |
| Bulk Item & Subitem Editor | Items, subitems, column values | None | Your browser | None |
| Connect+Sync Automations | Items across boards, column values | None | monday code ‡ | monday.com |
| Files Manager | File metadata, attachment names | User-created label names only | Your browser | None |
| Table Exporter | Board/workdoc data, column values | None | Your browser | None |
| Formula Trigga | Column values referenced in formulas | None — all data remains on monday.com | monday.com platform | monday.com |
† API calls for Connect+Sync traverse monday.com's own infrastructure, covered by monday.com's SOC 2 and ISO 27001 certifications.
‡ monday code is monday.com's built-in app hosting platform. Backend logic runs on monday.com's servers. APMD SOFT deploys code but has no runtime access to your data.
COMPLIANCE
Certifications & Standards
We're honest about what we have and what we don't — and why our architecture makes most certifications unnecessary.
monday.com Bronze Partner
Verified
Listed and verified on the monday.com marketplace as a Bronze Partner.
GDPR
Privacy by design
We process board data in-browser only. We are not a data processor for your monday.com board data and do not require a DPA for core app usage. DPA available on request for Files Manager label data.
SOC2 / ISO 27001
Via monday.com
Not applicable to APMD SOFT directly. Your board data at rest and in transit is covered by monday.com's own SOC2 Type II and ISO 27001 certifications.
HIPAA
Not certified
Our apps are not designed for HIPAA-covered data. Do not use them to process protected health information.
monday.com Trust Center
monday.com holds SOC2 Type II, ISO 27001, and more. Since our apps only access your data through the monday.com API, your data at rest is covered by their certifications.
monday.com Trust Center →(opens in new tab)LEGAL DOCUMENTS
Documentation
Privacy Policy
Covers data practices for the APMD SOFT website and apps.
Last reviewed: February 2026
View Privacy PolicyTerms of Service / EULA
License terms and end-user agreement for all APMD SOFT apps.
Last reviewed: February 2026
View Terms of Service / EULAData Processing Agreement
Available on request for Files Manager label data processing.
Request DPA
QUESTIONS
Frequently Asked Security Questions
No. Frontend-only apps (Bulk Editor, Files Manager, Table Exporter) process everything in your browser and store nothing. Apps using monday code (Advanced Templates, Connect+Sync) run backend logic on monday.com's own infrastructure — your board data stays within the monday.com ecosystem and APMD SOFT has no access to it. Files Manager is the one exception that stores user-created label names (not board content) to persist your preferences.
No — for any app. Frontend-only apps process data entirely in your browser; nothing is transmitted to us. For apps using monday code (Advanced Templates, Connect+Sync), we deploy code to monday.com's platform but have zero runtime visibility into your board data. monday.com runs the code; we do not.
Our frontend-only apps process data in your browser and store nothing on our servers, so APMD SOFT is not a data processor for that data. Apps using monday code run on monday.com's infrastructure, which is GDPR, HIPAA, ISO 27001, and SOC 2 certified. For Files Manager label names, we offer a DPA on request.
Not directly. For our frontend-only apps, the traditional scope of SOC 2 (servers, databases, personnel) does not apply — there are no APMD SOFT servers involved. For Advanced Templates and Connect+Sync, the backend runs on monday code, which is covered by monday.com's own SOC 2 Type II and ISO 27001 certifications.
Advanced Templates and Connect+Sync Automations use monday code — monday.com's built-in app hosting platform. This means their backend logic runs directly on monday.com's infrastructure rather than in your browser. There are no APMD SOFT servers involved. monday.com manages security, compliance, and runtime isolation. We deploy code; monday.com runs it.
Nothing to clean up on our end — we never stored your board data. For monday code apps, the runtime environment is managed by monday.com and isolated per installation. For Files Manager labels, uninstalling removes them from monday.com's board column data automatically.
RESPONSIBLE DISCLOSURE
Found a Security Issue?
We take all security reports seriously. If you've found a vulnerability in any of our apps or website, please let us know — we'll respond within 48 hours.
Report a security issueQUESTIONS ABOUT SECURITY?
We're Happy to Answer
Have specific security requirements? Need to complete a vendor questionnaire? We'll respond within 48 hours.
- 48-hour response
- Security questionnaires welcome
- DPA on request
Security page last reviewed: February 2026