monday.com
B
71 of 100
Enterprise AI readiness, from public pages only
Scanned 2026-11-01 from 65 public pages. Methodology 1.0. Category: CRM.
| Identity | 9 of 14 | |
| Assurance | 23 of 25 | |
| Data and AI terms | 14 of 21 | |
| Deployment | 4 of 10 | |
| Agent readiness | 8 of 12 |
Identity
SAML or OIDC single sign-on (10 points) Partly found
Permissions including role-based access, SSO, and data residency
source
SCIM provisioning (6 points) Under review
Roles and permissions (4 points) Found
The Enterprise plan includes multi-level permissions across accounts, workspaces, boards, and columns, along with Advanced Admin Controls, Custom Roles, and item-level restrictions
source
Assurance
security.txt (2 points) Not found in public pages
Pages searched (1)
https://monday.com/.well-known/security.txt
Bug bounty or disclosure program (2 points) Found
Data and AI terms
No training on customer data (8 points) Found
We never train our AI on your data - and we never will.
source
Retention periods (5 points) Not found in public pages
Pages searched (3)
https://monday.com/trustcenter/privacy/overviewhttps://monday.com/l/privacy/privacy-policy/https://support.monday.com/hc/en-us/articles/31119344104082-Security-and-privacy-on-monday-com-FAQs
Subprocessor list (5 points) Under review
Data processing agreement (4 points) Found
Data residency (4 points) Partly found
monday.com stores data in data centers located in the US, Germany, and Australia. Data is stored in the data center closest to the location of the first user who created the account.
source
Deployment
Private deployment (6 points) Not found in public pages
Pages searched (1)
https://monday.com/w/ai-info
Customer-managed keys (4 points) Found
Agent readiness
Public API reference (5 points) Under review
Official MCP server (6 points) Found
com.monday/monday.com: MCP server for monday.com integration.
source
Controls on AI agent actions (4 points) Not found in public pages
Pages searched (20)
https://monday.com/trustcenterhttps://monday.com/l/https://monday.com/w/ai-trust-centerhttps://monday.com/trustcenterhttps://monday.com/trustcenter/isohttps://monday.com/p/partner-solution/cyber-security-management-solution-csms/https://monday.com/security/formhttps://monday.com/p/partner-solution/iso-9001-compliancepro/https://monday.com/trustcenter/datasecurehttps://monday.com/trustcenter/securityhttps://monday.com/trustcenter/securitypolicieshttps://support.monday.com/hc/en-us/articles/23227256685842-AI-FAQshttps://monday.com/l/https://monday.com/w/sidekickhttps://monday.com/features/workflowshttps://monday.com/w/ai-templateshttps://monday.com/w/ai-templateshttps://monday.com/w/ai-infohttps://monday.com/w/mcphttps://monday.com/w/integrations
Audit log export (2 points) Under review
AI use policy (2 points) Found
Rate limits documented (not scored) Under review
Changelog
- 2026-11-01: 82 to 71 (rescan) Controls on AI agent actions: Could not check to Not found in public pages; Data residency: none to Partly found; Private deployment: Could not check to Not found in public pages; SCIM provisioning: Could not check to under review
- 2026-11-01: 83 to 82 (rescan) AI use policy: Could not check to Found; Audit log export: Found to under review; No training on customer data: Could not check to Found; Data residency: Could not check to under review; Retention periods: Could not check to Not found in public pages; Subprocessor list: Partly found to under review; Roles and permissions: Could not check to Found
- 2026-11-01: First score, 83
Scores older than an hour can be refreshed.