monday.com
B
71 of 100
Enterprise AI readiness, from public pages only
Scanned 2026-11-01 from 65 public pages. Methodology 1.0. Category: CRM.
| Identity | 9 of 14 | |
| Assurance | 23 of 25 | |
| Data and AI terms | 14 of 21 | |
| Deployment | 4 of 10 | |
| Agent readiness | 8 of 12 |
Trend and peers iHow the score moved over the last scans, how it compares with other scored companies in the same market category, and what about the last scan means the score may still move. Everything comes from public pages.
One graded scan so far. The trend shows after the next one.
Peers
Not enough scored companies in this category yet.
Likely to change iWhat about the last scan means the score may still move: checks that could not be read, findings waiting for review, an old scan, an older methodology, or a scan that hit its page limit. These describe the scan, not the company.
- 5 findings are waiting for staff review.
Identity
SAML or OIDC single sign-on (10 points) Partly found
Permissions including role-based access, SSO, and data residency
source
SCIM provisioning (6 points) Under review
Roles and permissions (4 points) Found
The Enterprise plan includes multi-level permissions across accounts, workspaces, boards, and columns, along with Advanced Admin Controls, Custom Roles, and item-level restrictions
source
Assurance
security.txt (2 points) Not found in public pages
Pages searched (1)
https://monday.com/.well-known/security.txt
Bug bounty or disclosure program (2 points) Found
Data and AI terms
No training on customer data (8 points) Found
We never train our AI on your data - and we never will.
source
Retention periods (5 points) Not found in public pages
Pages searched (3)
https://monday.com/trustcenter/privacy/overviewhttps://monday.com/l/privacy/privacy-policy/https://support.monday.com/hc/en-us/articles/31119344104082-Security-and-privacy-on-monday-com-FAQs
Subprocessor list (5 points) Under review
Data processing agreement (4 points) Found
Data residency (4 points) Partly found
monday.com stores data in data centers located in the US, Germany, and Australia. Data is stored in the data center closest to the location of the first user who created the account.
source
Deployment
Private deployment (6 points) Not found in public pages
Pages searched (1)
https://monday.com/w/ai-info
Customer-managed keys (4 points) Found
Agent readiness
Public API reference (5 points) Under review
Official MCP server (6 points) Found
com.monday/monday.com: MCP server for monday.com integration.
source
Controls on AI agent actions (4 points) Not found in public pages
Pages searched (20)
https://monday.com/trustcenterhttps://monday.com/l/https://monday.com/w/ai-trust-centerhttps://monday.com/trustcenterhttps://monday.com/trustcenter/isohttps://monday.com/p/partner-solution/cyber-security-management-solution-csms/https://monday.com/security/formhttps://monday.com/p/partner-solution/iso-9001-compliancepro/https://monday.com/trustcenter/datasecurehttps://monday.com/trustcenter/securityhttps://monday.com/trustcenter/securitypolicieshttps://support.monday.com/hc/en-us/articles/23227256685842-AI-FAQshttps://monday.com/l/https://monday.com/w/sidekickhttps://monday.com/features/workflowshttps://monday.com/w/ai-templateshttps://monday.com/w/ai-templateshttps://monday.com/w/ai-infohttps://monday.com/w/mcphttps://monday.com/w/integrations
Audit log export (2 points) Under review
AI use policy (2 points) Found
Rate limits documented (not scored) Under review
Changelog
- 2026-11-01: 82 to 71 (rescan) Controls on AI agent actions: Could not check to Not found in public pages; Data residency: none to Partly found; Private deployment: Could not check to Not found in public pages; SCIM provisioning: Could not check to under review
- 2026-11-01: 83 to 82 (rescan) AI use policy: Could not check to Found; Audit log export: Found to under review; No training on customer data: Could not check to Found; Data residency: Could not check to under review; Retention periods: Could not check to Not found in public pages; Subprocessor list: Partly found to under review; Roles and permissions: Could not check to Found
- 2026-11-01: First score, 83
Scores older than an hour can be refreshed.