Access and isolation
The application validates signed monday sessions, scopes application records to the account, and checks the current user’s access to the associated board before commercial workflows. Guest and viewer permissions are restricted. These controls do not constitute an independent certification.
Contracts and AI
Contracts are treated as untrusted input. Uploads accept one PDF of at most 25 MiB. AI, when enabled by the operator, proposes terms for human review; it does not approve change orders, issue invoices or collect payments. The selected provider and processing roles are described in the subprocessors page.
Hosting and data protection
The launch targets monday Code and its Document DB, Object Storage and SecureStorage services. Platform encryption, regions, backup retention and restoration procedures require confirmation from monday. We do not claim a separate security certification, Canadian residency or a verified zero-retention guarantee.
Deletion and incident contact
Application deletion uses tracked cleanup and retains failed work for retry. Platform-owned logs and backups follow the platform’s applicable terms; deleting active app records does not establish erasure of every platform copy. Report a security concern to hello@silentcoretech.com without sending credentials or client contracts.