Personal data
Email addresses, phone numbers, identity-like values, addresses, and personal-data contexts.
Education
How teams should think about scanning monday.com boards for accidental exposure without turning the tool into a compliance promise.
Email addresses, phone numbers, identity-like values, addresses, and personal-data contexts.
Card-like values, IBAN-like values, bank-account patterns, and surrounding financial context.
API keys, access-token shapes, private key markers, passwords in risky contexts, and webhook secret hints.
Terms and context that may indicate health notes, medical details, salary notes, candidate data, or employment-sensitive content.
Findings are triage prompts, not legal conclusions. Reviewers should confirm context, remediate the source board where needed, record the decision, and avoid copying raw sensitive values into support or exports.