Data Processing Addendum
MeshBoard DPA Baseline
This baseline outlines controller and processor responsibilities for the MeshBoard app. It is the publication path used for review and procurement checks before any customer-specific redline.
Roles
- Customer: controller for its monday workspace data.
- OverWhelming Tech / MeshBoard: processor for data handled on the customer's instructions.
- monday.com acts as the platform provider and source of the user-authorized data flow.
Security Commitments
- Token encryption at rest with Fernet for monday OAuth tokens.
- Scoped access control and account-ownership checks.
- Sanitized logging and pseudonymous observability tags.
- TTL-based transient cache and job-status handling.
Assistance and Subprocessors
Where requested, MeshBoard assists with access, deletion, correction, and portability requests that the controller is responsible for. A baseline subprocessor inventory is published separately and includes hosting, cache, observability, and payment-related infrastructure as applicable.
Transfer Language Baseline
Cross-border transfer safeguards are handled through the applicable contract stack, provider terms, and the published privacy policy. The final customer-facing redline can be attached to this baseline when a procurement review requires it.
Contact: info@overwhelmingtech.com