Vendor record · monday.com
What Monday.com promises about your data.
Where Monday.com publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Monday.com lists its sub-processors at monday.com/l/privacy/sub-processors-subsidiaries-support/. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between September 13, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at monday.com/l/privacy/dpa/ (read September 30, 2026) gives you 7 days to object.
- Window
- 7
- Sub-processors
- 34
- Pages
- 7
- Copies
- 27
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Monday.com DPA
Monday.com's data processing agreement gives 7 days to object to a new sub-processor. Here is the clause, from our September 30, 2026 copy:
7
days to object
“Where Customer has not objected within such seven (7) day period in the manner described above, the use of the new Sub-Processor shall be deemed accepted by Customer.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Monday.com published it.
monday.com/l/privacy/dpa/ · read 2026-09-30 · fingerprint 668057063ccac4d2…
How it says it sends notice
“The Sub-processor Page offers a mechanism to subscribe to notifications of the engagement of new and the replacement of existing Sub-processors (“Sub-processor Notice”) and Customer acknowledges that it shall subscribe to this mechanism upon entering this DPA and that the notifications sent through this mechanism fulfils the Processor’s obligations to notify Customer of the appointment of a n…”
monday.com/l/privacy/dpa/ · read 2026-09-30
Notice windows across every vendor we watch · Silence as consent
Monday.com sub-processors
Monday.com publishes a sub-processor list at monday.com/l/privacy/sub-processors-subsidiaries-support/; we last read it on October 15, 2026. It names 34 entries. The first 15, as the list prints them: AlphaAI Technologies Inc. dba Tavily; Amazon Web Services EMEA SARL; Anthropic PBC; Cloudflare, Inc.; Cloudinary Ltd.; Coralogix, Inc.; Datadog, Inc.; dbt Labs, Inc.; EON.io Ltd.; Exa Labs, Inc.; Fortinet, Inc.; Foundever Operating Corporation Limited; Functional Software, Inc. dba Sentry; Google Cloud EMEA Limited; Hyperdoc Inc. (Recall.ai); and 19 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
34 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Monday.com keeps your data
We hold no statement about data retention from Monday.com's watched pages. The pages we watch: changelog monday.com/whats-new; data processing agreement monday.com/l/privacy/dpa/; pricing page monday.com/pricing; privacy policy monday.com/privacy; sub-processor list monday.com/l/privacy/sub-processors-subsidiaries-support/; terms of service monday.com/terms; trust and security page monday.com/security. On training with customer data, Monday.com's privacy policy (monday.com/privacy, in the copy read October 7, 2026) says: “Data Uses & Legal Bases We use personal data as necessary for the performance of our Services (“Performance of Contract”); to comply with our legal and contractual obligations (“Legal Obligations**”); and to support our legitimate interests in maintaining and improving our Services, e.g. in understanding how our Services are used and how our campaigns are performing, and gaining insights …”
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 34 · 2 name an AI provider we list
AlphaAI Technologies Inc. dba Tavily
AI Work Platform
Amazon Web Services EMEA SARL
Platform services, Storage.API
Anthropic PBCAI · Anthropic
AI Work Platform
Cloudflare, Inc.
Platform services
Global*
Cloudinary Ltd.
Platform services
Coralogix, Inc.
Platform services, WorkCanvas
Also applicable to accounts in monday.com US & APAC data regions
Datadog, Inc.
Platform services, WorkCanvas
Also applicable to accounts in monday.com US & APAC data regions
dbt Labs, Inc.
AI Work Platform
EON.io Ltd.
Platform services
Exa Labs, Inc.
AI Work Platform
Fortinet, Inc.
Platform services
Foundever Operating Corporation Limited
Poland
Functional Software, Inc. dba Sentry
Platform services, WorkCanvas
Also applicable to accounts in monday.com APAC & EU (non-Enterprise plans only)…
Google Cloud EMEA Limited
Platform services, WorkCanvas, monday code, WorkAssests
US
Hyperdoc Inc. (Recall.ai)
AI Work Platform
US
Lakera AI AG
AI Work Platform, WorkAssets
US
LangChain Inc.
AI Work Platform
EU
Mailgun Technologies, Inc.
Platform services
Data in email invites and notifications ( [ further information ](https://suppo…
Microsoft Corp.
Platform services
monday.com Ltd.
Israel
MONDAY.COM, S.A. DE C.V.
Mexico
monday.com K.K.
Japan
monday.com Ltda.
Brasil
monday.com Pte. Ltd.
Singapore
monday.com sp. z o.o.
Poland
monday.com UK 2020 Ltd.
United Kingdom
Nebius Inc.
Platform services
OpenAI, L.L.C.AI · OpenAI
AI Work Platform
Redis Labs, Ltd.
Platform services
Snowflake Computing Netherlands B.V.
AI Work Platform
EU
Superpowered Labs Inc dba Vapi
AI Work Platform
Transactel International Services Limited d/b/a TELUS International
Guatemala
Twilio Inc. (SendGrid)
Platform services, WorkCanvas
Data in email invites and notifications ( [ further information ](https://suppo…
WorkCanvas, WorkAssests
Cloud computing provider
US
Certifications the trust page names · CSA STAR · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · SOC 1 · SOC 2 · SOC 2 Type II · SOC 3 · TX-RAMP
Laws the trust page names · GDPR · HIPAA
The pages' own stamps: Last Updated 2026-10-01 · Last Updated 2026-06-24 · Last Updated 2023-12-20 · revised 2020-09-25 · version 2020-09-03
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Monday.com. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Monday.com? With an email at monday.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Monday.com in your product? Hear the morning we read a change.
You get the lines that moved, in Monday.com’s own words, and the date any window closes. No card. Nothing to cancel.