monday.com’s sub-processors for EU Data Region: In-depth information
This document provides further information on the third-party sub-processors that are used in monday.com’s EU data region which provide monday.com with infrastructure and functionalities within the monday.com service. For the full list of sub-processors, subsidiaries and support providers, please see our Sub-processors Page at the following link.
Amazon Web Services EMEA SARL
Type of service: Cloud computing provider; monday.com’s main infrastructure provider; generative AI functionalities for AI features
Data processed: Full account data
Hosting location: EU region (Germany)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: 38 Avenue John F. Kennedy, L-1855, Luxembourg
Sub-processor’s website: https://aws.amazon.com
Google Cloud EMEA Limited
Type of service: Cloud computing provider
Data processed: Data in mobile notifications, data found in logs of apps that were built using mondycode, and data from forms structure
Hosting location: EU region (Germany)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Sub-processor’s website: https://cloud.google.com
Redis Labs, Ltd.
Type of service: Managed database platform, hosted in a dedicated VPC within monday.com’s AWS account
Data processed: Full account data
Hosting location: EU region (Germany)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: Alon 2 Tower, 32nd Floor, 94 Yigal Alon St., Tel-Aviv 6789140, Israel
Sub-processor’s website: https://redis.io
Cloudflare, Inc.
Type of service: CDN for forms and broadcasted boards; security services (DDoS Protection, Bot Management, Rate limiting, Web Application Firewall, SSL/TLS/DNSSEC)
Data processed: Full account data
Hosting location: Global (CDNs distribute data globally across various data centers to ensure high availability and performance. As a result, customer data is processed at the data center closest to the end user (PoP))
Transfer mechanism: The EU-U.S. DPF, UK and EU Adequacy Decisions, SCC
Contracting entity address: 101 Townsend Street, San Francisco, CA 94107, USA
Sub-processor’s website: https://www.cloudflare.com
NetApp Israel (formerly Instacluster Pty Ltd.)
Type of service: Managed database platform, hosted in a dedicated VPC within monday.com’s AWS account
Data processed: Boards data (boards data consists of the data that the customer uploads to the boards within its account, whereas full account data can also include activity and audit logs, users’ information, etc.)
Hosting location: EU region (Germany)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: Aharon Bart St 18, Petah Tikva, Israel
Sub-processor’s website: https://www.instaclustr.com
Mailgun Technologies, Inc.
Type of service: Email notification service
Data processed: Any data within invite and notifications emails sent from the monday.com platform (further information can be found in this article)
Hosting location: EU region (Belgium)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: 535 Mission St. 14th Floor San Francisco, CA 94105, USA
Sub-processor’s website: https://www.mailgun.com
Coralogix, Inc.
Type of service: Log aggregation and correlation service for troubleshooting and debugging
Data processed: Applicative logs which may contain account data. Logs are retained without context (using IDs instead of names)
Hosting location: EU region (Ireland)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: 680 Folsom St, San Francisco CA, 94107, USA
Sub-processor’s website: https://coralogix.com
Cloudinary Ltd.
Type of service: Service for preview of uploaded documents (pdf, doc, etc.) within the account without requiring them to be downloaded
Data processed: Files uploaded to the account
Hosting location: EU region (Germany)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: 20 Aharon Bart St., Petah Tikva, 4951448, Israel
Sub-processor’s website: https://cloudinary.com
Perception Point Ltd.
Type of service: Service for automated malware detection of uploaded documents (pdf, doc, etc.) within the account
Data processed: Files uploaded to the account
Hosting location: EU region (Ireland)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: Rothschild Blvd. 3, Tel-Aviv, Israel
Sub-processor’s website: https://perception-point.io
Datadog, Inc.
Type of service: Application monitoring. Provides monitoring and investigation capabilities of servers, databases, tools and services
Data processed: Diagnostic telemetry data and attributes which may contain boards
Hosting location: EU region (Germany)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: 620 8th Avenue, Floor 45, New York, NY 10018, USA
Sub-processor’s website: https://www.datadoghq.com
Functional Software, Inc. dba Sentry (not applicable to Enterprise accounts)
Type of service: Error and performance monitoring for applications. Service which collects application errors/exceptions, transactions, and session information
Data processed: Error logs and attributes which may contain boards data
Hosting location: US region
Transfer mechanism: The EU-U.S. DPF, SCC
Contracting entity address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105-2250, USA
Sub-processor’s website: https://sentry.io
Twilio Inc. (SendGrid) (not applicable to Enterprise accounts)
Type of service: Email notification service
Data processed: Any data within invite and notifications emails sent from the monday.com platform (further information can be found in this article)
Hosting location: US region
Transfer mechanism: The EU-U.S. DPF, SCC
Contracting entity address: 101 Spear Street, Suite 500, San Francisco, CA 94105, USA
Sub-processor’s website: https://sendgrid.com
Microsoft, Inc. (not applicable if AI features are not enabled to the account – see this article for further information)
Type of service: Azure OpenAI for generative AI functionalities for AI features
Data processed: Input and output data that may contain boards data
Hosting location: EU region
Transfer mechanism: UK Adequacy Decision
Contracting entity address: 1 Microsoft Way. Redmond, Washington 98052, USA
Sub-processor’s website: https://azure.microsoft.com/en-us/products/ai-services/openai-service
Snowflake Computing Netherlands B.V. (not applicable if AI features are not enabled to the account – see this article for further information)
Type of service: Data warehouse service for AI features
Data processed: Input and output data that may contain boards data
Hosting location: EU region (Germany)
Transfer mechanism: UK Adequacy Decision
Contracting entity address: FOZ Building, Gustav Mahlerlaan 300-314, 1082 ME Amsterdam, Netherlands
Sub-processor’s website: https://www.snowflake.com