EU Sub-processors: In-depth information
This document offers supplementary details regarding the third-party sub-processors utilized within monday.com’s EU data region, which provide essential infrastructure and functionalities that support the monday.com service. For a complete list of all sub-processors, subsidiaries, and support providers, please refer to our Sub-processors Page at link.
Amazon Web Services EMEA SARL
- Type of service: Cloud computing provider – monday.com’s main infrastructure provider
- Data processed: Full account data
- Hosting location: EU region (Germany)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: 38 Avenue John F. Kennedy, L-1855, Luxembourg
- Sub-processor’s website: https://aws.amazon.com
Google Cloud EMEA Limited
- Type of service: Cloud computing provider; Firebase Cloud Messaging for mobile push notifications and mondaycode hosting
- Data processed: Boards data; Data in mobile notifications; data found in logs of apps that were built using mondycode
- Hosting location: EU region (Germany)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
- Sub-processor’s website: https://cloud.google.com
Redis Labs, Ltd.
- Type of service: Managed database platform, hosted in a dedicated VPC within monday.com’s AWS account
- Data processed: Full account data
- Hosting location: EU region (Germany)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: Alon 2 Tower, 32nd Floor, 94 Yigal Alon St., Tel-Aviv 6789140, Israel
- Sub-processor’s website: https://redis.io
Cloudflare, Inc.
- Type of service: CDN; security services (DDoS Protection, Bot Management, Rate limiting, Web Application Firewall, SSL/TLS/DNSSEC)
- Data processed: Full account data
- Hosting location: Global (CDNs distribute data globally across various data centers to ensure high availability and performance. As a result, customer data is processed at the data center closest to the end user (PoP))
- Transfer mechanism: The EU-U.S. DPF, UK and EU Adequacy Decisions, SCC
- Contracting entity address: 101 Townsend Street, San Francisco, CA 94107, USA
- Sub-processor’s website: https://www.cloudflare.com
Twilio Inc. (SendGrid) (not applicable to Enterprise accounts)
- Type of service: Email notification service
- Data processed: Any data within invite and notifications emails sent from the monday.com platform (further information can be found in this article)
- Hosting location: US region
- Transfer mechanism: The EU-U.S. DPF, SCC
- Contracting entity address: 101 Spear Street, Suite 500, San Francisco, CA 94105, USA
- Sub-processor’s website: https://sendgrid.com
Mailgun Technologies, Inc.
- Type of service: Email notification service
- Data processed: Any data within invite and notifications emails sent from the monday.com platform (further information can be found in this article)
- Hosting location: EU region (Belgium)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: 112 East Pecan Street Suite 1135 San Antonio, TX 78205 USA
- Sub-processor’s website: https://www.mailgun.com
Coralogix, Inc.
- Type of service: Log aggregation and correlation service for troubleshooting and debugging
- Data processed: Applicative logs which may contain account data
- Hosting location: EU region (Ireland)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: 680 Folsom St, San Francisco CA, 94107, USA
- Sub-processor’s website: https://coralogix.com
Cloudinary Ltd.
- Type of service: Document preview service for uploaded files (e.g., pdf, doc)
- Data processed: Files uploaded to the account
- Hosting location: EU region (Germany)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: 20 Aharon Bart St., Petah Tikva, 4951448, Israel
- Sub-processor’s website: https://cloudinary.com
Perception Point Ltd.
- Type of service: Service for automated malware detection of uploaded documents (pdf, doc, etc.) within the account
- Data processed: Files uploaded to the account
- Hosting location: EU region (Ireland)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: Rothschild Blvd. 3, Tel-Aviv, Israel
- Sub-processor’s website: https://perception-point.io
Functional Software, Inc. dba Sentry (not applicable to Enterprise accounts)
- Type of service: Application error and performance monitoring service, which gathers application errors, exceptions, transaction details, and session information
- Data processed: Error logs and attributes which may contain boards data
- Hosting location: US region
- Transfer mechanism: The EU-U.S. DPF, SCC
- Contracting entity address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105-2250, USA
- Sub-processor’s website: https://sentry.io
Datadog, Inc.
- Type of service: Application monitoring provides the ability to monitor and investigate servers, databases, tools, and services
- Data processed: Diagnostic telemetry data and attributes which may contain boards
- Hosting location: EU region (Germany)
- Transfer mechanism: UK Adequacy Decision
- Contracting entity address: 620 8th Avenue, Floor 45, New York, NY 10018, USA
- Sub-processor’s website: https://www.datadoghq.com
Microsoft Corp.
- Type of service: Azure cloud computing provider
- Data processed: Boards data
- Hosting location: Data is only processed temporarily and deleted. No persistent storage
- Transfer mechanism: The EU-U.S. DPF, SCC
- Contracting entity address: 1 Microsoft Way. Redmond, Washington 98052, USA
- Sub-processor’s website: https://azure.microsoft.com/