monday.com’s sub-processors for US Data Region: In-depth information
This document provides further information on the third-party sub-processors that are used in monday.com’s US data region which provide monday.com with infrastructure and functionalities within the monday.com service. For the full list of sub-processors, subsidiaries and support providers, please see our Sub-processors Page at the following link.
Amazon Web Services EMEA SARL
Type of service: Cloud computing provider. monday.com’s main infrastructure provider
Data processed: Full account data
Hosting location: US region
Available Transfer mechanisms: The EU-U.S. DPF, SCC
Contracting entity address: 38 Avenue John F. Kennedy, L-1855, Luxembourg
Sub-processor’s website: https://aws.amazon.com
Google Cloud EMEA Limited
Type of service: Cloud computing provider
Data processed: Boards data (boards data consists of the data that the customer uploads to the boards within its account, whereas full account data can also include activity and audit logs, users’ information, etc.); data in mobile notifications
Hosting location: US region
Available Transfer mechanisms: The EU-U.S. DPF, SCC
Contracting entity address: 70 Sir John Rogerson’s Quay, Dublin 2, Ireland
Sub-processor’s website: https://cloud.google.com
Redis Labs, Ltd.
Type of service: Managed database platform, hosted in a dedicated VPC within monday.com’s AWS account
Data processed: Full account data
Hosting location: US region
Available Transfer mechanisms: SCC
Contracting entity address: Alon 2 Tower, 32nd Floor, 94 Yigal Alon St., Tel-Aviv 6789140, Israel
Sub-processor’s website: https://redis.io
Cloudflare, Inc.
Type of service: CDN for forms and broadcasted boards; security services (DDoS Protection, Bot Management, Rate limiting, Web Application Firewall, SSL/TLS/DNSSEC)
Data processed: Full account data
Hosting location: Global (CDNs distribute data globally across various data centers to ensure high availability and performance. As a result, customer data is processed at the data center closest to the end user (PoP))
Available Transfer mechanisms: The EU-U.S. DPF, SCC
Contracting entity address: 101 Townsend Street, San Francisco, CA 94107, USA
Sub-processor’s website: https://www.cloudflare.com
NetApp Israel (formerly Instacluster Pty Ltd.)
Type of service: Managed database platform, hosted in a dedicated VPC within monday.com’s AWS account
Data processed: Boards data
Hosting location: US region
Available Transfer mechanisms: SCC
Contracting entity address: Aharon Bart St 18, Petah Tikva, Israel
Sub-processor’s website: https://www.instaclustr.com
Twilio Inc. (SendGrid)
Type of service: Email notification service
Data processed: Any data within invite and notifications emails sent from the monday.com platform (further information can be found in this article)
Hosting location: US region
Available Transfer mechanisms: The EU-U.S. DPF, SCC
Contracting entity address: 101 Spear Street, Suite 500, San Francisco, CA 94105, USA
Sub-processor’s website: https://sendgrid.com
Mailgun Technologies, Inc.
Type of service: Email notification service (secondary service for redundancy)
Data processed: Any data within invite and notifications emails sent from the monday.com platform (further information can be found in this article)
Hosting location: US region
Available Transfer mechanisms: SCC
Contracting entity address: 112 East Pecan Street Suite 1135 San Antonio, TX 78205 USA
Sub-processor’s website: https://www.mailgun.com
Coralogix, Inc.
Type of service: Log aggregation and correlation service for troubleshooting and debugging
Data processed: Applicative logs which may contain account data. Logs are retained without context (using IDs instead of names)
Hosting location: EU region
Available Transfer mechanisms: UK Adequacy Decision
Contracting entity address: 680 Folsom St, San Francisco CA, 94107, USA
Sub-processor’s website: https://coralogix.com
Cloudinary Ltd. (not applicable to HIPAA accounts)
Type of service: Service for preview of uploaded documents (pdf, doc, etc.) within the account without requiring them to be downloaded
Data processed: Files uploaded to the account
Hosting location: US region
Available transfer mechanisms: The EU-U.S. DPF, SCC
Contracting entity address: 20 Aharon Bart St., Petah Tikva, 4951448, Israel
Sub-processor’s website: https://cloudinary.com
Perception Point Ltd.
Type of service: Service for automated malware detection of uploaded documents (pdf, doc, etc.) within the account
Data processed: Files uploaded to the account
Hosting location: US region
Available Transfer mechanisms: SCC
Contracting entity address: Rothschild Blvd. 3, Tel-Aviv, Israel
Sub-processor’s website: https://perception-point.io
Functional Software, Inc. dba Sentry
Type of service: Error and performance monitoring for applications. Service which collects application errors/exceptions, transactions, and session information.
Data processed: Error logs and attributes which may contain boards data
Hosting location: US region
Available Transfer mechanisms: The EU-U.S. DPF, SCC
Contracting entity address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105-2250, USA
Sub-processor’s website: https://sentry.io
Datadog, Inc.
Type of service: Application monitoring. Provides monitoring and investigation capabilities of servers, databases, tools and services
Data processed: Diagnostic telemetry data and attributes which may contain boards data
Hosting location: EU region
Available Transfer mechanisms: UK Adequacy Decision
Contracting entity address: 620 8th Avenue, Floor 45, New York, NY 10018, USA
Sub-processor’s website: https://www.datadoghq.com
Microsoft, Inc. (not applicable if AI features are not enabled to the account – see this article for further information)
Type of service: Azure OpenAI for generative AI functionalities for AI features
Data processed: Input and output data that may contain boards data
Hosting location: US region
Available Transfer mechanisms: The EU-U.S. DPF, SCC
Contracting entity address: 1 Microsoft Way. Redmond, Washington 98052, USA
Sub-processor’s website: https://azure.microsoft.com/en-us/products/ai-services/openai-service
OpenAI, L.L.C. (not applicable if AI features are not enabled to the account – see this article for further information)
Type of service: Generative AI functionalities for AI features
Data processed: Input and output data that may contain boards data
Hosting location: US region
Available Transfer mechanisms: SCC
Contracting entity address: 3180 18th Street, San Francisco, CA 94110, USA
Sub-processor’s website: https://openai.com
Snowflake Computing Netherlands B.V. (not applicable if AI features are not enabled to the account – see this article for further information)
Type of service: Data warehouse service for AI features
Data processed: Input and output data that may contain boards data
Hosting location: EU region
Available Transfer mechanisms: UK Adequacy Decision
Contracting entity address: FOZ Building, Gustav Mahlerlaan 300-314, 1082 ME Amsterdam, Netherlands
Sub-processor’s website: https://www.snowflake.com