Frequently Asked Questions for Sub-Processors Page Update

Below you can find the most frequently asked questions related to our Sub-Processors Page update in November 2025. If your question remains unanswered, please reach out to us at sub-processors@monday.com.

1. Could you please elaborate on which changes you made to the Sub-processors Page?

Certainly! Please refer to the summary below:

We are adding the following sub-processor:

–   Microsoft Corp.: Azure cloud computing provider. Used for narrow workflows such as secure automated PDF exports and tests for scheduled dashboard exports. Data shared may include relevant board content and is processed temporarily in the US with no persistent storage.

We are removing the following sub-processor:

–  NetApp Israel (formerly Instaclustr Pty Ltd): Replacing NetApp’s service with an internal-built service. This does not impact your use of monday.com’s services.

We are adding the following sub-processors to support our AI services and tools:

Please note: This list is only relevant if AI services and tools are enabled and in use for your account. For details on how to enable/disable AI and an overview of our AI services and tools, please refer to this article.

–  Anthropic PBC: A leading AI company and provider of the Claude models, which may power monday.com’s AI services and tools. This vendor may process input submitted through our AI services and tools, and the corresponding generated outputs. Data is processed temporarily in the US with no persistent storage.

–  dbt Labs, Inc.: Provides data transformation tool for inputs and outputs generated by monday.com’s AI services and tools, to support analytics and reliability reporting. Data is processed temporarily in the US with no persistent storage and won’t be activated for HIPAA accounts.

–  Exa Labs, Inc.: Provides AI web-search capabilities used to retrieve up-to-date public web results in certain monday.com AI web-search features. Depending on feature usage, this vendor may process data submitted through the AI web-search feature and the returned links or snippets. Data is processed temporarily in the US with no persistent storage and won’t be activated for HIPAA accounts.

–  Superpowered Labs Inc dba Vapi: Powers monday.com’s voice-AI features, enabling real-time speech-to-text and text-to-speech interactions. Depending on feature usage, this vendor may process audio streams and transcripts used to facilitate voice interactions. Data is processed temporarily in the US with no persistent storage.

2. Why am I receiving this update?

You are receiving this email because you are an admin of a monday.com account or you have registered to receive updates to our Sub-Processors Page. We are required to keep you informed about changes made to our Sub-Processors Page for transparency reasons.

3. Is any action required from me?

No action is required from you, and you may continue to use monday.com as usual. That said, we do recommend checking out the Sub-Processors Page, available at monday.com/terms/subprocessors,  to see which changes we have made.

4. I am unsubscribed from receiving marketing emails – why did I receive this update?

Since this concerns an email informing you of an update to our Sub-Processors Page and addresses your legal rights – you still received this email despite being unsubscribed from email marketing communications from us. Therefore, in the future, you will continue to receive these updates for transparency reasons.

If you still wish to unsubscribe from future marketing communications from us, you can use the link at the bottom of the email.

5. How do I know that my data is secure with the new sub-processors?

We engage sub-processors that are trusted and adhere to our stringent security and privacy criteria. Our commitment to data security involves a comprehensive evaluation of potential third-party sub-processors’ privacy and security protocols prior to engaging. We meticulously review their procedures for upholding privacy, security, and confidentiality standards, enter into a data processing agreement with them that incorporates the appropriate modules of the Standard Contractual Clauses, and ensure enforcement of all related obligations.