monday.com Subprocessors List (September 2026): Changes and History
monday.com names 33 subprocessors on its published list. Read from the vendor's own page and re-checked daily.
Last checked September 28, 2026
Official source ↗
monday.com subprocessors (September 2026)
| # | Subprocessor | Purpose | Location | Data |
|---|---|---|---|---|
| 1 | Amazon Web Services EMEA SARL | Cloud computing provider | US | Full account data (data uploaded to the account and associated with it) |
| 2 | Google Cloud EMEA Limited | Cloud computing provider | US | Boards data (data uploaded to the account) |
| 3 | Redis Labs, Ltd. | Managed database platform | US | Full account data |
| 4 | Cloudflare, Inc. | CDN, security services | Global* | Full account data |
| 5 | Twilio Inc. (SendGrid) | Email notification service | US | Data in email invites and notifications (further information) |
| 6 | Mailgun Technologies, Inc. | Email notification service | US | Data in email invites and notifications (further information) |
| 7 | Coralogix, Inc. | Log aggregation and correlation service | EU | Applicative logs which may contain full account data |
| 8 | Cloudinary Ltd. | File preview service | US | Files uploaded to boards |
| 9 | Fortinet, Inc. | Advanced threat protection for uploaded files | US | Files uploaded to boards |
| 10 | Functional Software, Inc. dba Sentry | Error and performance monitoring for applications | US | Error logs and attributes that may contain boards data |
| 11 | Datadog, Inc. | application monitoring for servers, databases, tools, and services | EU | Diagnostic telemetry data and attributes that may contain boards data |
| 12 | Microsoft Corp. | Azure cloud computing provider | Data is processed temporarily, deleted | Boards data |
| 13 | EON.io Ltd. | Database backup service | Data is processed temporarily, deleted | Full account data |
| 14 | Nebius Inc. | Data embedding service | Data is processed temporarily, deleted | Full account data |
| 15 | Snowflake Computing | Data warehouse service for AI functionalities | EU | Input and output data that may contain boards data |
| 16 | OpenAI, L.L.C. | AI functionalities | Data is processed temporarily, deleted | Boards data |
| 17 | LangChain Inc. | AI oversight and agent management service | EU | Input and output data that may contain boards data |
| 18 | AlphaAI Technologies Inc. dba | Web-search engine for AI | Data is processed temporarily, deleted | Input and output data that may contain boards data |
| 19 | Hyperdoc Inc. (Recall.ai) | Call recording and analysis service | US | Call recording and transcripts |
| 20 | Anthropic PBC | LLM provider | Data is processed temporarily, deleted | Input and output data that may contain boards data |
| 21 | dbt Labs, Inc. | Data build tool | Data is processed temporarily, deleted | Input and output data that may contain boards data |
| 22 | Exa Labs, Inc. | Web-search engine for AI | Data is processed temporarily, deleted | Input and output data that may contain boards data |
| 23 | Superpowered Labs Inc dba Vapi | AI voice agent builder | Data is processed temporarily, deleted | Input and output data that may contain boards data |
| 24 | Lakera AI AG | Runtime security for AI | US | Input and output data that may contain boards data |
| 25 | monday.com Ltd. | — | Israel | — |
| 26 | monday.com UK 2020 Ltd. | — | United Kingdom | — |
| 27 | monday.com Ltda. | — | Brasil | — |
| 28 | monday.com sp. z o.o. | — | Poland | — |
| 29 | monday.com Pte. Ltd. | — | Singapore | — |
| 30 | monday.com K.K. | — | Japan | — |
| 31 | MONDAY.COM, S.A. DE C.V. | — | Mexico | — |
| 32 | Transactel International Services Limited d/b/a TELUS International | — | Guatemala | — |
| 33 | Foundever Operating Corporation Limited | — | Poland | — |
Get an email when monday.com changes its subprocessors
ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.
Certifications at monday.com
What monday.com's trust page lists, with the text each one comes from. SOC 2 Type I or Type II: what's the difference?
- SOC 2 Type II
-
Active
“SOC 2 Type II Report”
Trust page, monday.com ↗ - ISO 27001
-
Active
“iso 27001 v2”
Trust page, monday.com ↗ - ISO 27701
-
Active
“ISO/IEC 27701:2019”
Trust page, monday.com ↗ - HIPAA
-
Active
“hipaa v2”
Trust page, monday.com ↗ - EU–US Data Privacy Framework
-
Active
“EU-US Data Privacy Framework”
Trust page, monday.com ↗ - CSA STAR
-
Active
“CSA Star”
Trust page, monday.com ↗
Documents we track for monday.com
- Privacy policy
- checked September 28, 2026 monday.com ↗
- Subprocessor list
- checked September 28, 2026 monday.com ↗
- Terms of service
- checked September 28, 2026 monday.com ↗
- Trust page
- checked September 28, 2026 monday.com ↗
Change history
Tracking since September 28, 2026. No change has been published since; additions, removals and document changes will appear here as they're published.
monday.com subprocessors FAQ
- How many subprocessors does monday.com use?
- monday.com lists 33 subprocessors on its published list, including Amazon Web Services EMEA SARL, Google Cloud EMEA Limited, Redis Labs, Ltd., Cloudflare, Inc., and Twilio Inc. (SendGrid) and 28 more.
- Where does monday.com process customer data?
- The subprocessors named by monday.com are located in US, Data is processed temporarily, deleted, EU, Poland, and Brasil and 7 other locations, as stated on its list.
- Does monday.com have a SOC 2 Type II report?
- Yes. monday.com's trust page lists a SOC 2 Type II report: “SOC 2 Type II Report”
- Which security certifications does monday.com list?
- monday.com's trust page lists SOC 2 Type II, ISO 27001, ISO 27701, HIPAA, EU–US Data Privacy Framework, and CSA STAR.
- When was monday.com's subprocessor list last checked?
- ClauseTrail last checked monday.com's subprocessor list on September 28, 2026. Lists are re-checked daily.
- How do I find out when monday.com adds or removes a subprocessor?
- ClauseTrail monitors monday.com's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.