When you use monday.com's AI-powered features, the data you input or generate may be used to improve monday.com's AI models in addition to delivering the service itself.
This analysis describes what Monday.com's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Using AI features may result in your work data or personal information being used to train or improve AI models, which is a secondary use of data beyond the core service delivery purpose.
Interpretive note: The policy references 'applicable terms governing your use of those features' for AI-specific data handling without specifying what those terms are or where to find them, creating ambiguity about the full scope of AI data processing permissions.
If you or your team use monday.com's AI features, the content processed through those features may be used to improve monday.com's AI models, which represents a secondary processing purpose that may require evaluation under GDPR's purpose limitation principle.
How other platforms handle this
If you access or use any of Oura's location-based services, such as by enabling GPS-based activity tracking through our Services, Oura may process the approximate or precise location of your device while the service is active. This data may be obtained via your device's service provider network ID, ...
AWS processes Customer Content you submit to Amazon Bedrock in accordance with the AWS Customer Agreement and applicable data protection terms. AWS does not use Customer Content processed by Amazon Bedrock to train Amazon's foundation models without your consent.
We process many types of data to support business decisioning, including data about people, businesses, organizations, places, economic activity, sustainability, legal, and other significant business events, and third-party risks. Some of the data we process is considered personal data. Some of the ...
Monitoring
Monday.com has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We offer AI-powered features as part of our services. When you use these features, we process the data you provide or that is generated through your use of these features to deliver the service, improve our AI models, and enhance your experience. We will handle any personal data processed in connection with AI features in accordance with this Privacy Policy and any applicable terms governing your use of those features.— Excerpt from Monday.com's Monday.com Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 5(1)(b) (purpose limitation), Article 22 (automated decision-making), and potentially the EU AI Act for high-risk AI systems. The FTC has issued guidance on AI and data practices under Section 5. If AI features process employee personal data uploaded by enterprise customers, the controller organization bears accountability for ensuring this secondary use is disclosed to data subjects and has a lawful basis. (2) GOVERNANCE EXPOSURE: Medium. The statement that data may be used to 'improve our AI models' is a secondary processing purpose that must be evaluated for compatibility with the original collection purpose under GDPR Article 6(4). If incompatible, a separate lawful basis is required. The policy's reference to 'applicable terms governing your use of those features' introduces ambiguity about whether AI-specific terms supersede or supplement this policy, which requires review. (3) JURISDICTION FLAGS: EU organizations using monday.com AI features should evaluate whether the AI processing constitutes automated decision-making with legal or similarly significant effects under GDPR Article 22, which would trigger additional rights. The EU AI Act may impose obligations on monday.com as a provider of AI systems and on enterprise customers as deployers, depending on the risk classification of the AI features in use. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise DPAs should be reviewed to confirm whether AI model training on customer data is expressly permitted or prohibited. Organizations in regulated sectors (healthcare, legal, financial services) should assess whether their acceptable use policies and client confidentiality obligations permit sensitive data to be used for AI model improvement. AI feature usage should be evaluated in the organization's AI governance framework. (5) COMPLIANCE CONSIDERATIONS: Organizations should audit which employees are using monday.com AI features and what categories of data are being processed through them. If the AI processing constitutes a new or incompatible purpose, updated DPIA or legitimate interests assessments may be required. The 'applicable terms' referenced in this provision should be obtained and reviewed to understand the full scope of AI data use commitments.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Using AI features may result in your work data or personal information being used to train or improve AI models, which is a secondary use of data beyond the core service delivery purpose.
If you or your team use monday.com's AI features, the content processed through those features may be used to improve monday.com's AI models, which represents a secondary processing purpose that may require evaluation under GDPR's purpose limitation principle.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Monday.com.