When you use monday.com's AI-powered features, the data you input or generate may be used to improve monday.com's AI models in addition to delivering the service itself.
This analysis describes what Monday.com's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Using AI features may result in your work data or personal information being used to train or improve AI models, which is a secondary use of data beyond the core service delivery purpose.
Interpretive note: The policy references 'applicable terms governing your use of those features' for AI-specific data handling without specifying what those terms are or where to find them, creating ambiguity about the full scope of AI data processing permissions.
If you or your team use monday.com's AI features, the content processed through those features may be used to improve monday.com's AI models, which represents a secondary processing purpose that may require evaluation under GDPR's purpose limitation principle.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...
Monitoring
Monday.com has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We offer AI-powered features as part of our services. When you use these features, we process the data you provide or that is generated through your use of these features to deliver the service, improve our AI models, and enhance your experience. We will handle any personal data processed in connection with AI features in accordance with this Privacy Policy and any applicable terms governing your use of those features.— Excerpt from Monday.com's Monday.com Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 5(1)(b) (purpose limitation), Article 22 (automated decision-making), and potentially the EU AI Act for high-risk AI systems. The FTC has issued guidance on AI and data practices under Section 5. If AI features process employee personal data uploaded by enterprise customers, the controller organization bears accountability for ensuring this secondary use is disclosed to data subjects and has a lawful basis. (2) GOVERNANCE EXPOSURE: Medium. The statement that data may be used to 'improve our AI models' is a secondary processing purpose that must be evaluated for compatibility with the original collection purpose under GDPR Article 6(4). If incompatible, a separate lawful basis is required. The policy's reference to 'applicable terms governing your use of those features' introduces ambiguity about whether AI-specific terms supersede or supplement this policy, which requires review. (3) JURISDICTION FLAGS: EU organizations using monday.com AI features should evaluate whether the AI processing constitutes automated decision-making with legal or similarly significant effects under GDPR Article 22, which would trigger additional rights. The EU AI Act may impose obligations on monday.com as a provider of AI systems and on enterprise customers as deployers, depending on the risk classification of the AI features in use. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise DPAs should be reviewed to confirm whether AI model training on customer data is expressly permitted or prohibited. Organizations in regulated sectors (healthcare, legal, financial services) should assess whether their acceptable use policies and client confidentiality obligations permit sensitive data to be used for AI model improvement. AI feature usage should be evaluated in the organization's AI governance framework. (5) COMPLIANCE CONSIDERATIONS: Organizations should audit which employees are using monday.com AI features and what categories of data are being processed through them. If the AI processing constitutes a new or incompatible purpose, updated DPIA or legitimate interests assessments may be required. The 'applicable terms' referenced in this provision should be obtained and reviewed to understand the full scope of AI data use commitments.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Using AI features may result in your work data or personal information being used to train or improve AI models, which is a secondary use of data beyond the core service delivery purpose.
If you or your team use monday.com's AI features, the content processed through those features may be used to improve monday.com's AI models, which represents a secondary processing purpose that may require evaluation under GDPR's purpose limitation principle.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Monday.com.