We also listed a provision named “Cross-Border Data Transfers and DPF Certification” from our summary of this document. None of its quoted text appears in any capture we hold, so it was withheld (correction, Oct 12, 2026). A link to that entry now leads here. This page is a separate clause record, CA-P-015839, whose quotation is checked against a stored capture of the document.
This analysis describes what Monday.com's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the legal mechanism for transatlantic data transfers, with monday.com Inc. asserting DPF certification as the primary transfer basis and accepting onward transfer liability to Service Providers under that framework. The DPF is subject to ongoing legal and political scrutiny, and its continued validity as a transfer mechanism depends on factors external to monday.com's own policy.
The updated policy now explicitly states that Monday.com may use AI-assisted technologies to analyze how its services are used, generate insights and summaries, provide support through virtual agents, and record, transcribe, and analyze calls and meetings. The policy clarifies that this processing occurs as permitted by applicable law and in accordance with the stated purposes. The company also discloses that it engages third-party AI and LLM providers as service vendors. You can review the full policy at privacy@monday.com or contact the company to understand how your specific communications may be processed.
View change record →Cross-platform context
See how other platforms handle Cross-Border Data Transfers and DPF Certification and similar clauses.
Compare across platforms →"monday.com Inc., our US subsidiary, complies with the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework as set forth by the US Department of Commerce, and where appropriate – primarily relies on such certification for accepting transfers of data from the EEA, UK and Switzerland to the US (as applicable). … monday.com Inc., will remain liable for onward transfers of your personal data to third parties (including our Service Providers) in accordance with applicable data transfer mechanisms. If there is any conflict between the terms in this privacy policy and the EU-US DPF Principles and/or the Swiss-US DPF, the Principles shall govern with respect to personal data transferred under the DPF.Excerpt from Monday.com's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision establishes the legal mechanism for transatlantic data transfers, with monday.com Inc. asserting DPF certification as the primary transfer basis and accepting onward transfer liability to Service Providers under that framework. The DPF is subject to ongoing legal and political scrutiny, and its continued validity as a transfer mechanism depends on factors external to monday.com's own policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Monday.com.