monday.com (monday.com Ltd., headquartered in Israel, trading as Work OS/monday.com, Nasdaq: MNDY) is a publicly traded work-management SaaS platform. Its own privacy policy discloses collection of broad CCPA-defined categories of personal information (including identifiers, employment information, network activity, geolocation, and inferences) and use of cookies and pixels for marketing, ad management, and behavioral/interests-based advertising, with its iOS App Store label separately confirming data linked to identity is used for developer advertising/marketing purposes. Its published sub-processors list is dominated by infrastructure and support vendors (AWS, Google Cloud, Twilio, Zendesk) rather than named ad-tech partners. Ownership is fully traceable through SEC filings (Form 20-F) confirming Nasdaq listing under ticker MNDY, and the company's trust center lists an extensive set of security/compliance certifications (SOC 1/2/3 Type II, several ISO 27000-series standards, CSA STAR, TX-RAMP) without naming the auditing firm. No FTC/state-AG privacy order, settlement, or admitted past data breach was found in the fetched sources; the 20-F's cybersecurity risk language is forward-looking rather than a disclosed past incident.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
8 ON FILE
COLLECTION
monday.com's privacy policy states that, for CCPA purposes, it has collected broad categories of personal information in the past twelve months, including identifiers, employment information, internet/network activity, customer records, geolocation, and inferences.
monday.com's Form 20-F, filed with the SEC for fiscal year 2025, confirms its ordinary shares trade under ticker symbol MNDY on the Nasdaq Stock Market LLC.
monday.com's privacy policy states that, for CCPA purposes, it may have disclosed the same broad categories of personal information (identifiers, employment information, network activity, customer records, geolocation, inferences) to third parties in the past twelve months.
monday.com's published sub-processors list states it may use sub-processors, subsidiaries and support/service providers to provide its service and share customer data with them; the listed entities include infrastructure and support vendors such as Amazon Web Services, Google Cloud, Twilio, and Zendesk rather than named advertising partners.
monday.com's trust center lists an extensive set of security and compliance certifications and reports, including SOC 1, SOC 2, and SOC 3 reports and multiple ISO/IEC 27000-series standards, plus CSA STAR and TX-RAMP, though no auditing firm is named.
monday.com's iOS App Store privacy label discloses that data linked to a user's identity (contact info, identifiers, usage data) may be used for the developer's own advertising or marketing purposes.
monday.com's privacy policy states that cookies, pixels, and other tracking technologies are used for marketing campaigns, ad management, and to manage and deliver advertisements for its services more effectively, including on other websites and applications.