{
  "slug": "monday-com",
  "category": "task-management",
  "name": "monday.com",
  "description": "Work management platform with boards, automations, dashboards and AI features, run by monday.com Ltd. in Israel. Data is hosted by monday.com.",
  "website": "https://monday.com",
  "license": null,
  "platforms": [
    "web",
    "windows",
    "macos",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "IL",
    "name": "Israel",
    "eyes": null,
    "eu": false,
    "gdpr": false,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 20,
  "coverage": 100,
  "summary": "monday.com scores 20 out of 100 (grade F) on the task management criteria. It partly meets no ads or data sales and independent audit. It does not meet open source and no trackers or telemetry. It is based in Israel: Not in the Five, Nine or Fourteen Eyes.",
  "url": "https://privacyratings.com/task-management/monday-com/",
  "markdown": "https://privacyratings.com/task-management/monday-com/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://reports.exodus-privacy.eu.org/en/reports/com.monday.monday/latest/",
      "note": "Exodus finds 5 trackers in the Android app, including AppsFlyer, Google Crashlytics and Google Firebase Analytics, and the website loads Google Tag Manager."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://monday.com/l/privacy/privacy-policy/",
      "note": "Funded by subscriptions with no ads in the product, but the privacy policy describes behavioral and interest-based advertising for monday.com, using social and advertising networks."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://monday.com/trustcenter",
      "note": "The trust center lists SOC 1 Type II, SOC 2 Type II and SOC 3 reports and ISO 27001 certification, but the full audit reports are not public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Cloudflare Web Analytics",
        "host": "static.cloudflareinsights.com",
        "effect": "partial"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T07:02:28.840Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}