Zapier
Zapier (AI features: Agents, AI by Zapier, Chatbots)
Provider: Zapier, Inc. · Based in: Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104-5401, USA · Provider website
- Plans
- 4
- Sources
- 10
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 4 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- US only: all 4 plans
- Training on inputs
- opt-out available: Free, Professional, Teamno: Enterprise
- DPA
- yes: all 4 plans
- Provider
- Zapier, Inc.
- Based in
- Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104-5401, USA (privacy policy); subsidiaries include Zapier Automation Ireland Ltd. and Zapier UK Ltd. (q4)
Values from 4 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare Zapier
Compare with another toolCompared plan by plan with other tools in the category Business software:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | FreeCompare Zapier Free with another tool | ProfessionalCompare Zapier Professional with another tool | TeamCompare Zapier Team with another tool | EnterpriseCompare Zapier Enterprise with another tool |
|---|---|---|---|---|
| differs by plan | 0 USD/mo | from 19.99 USD/mo… (further prices in the details) | from 69 USD/mo… (further prices in the details) | custom |
| Details: Price | USD 0 or EUR 0 per month; 100 tasks/month (pricing page) | from USD 19.99 per month with annual billing or USD 29.99 with monthly billing (750 tasks/month; tiers up to 2M tasks); in EUR from EUR 18.28 or EUR 27.42 per month, converted with a note on the varying exchange rate. Pricing page in USD or optionally in other currencies (including EUR); with EUR display: 'Prices exclude all taxes, levies and duties.' | from USD 69 per month with annual billing or USD 103.50 with monthly billing (2,000 tasks/month; tiers up to 2M tasks); in EUR from EUR 63.09 or EUR 94.63 per month, converted with a note on the varying exchange rate. Pricing page in USD or optionally in other currencies (including EUR); with EUR display: 'Prices exclude all taxes, levies and duties.' | Custom (pricing page: 'Contact for pricing'; Agents Enterprise also 'Contact for pricing') |
| yes | yes | yes | yes | |
| Details: AI features included | yes (according to the feature table on the pricing page: Zapier Agents, Chatbots, Canvas and MCP included, Copilot (beta) with a daily message limit; AI by Zapier and AI fields not included in the Free plan. Agents add-on 'Agents Free': 400 activities/month) | yes (according to the feature table on the pricing page: Zapier Agents, Chatbots, Canvas, MCP, AI by Zapier and AI fields included, Copilot unlimited; more agent activities via the 'Agents Pro' add-on, 1,500 activities/month, USD 33.33/month with annual billing (USD 400/year)) | yes (Agents with shared account activities, Chatbots, Copilot unlimited, MCP, Canvas, AI by Zapier according to the pricing page) | yes (according to the feature table on the pricing page: Zapier Agents, Chatbots, Canvas, MCP, AI by Zapier and AI fields included, Copilot unlimited; 'Agents Enterprise' add-on with a custom number of activities, organisation-wide agent sharing, 'Enterprise-grade audit logs' and 'Restricted apps support'; according to the Trust Center, Meta models in AI by Zapier must be enabled by an administrator) |
| yes | yes | yes | yes | |
| Details: DPA | yes (automatically: the Terms of Service or the Enterprise Agreement incorporate the DPA, no separate signature required; as of 2026-08-27) Provider’s DPA | yes (automatically: the Terms of Service or the Enterprise Agreement incorporate the DPA, no separate signature required; as of 2026-08-27) Provider’s DPA | yes (automatically: the Terms of Service or the Enterprise Agreement incorporate the DPA, no separate signature required; as of 2026-08-27) Provider’s DPA | yes (automatically: the Terms of Service or the Enterprise Agreement incorporate the DPA, no separate signature required; as of 2026-08-27) Provider’s DPA |
| differs by plan | opt-out available | opt-out available | opt-out available | no |
| Details: Training on inputs | Terms of Service (effective 2026-04-09) section 7(b): Zapier may derive de-identified data sets ('Derived Data') from customer content and use them 'to operate, enhance, improve, and develop Zapier products or services, including through model training'; opt-out via form; accounts on the Company or Enterprise Plan are automatically opted out. Security page (FAQ): 'We don’t train on the data that runs through your workflows, on any plan.' Zapier may learn from the structure (not the contents) of workflows; objection via form. Subprocessors page (version effective 2026-10-23): AI sub-processors do not use customer content for training; in the case of flagged violations, the provider may retain and review content, and Meta may use flagged content for abuse detection. | Terms of Service (effective 2026-04-09) section 7(b): Zapier may derive de-identified data sets ('Derived Data') from customer content and use them 'to operate, enhance, improve, and develop Zapier products or services, including through model training'; opt-out via form; accounts on the Company or Enterprise Plan are automatically opted out. Security page (FAQ): 'We don’t train on the data that runs through your workflows, on any plan.' Zapier may learn from the structure (not the contents) of workflows; objection via form. Subprocessors page (version effective 2026-10-23): AI sub-processors do not use customer content for training; in the case of flagged violations, the provider may retain and review content, and Meta may use flagged content for abuse detection. | Terms of Service (effective 2026-04-09) section 7(b): Zapier may derive de-identified data sets ('Derived Data') from customer content and use them 'to operate, enhance, improve, and develop Zapier products or services, including through model training'; opt-out via form; accounts on the Company or Enterprise Plan are automatically opted out. Security page (FAQ): 'We don’t train on the data that runs through your workflows, on any plan.' Zapier may learn from the structure (not the contents) of workflows; objection via form. Subprocessors page (version effective 2026-10-23): AI sub-processors do not use customer content for training; in the case of flagged violations, the provider may retain and review content, and Meta may use flagged content for abuse detection. | Terms of Service (effective 2026-04-09) section 7(b): accounts on the Company or Enterprise Plan are automatically opted out of the use of de-identified 'Derived Data' (including for model training). Security page (FAQ): 'We don’t train on the data that runs through your workflows, on any plan'; Enterprise accounts are also automatically opted out of learning from workflow structure. Subprocessors page (version effective 2026-10-23): AI sub-processors do not use customer content for training; in the case of flagged violations, the provider may retain and review content, and Meta may use flagged content for abuse detection. |
| Privacy/retention page | Privacy/retention page | Privacy/retention page | Privacy/retention page | |
| Details: Data retention | Privacy/retention page (as of 2026-04-17): Zap content 7 days in logs, 29 to 69 days in the account, up to 4 months in backups; test data remains until the Zap is deleted. In the 'Company' plan or Enterprise, a shorter retention can be set. Tables content until deletion, then up to 4 months in backups. AI products: Agents conversations and activity logs until the agent is deleted, knowledge sources until removed from all agents, then up to 4 months in backups; Chatbots conversations 60 days, knowledge sources until deletion; MCP content (prompts, responses, tool logs) until the MCP server or account is deleted; Canvas content until deletion, then deletion within 30 days. | Privacy/retention page (as of 2026-04-17): Zap content 7 days in logs, 29 to 69 days in the account, up to 4 months in backups; test data remains until the Zap is deleted. In the 'Company' plan or Enterprise, a shorter retention can be set. Tables content until deletion, then up to 4 months in backups. AI products: Agents conversations and activity logs until the agent is deleted, knowledge sources until removed from all agents, then up to 4 months in backups; Chatbots conversations 60 days, knowledge sources until deletion; MCP content (prompts, responses, tool logs) until the MCP server or account is deleted; Canvas content until deletion, then deletion within 30 days. | Privacy/retention page (as of 2026-04-17): Zap content 7 days in logs, 29 to 69 days in the account, up to 4 months in backups; test data remains until the Zap is deleted. In the 'Company' plan or Enterprise, a shorter retention can be set. Tables content until deletion, then up to 4 months in backups. AI products: Agents conversations and activity logs until the agent is deleted, knowledge sources until removed from all agents, then up to 4 months in backups; Chatbots conversations 60 days, knowledge sources until deletion; MCP content (prompts, responses, tool logs) until the MCP server or account is deleted; Canvas content until deletion, then deletion within 30 days. | Privacy/retention page (as of 2026-04-17): Zap content 7 days in logs, 29 to 69 days in the account, up to 4 months in backups; test data remains until the Zap is deleted. In the 'Company' plan or Enterprise, a shorter retention can be set. Tables content until deletion, then up to 4 months in backups. AI products: Agents conversations and activity logs until the agent is deleted, knowledge sources until removed from all agents, then up to 4 months in backups; Chatbots conversations 60 days, knowledge sources until deletion; MCP content (prompts, responses, tool logs) until the MCP server or account is deleted; Canvas content until deletion, then deletion within 30 days. |
| US only | US only | US only | US only | |
| Details: Hosting | Security page (FAQ): 'Zapier stores data on Amazon Web Services (AWS) in the United States.' Data Transfer Impact Assessment (as of 2023-12-15): 'Data processed by Zapier in connection with our customers’ use of Zapier Services is both transferred to and stored in the US.' The pricing page, security page and TIA name no EU storage option. | Security page (FAQ): 'Zapier stores data on Amazon Web Services (AWS) in the United States.' Data Transfer Impact Assessment (as of 2023-12-15): 'Data processed by Zapier in connection with our customers’ use of Zapier Services is both transferred to and stored in the US.' The pricing page, security page and TIA name no EU storage option. | Security page (FAQ): 'Zapier stores data on Amazon Web Services (AWS) in the United States.' Data Transfer Impact Assessment (as of 2023-12-15): 'Data processed by Zapier in connection with our customers’ use of Zapier Services is both transferred to and stored in the US.' The pricing page, security page and TIA name no EU storage option. | Security page (FAQ): 'Zapier stores data on Amazon Web Services (AWS) in the United States.' Data Transfer Impact Assessment (as of 2023-12-15): 'Data processed by Zapier in connection with our customers’ use of Zapier Services is both transferred to and stored in the US.' The pricing page, security page and TIA name no EU storage option. |
| list available | list available | list available | list available | |
| Details: Sub-processors |
|
|
|
|
| 9 sources | 9 sources | 9 sources | 9 sources | |
| Details: Sources with retrieval date |
|
|
|
|
Compare Zapier Free with another tool
Price and scope
- differs by plan
- 0 USD/mo
USD 0 or EUR 0 per month; 100 tasks/month (pricing page)
- yes
yes (according to the feature table on the pricing page: Zapier Agents, Chatbots, Canvas and MCP included, Copilot (beta) with a daily message limit; AI by Zapier and AI fields not included in the Free plan. Agents add-on 'Agents Free': 400 activities/month)
Contract and data use
- yes
yes (automatically: the Terms of Service or the Enterprise Agreement incorporate the DPA, no separate signature required; as of 2026-08-27)
Provider’s DPA- differs by plan
- opt-out available
Terms of Service (effective 2026-04-09) section 7(b): Zapier may derive de-identified data sets ('Derived Data') from customer content and use them 'to operate, enhance, improve, and develop Zapier products or services, including through model training'; opt-out via form; accounts on the Company or Enterprise Plan are automatically opted out. Security page (FAQ): 'We don’t train on the data that runs through your workflows, on any plan.' Zapier may learn from the structure (not the contents) of workflows; objection via form. Subprocessors page (version effective 2026-10-23): AI sub-processors do not use customer content for training; in the case of flagged violations, the provider may retain and review content, and Meta may use flagged content for abuse detection.
- Privacy/retention page
- Privacy/retention page (as of 2026-04-17): Zap content 7 days in logs, 29 to 69 days in the account, up to 4 months in backups; test data remains until the Zap is deleted. In the 'Company' plan or Enterprise, a shorter retention can be set. Tables content until deletion, then up to 4 months in backups. AI products: Agents conversations and activity logs until the agent is deleted, knowledge sources until removed from all agents, then up to 4 months in backups; Chatbots conversations 60 days, knowledge sources until deletion; MCP content (prompts, responses, tool logs) until the MCP server or account is deleted; Canvas content until deletion, then deletion within 30 days.
Hosting and sharing
- US only
Security page (FAQ): 'Zapier stores data on Amazon Web Services (AWS) in the United States.' Data Transfer Impact Assessment (as of 2023-12-15): 'Data processed by Zapier in connection with our customers’ use of Zapier Services is both transferred to and stored in the US.' The pricing page, security page and TIA name no EU storage option.
- list available
- Amazon Web Services (USA): cloud and AI provider
- Anthropic (USA): AI provider
- Baseten (USA): AI provider (new in the list from 2026-10-23)
- OpenAI (USA): AI provider (Zero Day Retention activated according to Zapier)
- Google (USA): cloud and AI provider
- Microsoft (USA): AI provider
- Meta (USA, Australia, Denmark, Finland, Indonesia, Ireland, Malaysia, Sweden): AI provider
- Fireworks AI (USA): AI provider
- Databricks (USA): data intelligence
- Pinecone (USA): vector database (no longer listed according to the new list from 2026-10-23)
- Firecrawl (USA): knowledge sources
- Heroku, Vercel (USA): operations/cloud
- Redis (USA): storage/caching
- Datadog, Sentry, Grafana Labs (USA): monitoring/error tracking
- Algolia, Fullstory, Looker, Knock, Liveblocks, Stytch, Uploadcare (USA): search, analytics, communication, collaboration, authentication, file upload
- Support: Ada, Gong, Vitally, Zendesk, Zoom (USA)
- Service-specific: Google Translate, MadKudu, Mailgun, Twilio, WhatsApp (USA)
- Group companies: Australia (with a branch in New Zealand), Canada, Ireland (with a branch in Spain), India, United Kingdom
Evidence
- 9 sources
- Pricing (rendered in browser, incl. feature table, Agents add-on and EUR currency)Pricing page, retrieved 18 Oct 2026
- Privacy Statement (effective 2025-09-05)Privacy notice, retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-08-27)DPA, retrieved 8 Oct 2026
- Subprocessors (published 2026-10-09, effective 2026-10-23)Sub-processor list, retrieved 14 Oct 2026
- Enterprise securityTrust Center, retrieved 18 Oct 2026
- Data Retention/Deletion/Export (as of 2026-04-17)Documentation, retrieved 14 Oct 2026
- Terms of Service (effective 2026-04-09)Terms and conditions, retrieved 18 Oct 2026
- Zapier Trust Center (Conveyor; updates on SOC reports and sub-processors)Trust Center, retrieved 18 Oct 2026
- Data Transfer Impact Assessment (last updated 2023-12-15)Documentation, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy Statement: Zapier is certified under the EU-US Data Privacy Framework, the Swiss-US DPF and the UK Extension; the Data Privacy Framework List shows 'Zapier, Inc.' (San Francisco) as 'Active' for all three frameworks (HR and non-HR data, retrieved 2026-10-18). DPA (as of 2026-08-27): controller-to-processor SCCs (Module Two) and processor-to-processor SCCs (Module Three), UK Addendum and Swiss Amendments. Data Transfer Impact Assessment (as of 2023-12-15): primarily DPF, SCCs only 'if the DPF is invalidated and/or does not cover the transfer'; for onward transfers to sub-processors, SCCs among others; according to Zapier, no requests under FISA Section 702 or EO 12333 up to that date.
- Privacy Statement (effective 2025-09-05) (Privacy notice), retrieved 18 Oct 2026
- Data Processing Addendum (as of 2026-08-27) (DPA), retrieved 8 Oct 2026
- Terms of Service (effective 2026-04-09) (Terms and conditions), retrieved 18 Oct 2026
- Data Transfer Impact Assessment (last updated 2023-12-15) (Documentation), retrieved 18 Oct 2026
- Data Privacy Framework List (entry Zapier, Inc.) (Register), retrieved 18 Oct 2026
Certifications (as stated by the provider)
Security page: SOC 2 (Type II) and SOC 3, audited annually by an independent firm; 'SOC 3 is public; SOC 2 (Type II) requires an NDA'. Trust Center (update of 2026-08-03): current SOC 2 Type II and SOC 3 reports for the period 2025-06-01 to 2026-05-31 (Security, Availability, Confidentiality, Privacy); badges SOC 2 Type II, SOC 3, GDPR, CCPA. Auditor not named in the Trust Center. ISO 27001: not publicly documented.
- Enterprise security (Trust Center), retrieved 18 Oct 2026
- Zapier Trust Center (Conveyor; updates on SOC reports and sub-processors) (Trust Center), retrieved 18 Oct 2026
AI Act
Functions: Zapier Agents, AI by Zapier, Chatbots, Canvas, Copilot (automation assistant), Zapier MCP, AI fields in Tables, connection to more than 9,000 apps (pricing page, security page). The security page names AI guardrails (PII, prompt injection and toxicity checks), agent permissions and an audit trail.
Provider’s statement: not publicly documented(no mention of the EU AI Act found on the pricing page, security page, DPA, sub-processor list, Terms of Service or Trust Center). Terms section 4(b): use of the AI components to develop 'foundation models or other large-scale models' is prohibited.
Classification (for review, not legal advice): For review: the customer is typically a deployer (Art. 3 No. 4 AI Act). Agents trigger actions in connected apps; the classification depends on the specific use (check Annex III, e.g. for HR or assessment workflows). AI providers are downstream sub-processors (including OpenAI, Anthropic, Google, Meta). Not legal advice.
- Pricing (rendered in browser, incl. feature table, Agents add-on and EUR currency) (Pricing page), retrieved 18 Oct 2026
- Subprocessors (published 2026-10-09, effective 2026-10-23) (Sub-processor list), retrieved 14 Oct 2026
- Enterprise security (Trust Center), retrieved 18 Oct 2026
- Terms of Service (effective 2026-04-09) (Terms and conditions), retrieved 18 Oct 2026
Current notes 2026
New sub-processor list published 2026-10-09, effective 2026-10-23: Baseten (USA) newly added as an AI provider, Pinecone no longer listed; this makes eight AI providers (AWS, Anthropic, Baseten, Fireworks AI, Google, Meta, Microsoft, OpenAI; location USA, for Meta additionally other countries). According to the list, Zapier has enabled OpenAI Zero Day Retention; with the customer's own OpenAI key, the customer's terms with OpenAI apply. Terms of Service effective 2026-04-09 (Derived Data for model training with opt-out). The retention page and the Terms name a 'Company' plan that the pricing page does not list. The pricing page moves AI steps, code and SDK to a uniform task model.
Open points of the review
- Enterprise price custom ('Contact for pricing'); 'Company' plan (Terms, retention page) not listed on the pricing page, price and scope not public.
- SOC 2 report only under NDA; auditor and audit result not reviewed. The public SOC 3 report was not retrieved (documents in the Trust Center only after 'Get Access').
- Data Transfer Impact Assessment as of 2023-12-15; does not explicitly address later sub-processors (including AI providers located outside the USA).
- Inconsistency on use for training: security page 'We don’t train on the data that runs through your workflows, on any plan', while Terms section 7(b) allow model training with de-identified Derived Data from customer content (opt-out); scope not explained.
Frequently asked questions
Where does Zapier store data?
US only (plans: Free, Professional, Team, Enterprise). According to the provider, as of 18 Oct 2026.
Is there a DPA for Zapier?
yes in: Free, Professional, Team, Enterprise. According to the provider, as of 18 Oct 2026.
Does Zapier use inputs for AI training?
opt-out available in: Free, Professional, Team; no in: Enterprise. According to the provider, as of 18 Oct 2026.
Where is the provider based?
Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104-5401, USA (privacy policy); subsidiaries include Zapier Automation Ireland Ltd. and Zapier UK Ltd. According to the provider, as of 18 Oct 2026.
All sources
- 01Pricing (rendered in browser, incl. feature table, Agents add-on and EUR currency)Pricing page · retrieved 18 Oct 2026
- 02Privacy Statement (effective 2025-09-05)Privacy notice · retrieved 18 Oct 2026
- 03Data Processing Addendum (as of 2026-08-27)DPA · retrieved 8 Oct 2026
- 04Subprocessors (published 2026-10-09, effective 2026-10-23)Sub-processor list · retrieved 14 Oct 2026
- 05Enterprise securityTrust Center · retrieved 18 Oct 2026
- 06Data Retention/Deletion/Export (as of 2026-04-17)Documentation · retrieved 14 Oct 2026
- 07Terms of Service (effective 2026-04-09)Terms and conditions · retrieved 18 Oct 2026
- 08Zapier Trust Center (Conveyor; updates on SOC reports and sub-processors)Trust Center · retrieved 18 Oct 2026
- 09Data Transfer Impact Assessment (last updated 2023-12-15)Documentation · retrieved 18 Oct 2026
- 10Data Privacy Framework List (entry Zapier, Inc.)Register · retrieved 18 Oct 2026
More tools in Business software with an EU hosting option (in at least one plan)
- DATEV AI features · Based in: Paumgartnerstraße 6-14, 90429 Nürnberg, Germany
- HubSpot Breeze AI · Based in: Cambridge, MA, USA
- Intercom Fin · Based in: Intercom R&D Unlimited Company, 124 St Stephen's Green, Dublin 2, DC02 C628, Ireland
- Lexware Office · Based in: Munzinger Straße 9, 79111 Freiburg, Germany. Contracting party and processor according to the DPA and privacy notice: Haufe Service Center GmbH
All tools in Business software · Tools with an EU hosting option
Further reading
All tools in the category: Business software. Figures across all tools: Data report.