# Zapier

## Kurzbeschreibung
**“Automate AI Workflows, Agents, and Apps”**


**Zapier** is a no-code/low-code automation platform that enables workflows (“Zaps”) to be connected between SaaS tools, forms, spreadsheets, chatbots, and AI functions.


Zapier currently brings together Zaps, Tables, Forms, and Zapier MCP in a shared AI orchestration platform, positioning itself not only as a traditional integration service but also as a platform for AI workflows, agents, and chatbots.

## Claim
Automate AI Workflows, Agents, and Apps

## Geeignet für
- API Integration
- Automation / Workflows
- Email / Communication
- Customer Service & Chatbots
- Marketing & Advertising
- no Code App
- Productivity & Planning
- Project Management
- Research
- Texts / Content
- Sales / Sales
- Knowledge Management / Internal Search

## Kernfunktionen
- API Integration
- Automation
- Chatbot
- AI agents

## Preismodell
- **free:** Zaps, Tables, and Forms, limited Tasks, Two-Step Zaps, and Zapier Copilot with daily limits.
- **subscription:** **Professional** Multi-step Zaps, Premium Apps, Webhooks, Support, AI Fields, and Conditional Form Logic.

**Team** Multi-user plan with Shared Zaps, folders, Shared App Connections, SAML SSO, and Premier Support.
- **other:** **Enterprise** Unlimited Users, advanced admin rights, App Controls, VPC Peering, annual task limits, Observability, and Technical Account Manager.


**Task Tiers / Pay-as-you-go / Agents** Billing based on task quotas; additional AI-/Agents-/MCP usage depending on plan and consumption.

## DSGVO und Datenschutz
**Gesamteinschätzung:** Conditional

**On-Prem / local hosting: indirect / not available**

Operation of the entire solution on the customer's own hardware or as an on-premise/self-hosting variant is not stated on the website.

**Private Cloud / data center: partial**

For Enterprise, there is a limited sovereignty path: for supported AI products, inference can run through the customer's own AWS Bedrock account. However, this is not a general dedicated private cloud deployment of the overall platform and applies only to certain AI products.

**EU SaaS / managed: unclear**

Zapier is clearly available as managed SaaS, but EU/EEA data residency or an EU data center commitment is not stated on the website. Rather, the published subprocessor list frequently points to locations in the USA.

**Hybrid: partial**

Partially hybrid use is documented because Enterprise customers can connect their own AI provider accounts for Zapier Agents and Knowledge by Zapier, so that AI inference runs through the customer's own cloud infrastructure. However, this does not cover the entire platform or all AI products.

**DPA / AVV: covered**

A DPA/AVV is available. Zapier explicitly refers to its own Data Processing Addendum and states that it contains SCCs for EU data.

**No training: partial**

Enterprise customers are automatically excluded from training or improvement using their content; other customers can opt out. In addition, Zapier states that AI subprocessors may not use customer data for their own model training. This means a protection path exists, but it is not automatically active by default for all customers.

**Open source / transparency path: partial**

There are references on the website to open-source activities and open tools such as the Zapier Platform CLI, as well as a degree of transparency via documented subprocessors and export/control functions. However, no open-source core product or self-hostable main platform is stated.

**Data processing**

For customer content, Zapier describes itself in data protection terms as a processor and refers to a DPA. International transfers are addressed through the DPA with SCCs. The subprocessor list names numerous service providers that store or process customer content, with locations according to the website predominantly in the USA. For AI, there are also documented control options: Enterprise customers are excluded from training with customer content by default, other customers can opt out, and for certain products AI inference can run through the customer's own AWS Bedrock account.

**Conclusion**

For users in the EU/EEA, Zapier is not documented as a clearly EU-resident standard SaaS. Positive aspects include DPA/SCCs, EU representation, subprocessor transparency, SOC 2 evidence, and opt-out rules for AI training. Due to the unproven EU data residency, the subprocessor locations listed on the website predominantly as being in the USA, and the customer-owned AI infrastructure being available only selectively, overall GDPR use should be assessed as **conditional**.

**Sources**

- [https://zapier.com/legal/data-privacy](https://zapier.com/legal/data-privacy)
- [https://zapier.com/legal/data-processing-addendum](https://zapier.com/legal/data-processing-addendum)
- [https://zapier.com/legal/subprocessors](https://zapier.com/legal/subprocessors)
- [https://zapier.com/legal/automation-platform-information](https://zapier.com/legal/automation-platform-information)
- [https://zapier.com/ja/security-compliance](https://zapier.com/ja/security-compliance)
- [https://help.zapier.com/hc/en-us/articles/44335174141581-Use-your-own-AI-accounts-in-Zapier](https://help.zapier.com/hc/en-us/articles/44335174141581-Use-your-own-AI-accounts-in-Zapier)
- [https://zapier.com/engineering/open-source-at-zapier/](https://zapier.com/engineering/open-source-at-zapier/)

Zapier documents key privacy components for the European region, including a privacy policy, a Data Processing Addendum with SCCs for EU data, EU/UK representatives, and a subprocessor list. For AI features, there is an opt-out from model training; for Enterprise customers, this is automatically enabled. At the same time, the subprocessor list names predominantly US-based locations for deployment-relevant providers and AI providers, and the website does not specify general EU data residency for the standard SaaS version. This makes GDPR-compliant use in the EU/EEA appear realistic only under conditions such as use of a DPA/SCCs, transfer assessment, and careful configuration, but not as a clearly and comprehensively documented default situation.

**Positive**

Positive aspects include the available privacy documentation, the DPA with SCCs for EU data, the designation of EU/UK representatives, the published subprocessor list, the statement that AI subprocessors may not use customer data for model training, as well as the opt-out from AI training for customer content.

**Negative**

Negative is that the website does not specify general EU data residency for Zapier as a SaaS. In the subprocessor list, the named infrastructure, cloud, and AI providers are predominantly listed as being located in the USA. On-premise or true self-hosting of the overall platform is not indicated on the website.

**Server location**

The website does not specify an EU/EEA server location for the standard SaaS deployment. The subprocessor list names AWS, Google, OpenAI, Anthropic, Microsoft, Pinecone, Redis, Datadog, Heroku, Vercel, and others, among others, as being located in the USA. General EU data residency is not specified on the website.

## Hosting und Daten
- **On-Prem / lokales Hosting:** unknown
- **Private Cloud / Rechenzentrum:** teilweise / indirekt
- **EU SaaS / Managed:** unknown
- **Hybrid:** teilweise / indirekt
- **AVV / DPA:** abgedeckt
- **Kein Training auf Kundendaten:** teilweise / indirekt
- **Open-Source / Transparenz-Pfad:** teilweise / indirekt

## Standort
**Land:** USA

**Taxonomie:** USA

Zapier, Inc., 548 Market St. #62411, San Francisco, CA 94104-5401, USA

## Vorteile
- Very broad integration coverage across thousands of apps n• No-code entry point, but also webhooks, MCP, and SDK for technical teams
- Strong enterprise governance with SAML, SCIM, audit logs, IP allowlist, app policies, and VPC peering
- Transparent core pricing page with Free/Professional/Team/Enterprise n• DPA, SCCs, subprocessors list, and DTIA publicly available

## Nachteile
- Standard data storage according to the Privacy FAQ in AWS data centers in the USA; EU-only storage is publicly denied
- The free plan is heavily limited for serious use (100 tasks/month, only two-step Zaps, Copilot with a daily limit)
- Many important security/governance features are only available in the Enterprise tier
- The DPA no longer applies to data once it has been passed on to a third-party service
- Not intended for regulated PHI/HIPAA data; Zapier does not sign a BAA for this

## Quellen
- Offizielle Website: https://zapier.com/pricing

## Letzter Datenstand
2026-04-25

## Originalseite
https://kifox.ai/en/ki-tools/zapier-en/