Vendor record · zapier.com
What Zapier promises about your data.
Where Zapier publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Zapier lists its sub-processors at zapier.com/legal/subprocessors. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at zapier.com/dpa (read September 28, 2026) gives you 14 days to object.
- Window
- 14
- Sub-processors
- 37
- Pages
- 6
- Copies
- 27
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Zapier DPA
Zapier's data processing agreement gives 14 days to object to a new sub-processor. Here is the clause, from our September 28, 2026 copy:
14
days to object
“In the event that you do not wish to consent to the use of such additional Subprocessor, you may notify Zapier that you do not consent within fourteen(14) days of Zapier’s advance written notice based on reasonable data protection concerns.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Zapier published it.
zapier.com/dpa · read 2026-09-28 · fingerprint 7bb8f704551fab8a…
Zapier sub-processors
Zapier publishes a sub-processor list at zapier.com/legal/subprocessors; we last read it on October 15, 2026. It names 37 entries. The first 15, as the list prints them: Ada; Algolia; Amazon Web Services (AWS); Anthropic; Baseten; Databricks; Datadog; Firecrawl; Fireworks AI; Fullstory; Gong; Google; Grafana Labs (Raintank, Inc.); Heroku; Knock; and 22 more in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
37 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Zapier keeps your data
We hold no statement about data retention from Zapier's watched pages. The pages we watch: data processing agreement zapier.com/dpa; pricing page zapier.com/pricing; privacy policy zapier.com/privacy; sub-processor list zapier.com/legal/subprocessors; terms of service zapier.com/terms; trust and security page zapier.com/security-compliance. On training with customer data, Zapier's privacy policy (zapier.com/privacy, in the copy read September 28, 2026) says: “To help us understand how you use our Sites and Services and to help us improve them, we may collect data about your interactions with our Sites and Services.”
Training on customer data
“By transmitting, processing, and/or storing Customer Content in the Service, you hereby grant Zapier a worldwide, non-exclusive, and limited-term license to access, use, process, copy, store, distribute, perform, transmit, export, and display Customer Content and to access your Zapier Account, as reasonably necessary: (i) to provide, maintain, operate, improve, and update the Service;”
zapier.com/terms · read 2026-09-28
Training on customer data
“Does Zapier use customer data to train AI models? We don’t train on the data that runs through your workflows, on any plan.”
zapier.com/security-compliance · read 2026-10-04
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 37 · 4 name an AI provider we list
Ada
Technical support chat management
USA
Algolia
Search functionality for Zapier content, including templates, blog posts, and apps
USA
Amazon Web Services (AWS)
Cloud service and artificial intelligence provider
USA
AnthropicAI · Anthropic
Artificial intelligence provider
USA
BasetenAI · Baseten
Artificial intelligence provider
USA
Databricks
Data intelligence
USA
Datadog
Application performance monitoring, infrastructure and network monitoring, and error capturing
USA
Firecrawl
Knowledge source gathering capabilities
USA
Fireworks AIAI · Fireworks AI
Artificial intelligence provider
USA
Fullstory
Analytics to improve Zapier services
USA
Gong
Call recording and transcribing for services and technical support
USA
Cloud service and artificial intelligence provider
USA
Grafana Labs (Raintank, Inc.)
Observability, monitoring, and application reliability
USA
Heroku
Deployment and management of Zapier services
USA
Knock
Customer and end-user communications
USA
Liveblocks
Collaboration capabilities
USA
Looker
Analysis of Zapier services usage
USA
MadKudu
Lead Score by Zapier
USA
Mailgun
Email by Zapier
USA
Meta
Artificial intelligence provider
USA, Australia, Denmark, Finland, Indonesia, Ireland, Malaysia, Sweden
Microsoft
Artificial intelligence provider
USA
OpenAIAI · OpenAI
Artificial intelligence provider
USA
Redis
Data storage and caching
USA
Sentry
Debugging and support for error reporting
USA
Stytch
End-user authentication capabilities
USA
Twilio
SMS by Zapier
USA
Uploadcare
File uploading capabilities
USA
Vercel
Cloud service provider
USA
Vitally
Customer success health scoring, and user engagement/usage
USA
WhatsApp Notifications
USA
Zapier Australia Pty Ltd.
Zapier services and support
Australia, with a branch in New Zealand (Zapier Australia Pty Ltd.)
Zapier Automation Inc.
Zapier services and support
Canada
Zapier Automation Ireland Ltd.
Zapier services and support
Ireland, with a branch in Spain (Zapier Automation Ireland Limited Sucursal En …
Zapier India Private Limited
Zapier services and support
India
Zapier UK Ltd.
Zapier services and support
UK
Zendesk
Technical support ticket management
USA
Zoom
Video conferencing and communications for services and technical support
USA
Certifications the trust page names · SOC 2 · SOC 2 Type II · SOC 3
Laws the trust page names · GDPR
International transfer notice · United States
“In connection with the performance of the Agreement, you authorize Zapier to transfer Personal Information internationally, and in particular, that Personal Information may be transferred to and processed by Zapier in the United States and other jurisdictions where Zapier and its Subprocessors have operations.”
zapier.com/dpa · read 2026-09-28
International transfer notice · United States
“Information that we collect from the Sites will be transferred to, and processed in, the United States and in any other country where Zapier or its affiliates, subsidiaries, or third-party service providers maintain facilities or personnel.”
zapier.com/privacy · read 2026-09-28
The pages' own stamps: Effective Date 2026-10-23 · effective 2026-08-27 · Effective date 2025-09-05 · Effective Date 2026-04-09 · Last Updated 2026-08-27 · Posted 2026-10-09 · Posted 2025-09-05 · Posted 2026-04-08 · Prior Version · Previous version · Prior Version
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
What this page doesn’t tell you
No score.
Nothing here rates Zapier. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Zapier? With an email at zapier.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Zapier in your product? Hear the morning we read a change.
You get the lines that moved, in Zapier’s own words, and the date any window closes. No card. Nothing to cancel.