How many subprocessors does Zapier use?

Zapier lists 38 subprocessors on its published list, including Algolia, Amazon Web Services (AWS), Anthropic, Baseten, and Databricks and 33 more.

Where does Zapier process customer data?

The subprocessors named by Zapier are located in USA, Australia, Ireland, Canada, Denmark, and Finland and 7 other locations, as stated on its list.

Does Zapier use customer data to train AI models?

According to its terms of service, Zapier uses customer data to train AI models unless customers opt out: “Zapier may derive de-identified data sets from your Customer Content ("Derived Data") and may use such Derived Data to operate, enhance, improve, and develop Zapier products or services, including through model training.”

Which AI model providers does Zapier send customer data to?

Baseten, Fireworks AI, Meta, and Ndea are named in Zapier's AI terms: “Meta was added as a subprocessor; it will be an artificial intelligence provider.”

How quickly does Zapier report a personal data breach to customers?

According to its DPA, Zapier reports a personal data breach to customers within 48 hours: “Zapier will (a) notify you without undue delay, and not later than 48 hours after Zapier discovers the Security Incident”

How much notice does Zapier give before adding a subprocessor?

Zapier's DPA gives 14 days' notice of a new subprocessor, the time customers have to object: “Zapier will provide fourteen (14) days' advance written notice”

How does Zapier transfer personal data outside the EU?

Zapier's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “Zapier will use the Data Privacy Framework to lawfully receive European Data in the United States”

When was Zapier's subprocessor list last checked?

ClauseTrail last checked Zapier's subprocessor list on November 9, 2026 and last saw it change on October 28, 2026. Lists are re-checked daily.

How do I find out when Zapier adds or removes a subprocessor?

ClauseTrail monitors Zapier's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.

Zapier Subprocessors List (November 2026): Changes and History

Zapier names 38 subprocessors on its published list. Read from the vendor's own page and re-checked daily.

Last checked November 9, 2026 Last change October 28, 2026 Official source ↗

Zapier subprocessors (November 2026)

#	Subprocessor	Purpose	Location
1	Algolia	Search functionality for Zapier content, including templates, blog posts, and apps	USA
2	Amazon Web Services (AWS)	Cloud service and artificial intelligence provider	USA
3	Anthropic	Artificial intelligence provider	USA
4	Baseten	Artificial intelligence provider	USA
5	Databricks	Data intelligence	USA
6	Datadog	Application performance monitoring, infrastructure and network monitoring, and error capturing	USA
7	Firecrawl	Knowledge source gathering capabilities	USA
8	Fireworks AI	Artificial intelligence provider	USA
9	Fullstory	Analytics to improve Zapier services	USA
10	Google	Cloud service and artificial intelligence provider	USA
11	Grafana Labs (Raintank, Inc.)	Observability, monitoring, and application reliability	USA
12	Heroku	Deployment and management of Zapier services	USA
13	Knock	Customer and end-user communications	USA
14	Liveblocks	Collaboration capabilities	USA
15	Looker	Analysis of Zapier services usage	USA
16	Meta	Artificial intelligence provider	USA, Australia, Denmark, Finland, Indonesia, Ireland, Malaysia, Sweden
17	Microsoft	Artificial intelligence provider	USA
18	Ndea	Artificial intelligence provider	USA
19	OpenAI	Artificial intelligence provider	USA
20	Redis	Data storage and caching	USA
21	Sentry	Debugging and support for error reporting	USA
22	Stytch	End-user authentication capabilities	USA
23	Uploadcare	File uploading capabilities	USA
24	Vercel	Cloud service provider	USA
25	Ada	Technical support chat management	USA
26	Gong	Call recording and transcribing for services and technical support	USA
27	Vitally	Customer success health scoring, and user engagement/usage	USA
28	Zendesk	Technical support ticket management	USA
29	Zoom	Video conferencing and communications for services and technical support	USA
30	MadKudu	Information gathering capabilities about leads submitted by customer queries	USA
31	Mailgun	Email sending capabilities per customer queries	USA
32	Twilio	SMS sending capabilities per customer queries	USA
33	WhatsApp	WhatsApp chat sending capabilities per customer queries	USA
34	Zapier Australia Pty Ltd.	Zapier services and support	Australia, New Zealand
35	Zapier Automation Inc.	Zapier services and support	Canada
36	Zapier Automation Ireland Ltd.	Zapier services and support	Ireland, with a branch in Spain
37	Zapier India Private Limited	Zapier services and support	India
38	Zapier UK Ltd.	Zapier services and support	UK

Get an email when Zapier changes its subprocessors

ClauseTrail re-checks this list every day and tells you exactly who was added or removed — including when a vendor starts sending data to an AI provider. The first vendors are free.

Track Zapier free

AI and customer data at Zapier

What Zapier's own documents say, with the sentence each answer comes from.

Trains AI models on customer data: Yes, unless you opt out

“Zapier may derive de-identified data sets from your Customer Content ("Derived Data") and may use such Derived Data to operate, enhance, improve, and develop Zapier products or services, including through model training.”
Terms of service, zapier.com ↗
Sends customer data to AI model providers: Yes: Baseten, Fireworks AI, Meta, and Ndea

“Meta was added as a subprocessor; it will be an artificial intelligence provider.”
AI terms, trust.zapier.com ↗
How to opt out: Customers can opt out of having their Customer Content used to create Derived Data for model training by submitting an opt-out form, and Company/Enterprise plan accounts are automatically opted out.

“You may opt out of providing Zapier with such permission for Derived Data by submitting this opt-out form”
Terms of service, zapier.com ↗

Key DPA terms at Zapier

What Zapier's data processing agreement commits to, with the sentence each answer comes from. SCCs or the Data Privacy Framework: what's the difference?

Breach notification: Within 48 hours

“Zapier will (a) notify you without undue delay, and not later than 48 hours after Zapier discovers the Security Incident”
DPA, zapier.com ↗
Notice of a new subprocessor: 14 days ahead

“Zapier will provide fourteen (14) days' advance written notice”
DPA, zapier.com ↗
Transfers outside the EU: Standard contractual clauses and the EU–US Data Privacy Framework

“Zapier will use the Data Privacy Framework to lawfully receive European Data in the United States”

“the applicable standard contractual clauses will be incorporated by reference and form a part of this DPA”
DPA, zapier.com ↗
Customer data after the contract ends: Deleted or returned when the contract ends

“Promptly following termination of the Agreement and this DPA for any reason, Zapier will destroy the Personal Information it was processing on your behalf”
DPA, zapier.com ↗
Audit rights: Once a year

“occur no more than once annually (unless required under Applicable Data Protection Law)”
DPA, zapier.com ↗

Documents we track for Zapier

AI terms: checked November 9, 2026 changed October 28, 2026 trust.zapier.com ↗
DPA: checked November 9, 2026 changed October 28, 2026 zapier.com ↗
Privacy policy: checked November 9, 2026 zapier.com ↗
Subprocessor list: checked November 9, 2026 changed October 28, 2026 zapier.com ↗
Terms of service: checked November 9, 2026 zapier.com ↗

Change history

October 28, 2026

Subprocessor added

Zapier added Ndea (USA) as a subprocessor.
October 28, 2026

DPA changed

A formatting divider ('***') was removed before the DPA title, and a spacing typo in Section 9.5 was fixed ('fourteen(14)' to 'fourteen (14)') with no change in meaning or deadlines.
October 28, 2026

AI terms changed

Zapier's AI Terms trust center page now lists an Oct 27, 2026 announcement that Ndea, an artificial intelligence provider, was added as a new subprocessor, effective November 10, 2026.
October 10, 2026

AI terms changed

Zapier added Baseten as a new subprocessor acting as an artificial intelligence provider, and removed Pinecone as a subprocessor, effective October 23, 2026.

Tracking since September 25, 2026. Every change links to the two versions of the document it came from. All vendors' changes →

Zapier subprocessors FAQ

How many subprocessors does Zapier use?: Zapier lists 38 subprocessors on its published list, including Algolia, Amazon Web Services (AWS), Anthropic, Baseten, and Databricks and 33 more.
Where does Zapier process customer data?: The subprocessors named by Zapier are located in USA, Australia, Ireland, Canada, Denmark, and Finland and 7 other locations, as stated on its list.
Does Zapier use customer data to train AI models?: According to its terms of service, Zapier uses customer data to train AI models unless customers opt out: “Zapier may derive de-identified data sets from your Customer Content ("Derived Data") and may use such Derived Data to operate, enhance, improve, and develop Zapier products or services, including through model training.”
Which AI model providers does Zapier send customer data to?: Baseten, Fireworks AI, Meta, and Ndea are named in Zapier's AI terms: “Meta was added as a subprocessor; it will be an artificial intelligence provider.”
How quickly does Zapier report a personal data breach to customers?: According to its DPA, Zapier reports a personal data breach to customers within 48 hours: “Zapier will (a) notify you without undue delay, and not later than 48 hours after Zapier discovers the Security Incident”
How much notice does Zapier give before adding a subprocessor?: Zapier's DPA gives 14 days' notice of a new subprocessor, the time customers have to object: “Zapier will provide fourteen (14) days' advance written notice”
How does Zapier transfer personal data outside the EU?: Zapier's DPA relies on standard contractual clauses and the EU–US Data Privacy Framework: “Zapier will use the Data Privacy Framework to lawfully receive European Data in the United States”
When was Zapier's subprocessor list last checked?: ClauseTrail last checked Zapier's subprocessor list on November 9, 2026 and last saw it change on October 28, 2026. Lists are re-checked daily.
How do I find out when Zapier adds or removes a subprocessor?: ClauseTrail monitors Zapier's subprocessor list, DPA, privacy policy and terms and emails you the exact change — who was added or removed and what the page said before and after. The first vendors are free.