Zapier
Your own published record, as at 2026-08-10.
Your Details
The Macro Picture17
1 conditional row (Commercial Tier = Company or Enterprise plan) sit outside these counts. A Variant is a stated deployment mode, not a published offering, and the Grid Standard holds it to its own band.
What Is Published8
Your Own Words3
We also make onward transfers to subprocessors and take steps to agree to appropriate transfer safeguards, such as relevant standard contractual clauses, with each subprocessor. We take measures to evaluate the privacy and security practices of our subprocessors, including: Each subprocessor is required to agree to a data processing agreement with us. We evaluate the data privacy and security practices of each subprocessor prior to engaging and onboarding such subprocessor. We conduct periodic audits of key subprocessors throughout the terms of our respective agreements with them.
Content submitted to or generated by MCP ("MCP Content") includes: Prompts and responses to and from your MCP servers (inputs and outputs). Activity logs for tool executions... MCP Content is stored in your Zapier account until you delete your MCP server associated with the content or Zapier account. Once deleted, it is deleted from backups within 4 months. For Agents: 'Data from conversations and activity logs stored in an agent are stored in your Zapier account until you delete that agent.' For Chatbots: 'Conversations are stored for 60 days and then deleted.'
Zapier may derive de-identified data sets from your Customer Content ("Derived Data") and may use such Derived Data to operate, enhance, improve, and develop Zapier products or services, including through model training. You may opt out of providing Zapier with such permission for Derived Data by submitting this opt-out form; and (iii) if you are a subscriber to the Company Plan or the Enterprise Plan, your Zapier Account and all users on your Zapier Account are automatically opted out from Derived Data sets.
Parties You Name36
Register Check3
AI Role By Offering1
Assessment Basis
Produced under Method v1.6 from the entity's fact record. 8 of 8 observations were measured under that generation; the rest read Not Measured, which is a fact about this register's coverage and not a finding about the entity.
Read from 16 first-party surface(s) across 1 assessed offering(s), found by the entity's own link graph and sitemap rather than by guessed paths.
- Fact Record
- Version 1.0, dated 2026-08-10
- Standards Commit
- af541328ca3f
- Register Control Quality
- Both Views
Verification And Challenge
Every finding on this record is a statement about what could be read on your own published surfaces as at 2026-08-10. Correspondence route as recorded on this card input: ror@blacksnowintel.com.
What A Machine Could Not Establish2
2 questions are open and 6 are established, read as at 2026-08-10 under method v1.6.
Publish it: say whether decisions about people are made automatically.
Disclosed, but incompletely.
Where To Put It
This was read on your own page at https://zapier.com/privacy. That is the page a reader already reaches for and does not find it on, so it is the page to correct first.
Where Others Stand
4 organisations in the register say whether decisions about people are made automatically. You publish on it, but not completely.
What A Published Answer Looks Like
Under certain laws, residents may also be permitted to opt out of certain profiling relating to automated processing analyzing certain categories of an individual's information that would produce a legal or similarly significant effect. [the vendor] does not engage in this type of profiling of individuals.
A question answered plainly in public, by an organisation read as Strong on it. It is not an endorsement of the position the sentence states — Black Snow reads what is published and never recommends what to practise. Read on a published trust or security page. Claim tier Quoted. The organisation that published it is not named. A name in the original is replaced; nothing else in the sentence is changed.
One is named here, and one is deliberate. The rest of the open questions are listed below without a prescription; what to publish for each, in what order, and drafted machine-readable evidence for all of them, is the Deep Dive.
Still Open
Deep Dive
The full assessment, plus consulting on what to fix.