Free guide:winning new clients predictably in 2026 · freeFree guide: win clients predictablyGet it now →
EU compliance setup · Make

Make, set up GDPR-compliant

Make connects your tools, and every run writes the transferred data into its log. Whether that holds up in Europe is decided in three places: when the organisation is created, in the scenario, and in the AI modules.

Checked

What we looked up for Make

01

Contracting party

The Master Services Agreement is concluded with Celonis, Inc. and governed by the laws of the State of New York.Source: make.com · read on 3 October 2026

02

Data centre

When you create an organisation, you choose where its data is stored and processed. The location cannot be changed afterwards.Source: help.make.com · read on 3 October 2026

03

Hosting

Hosting is on Amazon Web Services. According to the sub-processor list, the EU option is in Ireland, and in Germany on the Enterprise plan.Source: assets.ctfassets.net · read on 3 October 2026

04

Transfers to the US

For customers in the EEA, the data processing agreement makes the EU-US Data Privacy Framework the primary transfer mechanism. If it is invalidated, Standard Contractual Clauses apply.Source: make.com · read on 3 October 2026

05

EU-US Data Privacy Framework

Celonis Inc is on the official list. Status on 3 October 2026: active, next recertification due on 28 November 2026.Source: dataprivacyframework.gov · read on 3 October 2026

06

Data processing agreement

The data processing agreement applies with the main agreement. A signed version can be generated at Make.Source: make.com · read on 3 October 2026

07

Execution logs

Execution logs are stored by plan: Free 7 days, Core, Pro and Teams 30 days, Enterprise 60 days.Source: make.com · read on 3 October 2026

08

Confidential data

By default, Make stores the data of each run in the log. With the scenario setting 'Keep data confidential', Make keeps none of it; the log then only shows that a run happened.Source: help.make.com · read on 3 October 2026

09

Webhook queue

Incoming webhook data is always stored in the queue, even with the confidential setting. It is deleted as soon as a scenario has processed it.Source: help.make.com · read on 3 October 2026

10

AI modules

For AI features, the sub-processor list names OpenAI and Anthropic among others, each with hosting location United States.Source: assets.ctfassets.net · read on 3 October 2026

This page is not legal advice and we are not a law firm. We report what the vendor itself documents, with a date. Vendors change their terms; the linked source in its current version always prevails.

Typical pitfall

Where Make setups snag in Europe

01

The region is a one-way street

If the organisation was created in the US, it stays there. The way into the EU is a new organisation in the EU data centre, with the scenarios moved across.

02

Personal data in the log

Every run writes names, addresses and form contents into the log, for 7 to 60 days depending on plan. If you do not want that, switch on the confidential setting per scenario and accept harder troubleshooting in return.

Process

How we set up Make

Check region and agreement

We check which data centre your organisation is in, get the signed data processing agreement and enter Celonis, Inc. in your records of processing.

Defuse the scenarios

The confidential setting for every scenario that moves contact data, wherever troubleshooting allows it. Plus the question which modules call AI providers in the US.

Documentation

A list of which scenario sends which data where, how long it stays in the log, and which paragraph belongs in the privacy notice.

Questions

What people ask about Make

Is Make GDPR compliant?

No tool is compliant on its own; it depends on the setup. Make provides a data processing agreement, a selectable EU data centre and Celonis, Inc.'s Data Privacy Framework registration. Whether your setup holds depends on your organisation's region, the logs and the AI modules.

Can I move a Make organisation from the US to the EU?

No. According to Make, the data centre location cannot be changed after creation. The way is a new organisation in the EU data centre.

How long does Make keep transferred data?

In the execution logs, 7 to 60 days depending on plan. With 'Keep data confidential' in the scenario, Make keeps none of the content. Webhook data stays in the queue until a scenario has processed it.

Is Make a European provider?

Not contractually: the agreement is with Celonis, Inc. and governed by New York law. Hosting is on AWS, in the EU if you choose it.

Other tools

There is usually more than one tool

The setup costs € 890 for your whole stack. The other tools we have checked the same way:

Tell us how Make runs for you.

Tell us which tools you use and where your contacts come from. In the first call we will tell you whether € 890 covers it or whether more needs fixing, honestly either way.

Request the setup