Contracting party
Zapier, Inc. is a Delaware corporation (USA).
EU compliance setup · Zapier
Zapier, set up GDPR-compliant
Zapier passes data from one tool to the next. A copy stays behind, in the US and for longer than most people think. And the agreement with Zapier ends exactly where the data leaves Zapier.
- Facts checked on 3 October 2026, each with its source.
- Fixed price € 890 for your whole stack, not per tool.
- Technical setup, not legal advice.
What we looked up for Zapier
Hosting
Zapier hosts data on AWS servers in the United States, including personal data processed on behalf of customers. Zapier does not offer EU-only storage.
EU-US Data Privacy Framework
Zapier, Inc. is on the official list. Status on 3 October 2026: active, next recertification due on 14 July 2027.
Data processing agreement
The data processing addendum is incorporated into the Terms of Service; no separate signature is needed. It no longer applies once data has been passed to a connected app. That app's agreement governs from there.
Retention
Content passing through a Zap stays 7 days in logs, 29 to 69 days in the account and up to 4 months in backups.
Shorter retention
According to the help centre, Zap history can be shortened to 7 to 30 days on the Enterprise plan. The legal retention page also names the Company plan.
Deleting runs
Individual Zap runs can be deleted from the history. That removes only the record, not the action already carried out.
Internal analytics
Zap runs are also stored in a non-production database for Zapier's own product analytics.
This page is not legal advice and we are not a law firm. We report what the vendor itself documents, with a date. Vendors change their terms; the linked source in its current version always prevails.
Where Zapier setups snag in Europe
Copies in the Zap history
Every sign-up that runs through a Zap then sits readable in Zapier for weeks, in the US, and in backups for up to four months. That belongs in your records of processing, and where possible it gets shortened or deleted.
One agreement does not cover the chain
Zapier's data processing addendum ends where the data leaves Zapier. Every connected app needs its own agreement and its own transfer basis.
How we set up Zapier
Inventory the Zaps
Which Zap moves which personal data where? That gives the list of apps that need agreements.
Limit the history
Shorten retention where the plan allows, otherwise delete runs regularly. Fields the target app does not need are not passed on in the first place.
Agreements along the chain
Data processing agreements with Zapier and every connected app, US transfers documented, paragraph for the privacy notice.
What people ask about Zapier
Is Zapier GDPR compliant?
No tool is compliant on its own; it depends on the setup. Zapier is listed under the Data Privacy Framework and has a data processing addendum in its terms. But all data sits in the US, copies stay in the history for weeks, and the agreement does not cover the connected apps.
Can I store Zapier data in the EU?
No. Zapier hosts all data on AWS in the US and, according to its own privacy page, does not offer EU-only storage.
How long does Zapier keep transferred data?
7 days in logs, 29 to 69 days in the account, up to 4 months in backups. Only higher plans can shorten that; otherwise you are left with deleting individual runs manually.
There is usually more than one tool
The setup costs € 890 for your whole stack. The other tools we have checked the same way:
Tell us how Zapier runs for you.
Tell us which tools you use and where your contacts come from. In the first call we will tell you whether € 890 covers it or whether more needs fixing, honestly either way.
Request the setup