Zapier AI
Zapier AI combines Copilot workflow assistant and Zapier Agents, which autonomously trigger actions across 8,000+ SaaS apps with credentials stored in Zapier.
Risk score
Assessment across data handling, compliance, security and transparency.
Overview
Zapier AI layers LLM-powered features on top of Zapier's automation platform: Copilot builds Zaps from natural language, Agents run autonomous multi-step workflows, and the MCP server exposes 30,000+ actions to external LLMs. Teams use it to automate cross-tool workflows across CRM, email, storage, finance, and support. Because Zapier holds OAuth credentials for every connected app, an AI agent operating on a user's behalf effectively inherits broad access to that employee's SaaS footprint. Zapier is SOC 2 Type II and GDPR-compliant, but the platform explicitly does not support PHI or sign BAAs. The blast-radius from a misconfigured agent, prompt injection, or compromised account is one of the highest in the AI category.
Risk factors
3- Integrates with numerous third-party applications, increasing data exposure.
- Requires credentials stored in Zapier, which may pose a risk if compromised.
- Cloud-based with potential for data to be processed off-site.
Recommendations
8- Require enterprise plan so AI training opt-out is enforced by default
- Inventory every connected app and apply least-privilege OAuth scopes
- Block PHI, payment data, and regulated source systems from Zap connections
- Require human approval steps for agents that write to CRMs, finance, or prod systems
- Monitor task history and agent run logs for anomalies
- Restrict who can create Agents and connect new apps (admin governance)
- Disable or tightly scope MCP server exposure to third-party LLMs
- Run prompt-injection tabletop exercises for inbound email/ticket triggers
Data handling
- Storage
- Hosted on AWS in the United States with AES-256 encryption and multi-region redundancy
- Retention
- Task history retained per plan (7 days free, up to 6 months on higher tiers); raw task data purged on schedule
- Training on inputs
- Enterprise customers auto-opted out of AI training; other plans must opt out via form
More AI Agents tools
See all →Alibaba Wukong
Agentic AI platform for enterprises to manage multiple AI agents through a single interface with enterprise-grade security.
Google Agentspace
Enterprise AI agent platform by Google that connects AI assistants to internal business data and tools.
Manus
Autonomous AI agent that independently plans and executes complex multi-step tasks.
Manus AI
Autonomous AI agent platform by Meta that executes complex multi-step tasks independently
OpenClaw
Open-source, locally-installed AI agent that bridges messaging apps (Slack, WhatsApp, Discord, Signal, Telegram, iMessage, Teams) to external LLMs with persistent sessions, skills, and tool execution on the host machine.
See the AI tools in use across your organisation.
Connect your tool research to the employee AI activity and data security questions that matter to your team.