Zapier

Free Tier Ratings

Last Reviewed: 2026-07-14

SOC 2 on all plans. Two-step Zaps limit complexity but sufficient for basic internal automations. MCP included for AI integrations across 9,000+ apps.

Excellent for connecting marketing tools. 9,000+ app integrations. Tables and Forms included at no cost.

Limited tasks (100/mo). Data training on by default — opt-out form submission required. Two-step Zap limit restricts workflow complexity. AI Guardrails (PII/prompt-injection detection) is now free on this tier.

Good integrations with nonprofit CRMs. Opt-out of data training recommended before automating donor workflows. AI Guardrails is free on Free tier as of March 2026 GA.

No HIPAA compliance. No BAA available. Cannot process PHI or sensitive client data under any plan.

AI by Zapier includes built-in model access and bring-your-own API key support. MCP (now also called 'Super MCP') enables AI assistants to act across 9,000+ apps.

On by default

Zapier may use de-identified derived data from customer content for model training. Must submit opt-out form manually. Each user must opt out separately. Enterprise/Company plans auto-opted out.

Manual form

Submit opt-out form (linked from zapier.com/security-compliance) to disable data training. Each individual user must submit separately — no account-level opt-out on Free plan.

Possible

Zap execution history visible in run history dashboard. Zapier support staff may access data to assist with support tickets. Agents activity visible in dashboard.

29–69 days

Zap run history retained 29–69 days, deleted on the first Monday of the month. Chatbot conversations retained 60 days. Agent/Table/Canvas data retained until deleted by user, then purged from backups within 4 months.

SOC 2 Type II

SOC 2 Type II and SOC 3 on all plans. AES-256 encryption at rest, TLS 1.2+ in transit (TLS hardened November 2025). GDPR and CCPA compliant. EU-US Data Privacy Framework certified. Free AI Guardrails app available for PII/prompt-injection/toxicity detection (GA March 2026).

9,000+ app integrations with MCP and SDK

Unmatched ecosystem connecting virtually any business tool. 30,000+ (66,000+ triggers and actions cited in some 2026 materials) actions accessible. MCP (Model Context Protocol, sometimes called 'Super MCP') lets AI assistants like Claude and ChatGPT take actions across all connected apps; the new Zapier SDK (launched 2026) extends this to custom AI agents and coding tools. Included on all plans.

SOC 2 on all plans

Unusual in industry — SOC 2 Type II and SOC 3 available even on free tier. Zapier Agents achieved full SOC 2 readiness in December 2025 and reached general availability with Enterprise MCP support in April 2026.

No HIPAA compliance at any tier

Explicitly unsupported at all tiers. Zapier will not sign BAAs. Terms of Service (updated April 9, 2026) prohibit transmitting PHI. Do not use for healthcare data or client case management involving sensitive health information.

AI Guardrails for PII detection — now free and GA everywhere

Launched February 2026 and reached general availability by March 31, 2026: a built-in app that detects 30+ types of PII (SSNs, credit cards, emails, addresses; PII detection currently supports English and Spanish), can automatically block or redact sensitive data before it passes downstream, and detects prompt injection and jailbreak attempts. Free on every plan including Free tier, and usable inside Zaps, Agents, or via MCP for external AI clients.

15% nonprofit discount (direct only)

Modest compared to competitors offering 50%+. Applies to one plan only. Not available on TechSoup or Goodstack — must apply directly at zapier.com/non-profits with proof of nonprofit status.

Data training opt-out: manual vs. automatic

Free, Professional, and Team plan users must submit an individual opt-out form — no account-level control. Enterprise/Company plans are automatically opted out for all users. This remains a meaningful governance gap for teams, though new App Access Controls (April 2026) give Enterprise admins broader (though separate) governance over which apps/tools are accessible.

Unified, model-tier AI pricing (2026)

As of mid-2026, AI steps, code, and SDK calls draw from the same task pool as regular Zap workflows. Since June 15, 2026, AI by Zapier steps are priced by model tier — Standard (1x), Advanced (3x, the new default), or Premium (5x) — with a 75-task-per-run safety cap that pauses a Zap for approval if exceeded. Nonprofits running AI-heavy workflows should review task consumption carefully under this new metering model.

2026-06-15

AI by Zapier introduced model-tier-based task pricing: Standard (1x), Advanced (3x, new default), and Premium (5x) multipliers determine how many tasks an AI step consumes per run; bring-your-own AI account remains 1x. A new 75-task-per-run safety cap pauses a Zap for approval if a single AI step run would exceed it. Available on Free, Professional, Team, and Enterprise (tool calls not yet available for Enterprise).

2026-06

Zapier unified task-based pricing across the platform: AI steps, code steps, and SDK calls now draw from the same shared task pool as standard Zap workflows, rather than separate budgets.

2026-04-23

Zapier announced a major expansion of enterprise AI governance: a unified policy layer covering no-code workflows, AI Agents, MCP-connected AI assistants (Claude, ChatGPT), and SDK-built apps. New App Access Controls let admins decide which apps teams can access. Zapier Agents reached general availability with Enterprise MCP support. Zapier SDK launched into open beta, letting developers connect agents to Zapier's app catalog from external code environments.

2026-04

Zapier Agents reached full general availability (out of beta) with multi-step memory, letting agents reference prior outputs across separate runs, not just within a single workflow.

2026-03-31

AI Guardrails by Zapier reached general availability and is available free on all plans (Free, Professional, Team, Enterprise). Supports PII detection (English and Spanish), prompt injection detection, toxicity detection, and sentiment analysis. Usable as a Zap step, as a tool inside Agents, or as an action callable via MCP by external AI clients (e.g., Cursor, Claude).

2026-04-07

Zapier Data Processing Addendum (DPA) updated, effective April 7, 2026.

2026-04-09

Zapier Terms of Service updated again (effective April 9, 2026), superseding the November 1, 2025 version. Definition of 'Sensitive Personal Data' (including PHI/HIPAA-regulated data, financial account numbers, government ID numbers, and GDPR special categories) and the prohibition on uploading or transmitting such data remain unchanged in substance.

2026-02-01

AI Guardrails by Zapier launched: built-in app detects 30+ types of PII, blocks/redacts sensitive data, detects prompt injection and jailbreak attempts, screens for toxicity. Available on all plans.

2025-12-01

SOC 2 readiness completed for Zapier Agents. Data export aligned with Zapier-wide pathway; data deletion systems improved. Admin Center redesigned for all multi-user plans.

For organizations with 5+ staff

Team plan (starting from $69/mo annual, 15% nonprofit discount available) provides SAML SSO, shared connections, and up to 25 users — ideal for most nonprofits. Free AI Guardrails can now be added to any workflow to screen for PII before it reaches donor or client systems. Note: each team member must individually opt out of data training (no account-level toggle). Upgrade to Enterprise only if you need automatic data training opt-out, custom retention, Zapier Agents with Enterprise MCP, or more than 25 users.

For organizations with fewer than 5 staff

Free tier (100 tasks/mo, two-step Zaps, Tables/Forms/MCP included, plus free AI Guardrails) is a strong starting point. Professional (starting from $19.99/mo annual, or roughly 15% less with the nonprofit discount) unlocks multi-step Zaps and AI fields. Submit the data training opt-out form before processing any sensitive organizational data, and watch AI-step task consumption since AI by Zapier moved to model-tier pricing (Standard/Advanced/Premium) in June 2026.

For health data or vulnerable populations

NOT RECOMMENDED for healthcare data or client case management involving PHI. Zapier's Terms of Service (updated April 9, 2026) explicitly prohibit transmitting Sensitive Personal Data and the company will not sign BAAs at any tier. Use only for non-PHI workflows. AI Guardrails (free, GA since March 2026) can help detect PII accidentally included in automations, but does not make Zapier HIPAA-compliant.