Make stores data within the EU, but the vendor is based outside the EU and may be covered by third-country legislation (for US companies: the CLOUD Act) regardless of server location. For non-sensitive data this is rarely a problem, but for customer data you should weigh the risk.
Automation platform from Berlin with openly available source code (fair-code) that can be self-hosted for free on your own EU server. The cloud version costs and requires more tech than Zapier.
Can be self-hosted for free with full data control in the EU
German company, source code is freely available (fair-code, however not OSI-approved open source)
Requires technical skills, especially for self-hosting
Best for: Technically skilled small businesses that want to own their automation and data.
EU/EEAAutomationPrice on requestEU data storage ✓ISO 27001
Finnish integration platform (iPaaS) built for regulated industries with high demands on data residency. Enterprise-oriented with price negotiation, not self-service.
Nordic EU company with offices also in Sweden
Hybrid architecture supporting strict data residency
No free tier or openly listed price, requires quote
Best for: Growing companies in regulated industries (healthcare, finance, energy) that need EU data residency.
EU/EEAAutomationFrom approx 900 SEK/monthEU data storage ✓ISO 27001
Danish platform that moves and syncs data between your apps and data warehouse (ELT and reverse-ETL). More data-focused than a classic Zapier automation.
EU company from Copenhagen with EU data storage
Combines ELT, CDC and reverse-ETL in one tool
Targets data flows, not general app-to-app automation
Best for: Companies that want to collect data from multiple systems and sync it back to their tools.
The vendor is based outside the EU. US companies are covered by the CLOUD Act regardless of server location; see the tool page for details.
What is needed to use Make in a GDPR-safe way?
Sign a data processing agreement (DPA) if the tool processes personal data on your behalf, minimise the personal data you feed in, and check the vendor's sub-processors. See our DPA guide for the steps.
Our assessment is based on verified data about vendor, storage and certifications (2026). GDPR compliance also depends on how you use the tool. This is guidance, not legal advice. See How we review.
