Make
automation · make.com · last read 2026-10-05
Identity
No identity observation recorded yet.
Data location
| Region | EU data location | Minimum plan | Source | Observed |
|---|---|---|---|---|
| EU | Terms not stated | — | help.make.com | 2026-10-05 |
EU: Each organization allows you to select the geographical location of the data center, and the European Union (EU) is one of two supported locations. The document does not name a plan or a cost for choosing it.
Subprocessor chain
18 third parties · 18 of the vendor's own group companies · 21 with a country outside the EEA · all read 2026-10-05
| Subprocessor | Country | If hosted in the EU | Purpose |
|---|---|---|---|
| 84Codes AB | — | — | Platform execution component |
| Amazon Web Services Inc. | US, DE, IE | — | Options for hosting of the make.com Cloud Service |
| Anthropic Ireland, Ltd | US | — | Applicable for customers using artificial intelligence Services |
| Candu, Inc. | US | — | Customer engagement tool (e.g. resource center) |
| Chameleon Intelligent Tech, Inc. | US | — | Customer engagement tool (e.g. pop-ups, messaging, etc.) |
| Cloudflare, Inc. | EU | EU | Global CDN (Content Delivery Network) to enhance application performance and mitigate cybersecurity risks |
| E2B.dev - FoundryLabs, Inc. | US | — | Custom code execution platform |
| Fiverr International Ltd. | US | — | Enabling customers to obtain general support of Services from independent freelancers |
| Freshdesk, Inc. | DE | — | Support Ticketing Tool |
| Google LLC | US | — | Applicable for customers using artificial intelligence Services |
| Groq LLC. | US | — | Applicable for customers using artificial intelligence Services |
| Microsoft Corporation | FR | — | Applicable for customers using artificial intelligence Services |
| Mixpanel, Inc. | NL | — | Analysis of product usage to improve user experience |
| MongoDB Limited | DE, IE, US | DE, IE | Cloud based database for scenarios creation |
| OpenAI OpCo, LLC | US | — | Applicable for customers using artificial intelligence Services |
| Peaberry Software, Inc. | US | — | Customer engagement tool (e.g. onboarding emails) |
| Rudderstack, Inc. | US | — | Collection and routing of data streams |
| Supabase Inc. | IE, US | IE | Cloud based database for Make and Grid |
Make's own group companies listed as subprocessors (18)
| Company | Country | Purpose |
|---|---|---|
| Celonis AB | SE | General support of Services through personnel of such Affiliate |
| Celonis ApS | DK | General support of Services through personnel of such Affiliate |
| Celonis B.V. | NL | General support of Services through personnel of such Affiliate |
| Celonis Canada Ltd. | CA | General support of Services through personnel of such Affiliate |
| Celonis Deutschland GmbH | DE | General support of Services through personnel of such Affiliate |
| Celonis India Private Ltd. | IN | General support of Services through personnel of such Affiliate |
| Celonis K.K. | JP | General support of Services through personnel of such Affiliate |
| Celonis L.L.C. | XK | General support of Services through personnel of such Affiliate |
| Celonis Labs GmbH | DE | General support of Services through personnel of such Affiliate |
| Celonis Labs LLC | US | General support of Services through personnel of such Affiliate |
| Celonis Ltd. | GB | General support of Services through personnel of such Affiliate |
| Celonis S.L. | ES | General support of Services through personnel of such Affiliate |
| Celonis s.r.o. | CZ | General support of Services through personnel of such Affiliate |
| Celonis SAS | FR | General support of Services through personnel of such Affiliate |
| Celonis Schweiz GmbH | CH | General support of Services through personnel of such Affiliate |
| Celonis SE | DE | General support of Services through personnel of such Affiliate |
| Celonis Srl | IT | General support of Services through personnel of such Affiliate |
| Celonis, Inc. | US | General support of Services through personnel of such Affiliate |
The count outside the EEA is arithmetic over the country column, not a judgement about lawfulness. A transfer outside the EEA can be perfectly lawful; whether this one is depends on your use, not on the vendor.
Assurance
| Scheme | Status | Scope | Source | Observed |
|---|---|---|---|---|
| GDPR | Claimed | — | make.com | 2026-10-05 |
| ISO 27001 · ISO27001 | Claimed | information security program | make.com | 2026-10-05 |
| SOC 2 Type II · SOC2T2 | Claimed | the SOC 2 report details our internal controls | make.com | 2026-10-05 |
| SOC 3 · SOC3 | Claimed | public summary intended for external audiences to verify our industry-standard security practices | make.com | 2026-10-05 |
Claimed means the vendor asserts the scheme on its own page and offers nothing further. Available on request means the report or certificate exists but sits behind a request, a login or an NDA. Neither is a certificate we have seen. That is a distinction an auditor makes, so we make it too.
Official registers
Not yet checked against official registers (ACN qualified cloud (Italy), FedRAMP Marketplace (US), Data Privacy Framework List (US)).
Support window
Not yet collected. This row will say not declared only once we have read a lifecycle or security page and found no period stated — see support windows.
Documents
| Document | Disclosure | Transcription | HTTP | Observed |
|---|---|---|---|---|
| certifications | Public | full | 200 | 2026-10-05 |
| residency | Public | full | 200 | 2026-10-05 |
| subprocessors | Public | full | 200 | 2026-10-05 |
History
Nothing has moved since we started watching this vendor on 2026-10-05. Changes appear here only after a human has reviewed them.