Data Privacy Requests (DSRs)

The problem: Data deletion and access requests from employees, former employees, and candidates arrive through inconsistent channels. Each request type has different requirements based on location and request category. Without a system, it's easy to miss deadlines, apply the wrong process, or lose track of what's been completed.

What we built: A standardized intake-to-completion pipeline. Forms capture requests with templates specific to each type (deletion vs. access, location-specific requirements). Tables centralize records. Zaps drive processing steps through Asana, and AI by Zapier assists with triage and routing. Every request has a clear audit trail from submission through resolution.

Results: Consistent handling regardless of who processes the request. Clear records for compliance audits. Faster turnaround through automated routing instead of manual triage.

Automated Regulatory Updates

The problem: Staying current on regulatory changes means manually scanning multiple legal sources on a recurring basis. It's tedious, easy to deprioritize, and missing an update creates real risk.

What we built: A Zapier Agent that reviews relevant legal sources weekly for updates to specified regulations. (Our team runs a dedicated Agent focused on AI laws and regulations.) The Agent delivers a weekly summary to a designated Slack channel, including recommended action items tailored to how each update affects Zapier, and tags the appropriate legal team member based on their specific area of focus and, as needed, schedules time on that team member's calendar to review the relevant topic and supporting materials.

Results: No more manual scanning. The team sees relevant updates in their existing workflow (Slack) with specific next steps instead of raw regulatory text (or missing updates altogether).

Agent Template: AI Regulatory Updates Agent

Global Regulatory and Case Law Searchable Dashboard

The problem: Monitoring regulatory obligations across AI, data privacy, and other legal domains is a full-time job on its own. Laws, regulations, directives, executive orders, and case law span dozens of jurisdictions, each with its own status, deadline, and implication for a SaaS business. Legal teams either maintain unwieldy spreadsheets that go stale, or lose track of obligations entirely. Stakeholders across the business, from the product and engineering teams to security and compliance, need answers about what the company has to do or has already done, but don't know where to look or who to ask.

What we built: A centralized regulatory tracking dashboard that gives Zapier’s Legal team and business stakeholders a single source of truth for laws, regulations, case law, and policy developments that could affect the company.

The dashboard organizes matters across key legal domains like AI, data privacy, and other emerging regulatory areas, with each entry tied to its jurisdiction, business impact, compliance status, relevant deadlines, source materials, and a plain-language summary of Zapier’s response. Legal can use the tool as a working tracker for monitoring obligations and documenting compliance work, while stakeholders can quickly understand whether a particular law affects Zapier and what, if anything, the company is doing about it.

Results: Legal no longer maintains a static spreadsheet that requires manual updates and version control. Stakeholders get self-serve access to the compliance picture relevant to them without pinging Legal on Slack. Attorneys spend less time fielding “are we compliant with X?” questions and more time actually resolving obligations. When a new regulation is added or a status changes, it's live for everyone immediately.

Sanctions Screener

The problem: Screening customers, vendors, and partners against sanctions, export-control, and PEP lists is high-stakes, but the work often gets split across manual lookups, CSV reviews, and Slack follow-up. Teams need a reliable way to run one-off checks, process larger batches, monitor watchlists over time, and route potential hits into the workflows where business decisions actually happen.

What we built: A purpose-built internal sanctions screening app for Zapier’s Legal & Compliance teams. The app supports single-entity searches, batch screening from JSON or CSV, ongoing watchlist re-screening, analyst dispositions, PDF report exports, and a complete audit trail. On top of that, we built a private Zapier integration that exposes the app’s core capabilities as reusable Zapier components: actions to screen an entity or submit a batch, a search to retrieve screening reports, and polling triggers for newly detected high-confidence matches or source-list updates. That lets us embed sanctions screening directly into onboarding, procurement, vendor review, and finance workflows without custom point-to-point scripts or paying tens of thousands of dollars for a third-party solution.

Results: Legal gets a single system of record for screening activity, while other teams can trigger and consume screening steps inside the tools they already use. Potential hits can be escalated automatically, repeat screenings no longer require manual re-entry, and compliance evidence is preserved from the initial check through final disposition. Instead of treating screening as a one-off lookup, the team can run it as a governed, auditable workflow.