Data Privacy Requests (DSRs)

The problem: Data deletion and access requests from employees, former employees, and candidates arrive through inconsistent channels. Each request type has different requirements based on location and request category. Without a system, it's easy to miss deadlines, apply the wrong process, or lose track of what's been completed.

What we built: A standardized intake-to-completion pipeline. Forms capture requests with templates specific to each type (deletion vs. access, location-specific requirements). Tables centralize records. Zaps drive processing steps through Asana, and AI by Zapier assists with triage and routing. Every request has a clear audit trail from submission through resolution.

Results: Consistent handling regardless of who processes the request. Clear records for compliance audits. Faster turnaround through automated routing instead of manual triage.

Built with: Forms, Tables, Zaps, Asana, AI by Zapier.

Automated Regulatory Updates

The problem: Staying current on regulatory changes means manually scanning multiple legal sources on a recurring basis. It's tedious, easy to deprioritize, and missing an update creates real risk.

What we built: A Zapier Agent that reviews relevant legal sources weekly for updates to specified regulations. (Our team runs a dedicated Agent focused on AI laws and regulations.) The Agent delivers a weekly summary to a designated Slack channel, including recommended action items tailored to how each update affects Zapier, and tags the appropriate legal team member based on their specific area of focus and, as needed, schedules time on that team member's calendar to review the relevant topic and supporting materials.

Results: No more manual scanning. The team sees relevant updates in their existing workflow (Slack) with specific next steps instead of raw regulatory text (or missing updates altogether).

Built with: Zapier Agents, Slack.

Agent Template: AI Regulatory Updates Agent

Sanctions Screener

The problem: Screening customers, vendors, and partners against sanctions, export-control, and PEP lists is high-stakes, but the work often gets split across manual lookups, CSV reviews, and Slack follow-up. Teams need a reliable way to run one-off checks, process larger batches, monitor watchlists over time, and route potential hits into the workflows where business decisions actually happen.

What we built: A purpose-built internal sanctions screening app for Zapier’s Legal & Compliance teams. The app supports single-entity searches, batch screening from JSON or CSV, ongoing watchlist re-screening, analyst dispositions, PDF report exports, and a complete audit trail. On top of that, we built a private Zapier integration that exposes the app’s core capabilities as reusable Zapier components: actions to screen an entity or submit a batch, a search to retrieve screening reports, and polling triggers for newly detected high-confidence matches or source-list updates. That lets us embed sanctions screening directly into onboarding, procurement, vendor review, and finance workflows without custom point-to-point scripts or paying tens of thousands of dollars for a third-party solution.

Results: Legal gets a single system of record for screening activity, while other teams can trigger and consume screening steps inside the tools they already use. Potential hits can be escalated automatically, repeat screenings no longer require manual re-entry, and compliance evidence is preserved from the initial check through final disposition. Instead of treating screening as a one-off lookup, the team can run it as a governed, auditable workflow.

Built with: Zapier Platform CLI for the integration, Zaps, Webhooks by Zapier, Vercel-hosted Next.js app, sanctions.io.