Keep HR data safe when AI runs the workflow
HR handles some of the most sensitive data in the company. If governance makes AI safe enough for HR, it makes AI safe enough for anyone.
This one-pager covers the three controls HR and IT teams ask about first, with the Zapier plan each one comes with, so you can start the security conversation with the answers in hand.
What keeps HR data safe when AI runs the workflow
HR data security gets tested the moment a workflow touches a candidate record or an employee file. HR and IT teams ask about the same three controls first.
Action Restrictions (Enterprise) let IT choose which apps are allowed, then control which operations each team can run inside them. Rules apply across Zaps, Agents, and MCP.
Workspaces (Enterprise Advanced) keep HR data in HR's space, not mixed with other departments. Each team gets its own permissions, apps, and connections, and IT keeps visibility across all of them.
AI Guardrails (All plans) check text for 30+ types of personal data when you add them to a workflow. You decide what happens next: stop the workflow, route it, or loop in a human.
What IT will ask about first
See where the lines sit
With Action Restrictions, you might allow creating candidate notes in your ATS, reading employee records in your HRIS, and drafting emails to candidates. You'd block deleting candidate records, updating employee records, and sending emails without a person reviewing.
What you'll learn
Control what workflows and AI can do in each app
Keep HR data in HR's own workspace
Check workflow text for 30+ types of personal data
On every Zapier plan
SOC 2 Type II, SOC 3, GDPR, UK GDPR, CCPA, and encryption in transit and at rest. Zapier doesn't sell customer data. Enterprise customers are opted out of AI model training automatically.
Zapier's standard terms don't allow Sensitive Personal Data such as Social Security, government ID, or bank and card numbers. Ask your Zapier account team about your use case. HIPAA-regulated health information isn't supported, and Zapier can't sign a business associate agreement (BAA).
Trusted by 3.4 million companies
