Make Enterprise Risk Assessment | AI Tool Risk

Back to AI Tools

Make

Risk Overview

Minimal Risk

/10

Workflow Automation

AI Agents

Top Risks

Full agentic access to email, databases, cloud storage, APIs, CRMs, and more. Scenarios can trigger automatic multi-step actions across critical business systems. Third-party data (customer PII, financial records) flows through Make's infrastructure. AI Toolkit introduces additional LLM subprocessor exposure.

Mitigations

Execute Make DPA for GDPR compliance. Use EU data region. Review and limit scenario permissions to least-privilege. Audit AI Toolkit subprocessors. Enterprise plan provides better data isolation. Make's EU legal foundation is a structural advantage over US-based alternatives.

Get started

Is your team using

Make

safely?

Book a Demo Free Assessment

Highest Risk Categories

The highest-scoring risk categories identified in this assessment.

Data Retention

Retention tied to account subscription and legal obligations. No explicit ZDR published. Standard SaaS retention policy. Enterprise tier runs in separate AWS environment, potentially allowing custom retention terms.

/10

Legal Terms

Czech-origin terms governed under EU law framework. Acquired by Celonis (German enterprise software). Dispute resolution under EU jurisdiction generally favors consumers and businesses more than US arbitration-heavy terms. Limited mandatory arbitration exposure.

/10

Training Use

Make is Czech-origin (EU-based), with strong GDPR orientation. Privacy notice does not indicate using customer scenario data to train AI models. AI Toolkit subprocessors subject to GDPR-compliant terms. No explicit public opt-out mechanism found, but EU legal basis requirements restrict training use by default.

/10