Make’s certification belongs to the parent company, not the product

Make names two US zones, us1 and us2 on make.com, hosted on AWS EC2 and VPC with no specific region stated. Make claims itself ISO 27001 and SOC 2 or SOC 3 certified, yet its own pages assign the SOC 2 to its hosts and the ISO 27001 to Celonis SE, its parent company — not to Make itself. FedRAMP, StateRAMP, GovCloud, and a HIPAA business associate agreement are all absent.

Zapier names the US, then adds “and elsewhere” in its own contract

Zapier hosts on AWS in the United States by name, with SOC 2 Type II and SOC 3 as its own certifications. Its Data Processing Agreement separately describes data as “transferred” to the US and other jurisdictions where Zapier operates — both descriptions stand, side by side, unreconciled. No HIPAA business associate agreement is named, and FedRAMP, StateRAMP, and GovCloud stay absent.

Selling in its own name still doesn’t mean Make will name a state

Make, selling as Celonis, Inc., charges sales tax due upfront, with exemption available only on request; no state list, calculation basis, or nexus owner is published anywhere on its pricing page. Zapier charges US sales tax directly, calculated by ZIP code, but names no state list or nexus threshold either, and claiming an exemption requires a certificate specific to the buyer’s own state, Alabama’s Form STE-1 among them.

One vendor supplies a tax-residency form the other never mentions

Make, contracted through Celonis, Inc. under New York law, accepts card, digital wallets, and US ACH on its Core, Pro, and Teams tiers — zero, twelve, twenty-one, and thirty-eight dollars a month for ten thousand credits, fifteen percent off annually — reserving any other billing method for Enterprise, with no purchase order, net-30 term, or W-9 published. Zapier reserves invoice billing for Enterprise too, but below that offers self-service by card, PayPal, or ACH from a US bank account, and supplies a W-9 on request alongside a US Certificate of Tax Residence, IRS Form 6166 — a document Make’s own pages never mention.

Neither vendor’s own app count agrees with its own documentation

Make’s directory advertises over three thousand apps, with a counter reading three thousand six hundred four the day it was checked, while its own product description states “a thousand-plus standard apps” instead. Zapier’s own directory shows both “nine thousand-plus apps” and “ten thousand-plus connections” on the very same page, on the same day, with neither vendor settling its own number.

The entry price buys a different unit of work entirely

Make’s first paid tier, Core, costs twelve US dollars a month for ten thousand credits, one credit per module run against a bundle of data. Zapier’s Free tier costs nothing for a hundred tasks a month and one user, with its Professional tier starting at nineteen dollars and ninety-nine cents for seven hundred fifty tasks — a different metering unit again, one that neither vendor’s own certification confusion has any bearing on.