Verticals 7, 8 & 14 — Accounting / HR / GRC vendor profiles
Research date: 2026-08-17.
Zap counts and Zapier USPs from identified-vendors.json. Company facts from public filings, vendor sites, and press. Unknowns marked Unknown.
Thesis. These three verticals already sell audit trails. Books are examined. Employment files are litigated. GRC platforms exist to hand “evidence packs” to auditors. In every case the trail is vendor-attested: the same SaaS that stores the record also writes the log that says the record was created at time T by user U. A privileged admin, a support engineer, a database restore, or a silent schema migration can rewrite that history. Independent cryptographic sealing at the moment of creation is the missing control.
Zapier’s role in the stack. Zapier sits at the highest-volume event edge — new invoice, new journal, new hire, new interview note, new control evidence. That is the cheapest place to seal a hash without waiting for a native OEM. Category leaders (Intuit, Workday, Vanta, Drata) are the hardest OEM conversations; the long tail of practice-management, ATS, and mid-market GRC tools is where a Zap lands first.
Shared weakness of vendor-attested audit trails
| Attack / failure |
What happens in these products |
| Privileged rewrite |
Tenant admin, vendor support, or “data fix” scripts edit invoices, GL lines, performance reviews, or evidence attachments. The product log then says the new version is original. |
| Clock and actor |
Timestamps come from the vendor’s application clock and session. Backdating a journal, a PIP, or a “control tested on” date is a product feature, not a bug. |
| Export ≠ original |
PDF/CSV exports and auditor “evidence packs” are generated on demand. They are not the bytes that existed at close / interview / test time. |
| Integration mutation |
Zapier, Hubdoc, Dext, Metaview, and GRC collectors copy records into a second system of record. The copy is unsigned. Disputes become “which copy is true?” |
| Circular attestation |
GRC tools collect evidence from QBO, BambooHR, AWS, Okta, then attest to auditors that the evidence is authentic. The collector is not independent of the collected. |
| AI generation |
Receipt OCR, interview notes, and control narratives are model-generated. Without a sealed source transcript or image, the AI artifact is not contemporaneous evidence. |
VERTICAL 7 — Accounting, Audit & Tax (23 apps)
Books get examined. The audit trail is already a regulatory expectation (IRS, HMRC MTD, SOX 404, ISA 240, local VAT). Today it is vendor-attested. Strong fit with IRS-examination / DataCubes thesis.
Zap density: extreme at the GL/invoicing layer (QBO 11,263; Xero 7,017; Wave 2,562); thin at e-file (TaxBandits 3). Practice-management tools (TaxDome, Canopy, Karbon, FYI, Senta) sit one hop off the ledger and store the workpapers and client files that examiners actually ask for.
QuickBooks Online
| Field |
Detail |
| Parent / owner |
Intuit Inc. (Nasdaq: INTU) |
| Website |
https://quickbooks.intuit.com / https://www.intuit.com |
| Zap count |
11,263 (premium; rank 60) |
| USP |
Default US SMB general ledger. Bank feeds, invoicing, bill pay, payroll, inventory, tax prep adjacency to TurboTax / Intuit Assist. “Intuit Intelligence” AI layered on 40+ years of books. |
| ICP |
US SMBs, bookkeepers, and CAS firms; 1–200 employees. Accountant channel is the real distribution. |
| HQ / founding / funding |
Mountain View, CA. Intuit founded 1983 (Scott Cook, Tom Proulx). Public. QuickBooks launched 1992; QBO is the cloud SKU. |
| Pricing posture |
List (2026, pre-promo): Solopreneur ~$20/mo, Simple Start ~$38/mo, Essentials ~$75–85/mo, Plus ~$115–140/mo, Advanced ~$275–340/mo. Annual 15–20% list increases are routine. Heavy intro discounting (70–90% for 3 months). |
| Evidence stored |
Chart of accounts, journals, invoices, bills, payments, bank recs, attachments (receipts, contracts), 1099/W-9, payroll registers, audit-log of user edits, closing-date lock. |
| Why vendor-attested trails are weak |
Closing-date lock is a setting, not a seal — an admin with the right role can reopen periods, void/recreate invoices, recode transactions, and the Intuit-hosted “Audit Log” is the only contemporaneous record. Intuit support can and does perform data services. Exports (IIF, Excel, Accountant’s Copy) are generated later. In an IRS exam or partner dispute, “QuickBooks says so” is vendor testimony. |
| Zapier role |
Highest-volume accounting Zap on the directory. Triggers: new/updated invoice, payment, customer, estimate, bill, purchase order, sales receipt. Typical flow: Stripe/Shopify → QBO invoice; QBO payment → Slack/CRM. Seal candidate: new invoice, payment, journal, and attached receipt at create. |
Xero
| Field |
Detail |
| Parent / owner |
Xero Limited (ASX: XRO; NZX: XRO). Independent public company. |
| Website |
https://www.xero.com |
| Zap count |
7,017 (premium; rank 81) |
| USP |
Cloud ledger built for the accountant channel. Unlimited users on a subscription, Hubdoc capture, deep app marketplace, strong ANZ/UK/US SMB footprint (~5M+ subscribers). |
| ICP |
SMBs and their accountants in ANZ, UK, and US; multi-currency and project tracking on higher tiers. |
| HQ / founding / funding |
Wellington, New Zealand. Founded 6 Jul 2006 (Rod Drury, Hamish Edwards). IPO NZSX 2007 (NZ$15M). Public. |
| Pricing posture |
US 2026: Early $25/mo (→ $27 from Oct 2026), Growing $55 (→ $59), Established $90 (→ $97). Caps on invoices/bills at Early. Add-ons: payroll, Inventory Plus, expenses. Frequent 90%-off intro promos. Not priced per user. |
| Evidence stored |
GL, invoices, bills, bank recs, fixed assets, Hubdoc source docs, tax filings (GST/VAT/MTD), history/audit trail, locking periods. |
| Why vendor-attested trails are weak |
History tab is Xero-hosted. Period lock can be reversed by an adviser with the right role. Hubdoc images live in Xero’s cloud and can be detached/replaced. Advisor “practice” access means the accountant and the client share write paths. No independent hash of the posted journal. |
| Zapier role |
Second-largest accounting Zap. Same pattern as QBO: commerce → invoice; invoice paid → ops tools. Seal candidate: posted invoice, bill, bank rec, Hubdoc document. |
Wave
| Field |
Detail |
| Parent / owner |
H&R Block, Inc. (NYSE: HRB). Acquired Jun/Jul 2019 for $405M cash (Wave’s blog cited C$537M). |
| Website |
https://www.waveapps.com |
| Zap count |
2,562 (rank 142) |
| USP |
Free-forever SMB invoicing + bookkeeping; monetize payments and payroll. Lowest-friction US/Canada micro-business ledger. |
| ICP |
Freelancers and micro-SMBs who will not pay Intuit list prices; H&R Block tax-prep adjacency. |
| HQ / founding / funding |
Toronto, Canada. Founded 2010 (Kirk Simpson, James Lochrie). ~US$24M VC pre-exit (NAB Ventures 2017). Subsidiary of H&R Block since 2019. CEO (public): Zahir Khoja. |
| Pricing posture |
Starter accounting free. Pro ~$16–19/mo (bank import, extra users, receipt scan). Payments ~2.9% + $0.60. Payroll from ~$25–40/mo + per-employee. Bookkeeper add-on from ~$149–199/mo. |
| Evidence stored |
Invoices, estimates, bills, expenses, receipts, bank transactions, payroll runs, 1099-adjacent data, tax-ready reports. |
| Why vendor-attested trails are weak |
Free-tier users treat Wave as “the books.” Periods are not sealed. Parent is a tax-prep company that also prepares the return — examiner sees books and the return from the same corporate family. Payment and payroll ledgers can be adjusted after the fact inside the same tenant. |
| Zapier role |
High-volume SMB automation: e-commerce/CRM → Wave invoice; paid invoice → fulfillment. Seal candidate: invoice issued and payment recorded (the two artifacts a collections or 1099 dispute turns on). |
Zoho Books
| Field |
Detail |
| Parent / owner |
Zoho Corporation (privately held; family-controlled — Radha/Sekar/Sridhar Vembu). No VC, no IPO. |
| Website |
https://www.zoho.com/books / https://books.zoho.com |
| Zap count |
1,128 (rank 237) |
| USP |
Cheap, capable SMB ledger inside the Zoho suite (CRM, Inventory, Payroll, Practice). Free tier + aggressive per-org pricing. |
| ICP |
Price-sensitive SMBs already on Zoho CRM/Mail; emerging-market and multi-entity small orgs. |
| HQ / founding / funding |
Chennai, India (US HQ Austin, TX). Zoho founded 1996 as AdventNet (Sridhar Vembu, Tony Thomas). Bootstrapped / profitable. Books is a suite module. |
| Pricing posture |
Free (1 user + accountant). US annual: Standard ~$15/mo (3 users), Professional ~$40, Premium ~$60, Ultimate ~$120, Elite ~$240. User add-ons ~$2.50–3/user/mo. |
| Evidence stored |
Invoices, bills, expenses, bank recs, inventory, projects, vendor/customer portals, approval workflows, audit logs, document scans. |
| Why vendor-attested trails are weak |
Transaction locking exists but is an admin toggle. Suite-wide admin can rewrite CRM-originated invoices after they posted to Books. Zoho’s own audit log is the only witness. Cross-module corrections (Inventory ↔ Books) create silent restatements. |
| Zapier role |
Mid-volume. Often used when the customer is already Zapping Zoho CRM. Seal candidate: invoice/bill posted and payment applied. |
FreshBooks
| Field |
Detail |
| Parent / owner |
Independent (FreshBooks / 2ndSite Inc.). |
| Website |
https://www.freshbooks.com |
| Zap count |
780 (rank 312) |
| USP |
Invoicing-first accounting for service businesses and freelancers. Time, expenses, proposals, payments in one UI. |
| ICP |
Self-employed and small service firms (agencies, trades, consultants) who live in invoices, not a full GL. |
| HQ / founding / funding |
Toronto, Canada. Founded 2003 (Mike McDerment, Levi Cooperman). $154–207M equity + $125M debt (Mar 2025). Unicorn ($1B, 2021 Series E). |
| Pricing posture |
List ~Lite $19–23/mo (5 clients), Plus $38–43 (50 clients), Premium $65–70 (unlimited), Select custom. Heavy 70–90% intro promos. |
| Evidence stored |
Invoices, estimates, retainers, time entries, expenses/receipts, client payments, projects, late-fee history. Double-entry reports on Plus+. |
| Why vendor-attested trails are weak |
Client-count billing encourages archive/unarchive games. Invoices can be edited after send; “history” is FreshBooks-hosted. Time entries — the artifact in a fee dispute — are editable. No independent seal of the PDF the client actually received. |
| Zapier role |
Project/time tools → FreshBooks invoice; paid invoice → CRM. Seal candidate: invoice sent-to-client PDF and associated time/expense backup. |
TaxDome
| Field |
Detail |
| Parent / owner |
Independent. Bootstrapped (founders state no outside capital). |
| Website |
https://taxdome.com |
| Zap count |
595 (rank 355) |
| USP |
All-in-one practice OS for tax/bookkeeping/CAS firms: CRM, client portal, e-sign, workflows, billing, bookkeeping hub. 15,000+ practices claimed; 67M+ documents uploaded. |
| ICP |
US/Canada tax, CPA, and bookkeeping firms from solo to 100+ staff. |
| HQ / founding / funding |
Cheyenne, WY (legal); product/ops globally. Founded 2017 (Victor & Ilya Radzinsky). Bootstrapped. |
| Pricing posture |
Per seat, annual commit: Essentials $800 / Pro $1,000 / Business $1,200 per seat/year (1-year). Multi-year discounts. Pro monthly seats $100. Seasonal seats on Business. |
| Evidence stored |
Client files, organizers, e-signed engagement letters, tax returns and workpapers, messages, invoices, time, IRS transcript pulls, bookkeeping docs. This is the firm’s system of record, not the client’s GL. |
| Why vendor-attested trails are weak |
Malpractice, IRS circular 230, and fee disputes turn on when a return, organizer, or advice note existed. TaxDome’s document versions and message timestamps are tenant-admin / vendor-hosted. A staffer can replace a PDF in the client vault. Portal “sent” receipts are not independently provable. |
| Zapier role |
New client / job / invoice / document → QBO, Slack, Mailchimp, Calendly. Seal candidate: engagement letter executed, organizer submitted, return uploaded, client message that constitutes advice. |
Moneybird
| Field |
Detail |
| Parent / owner |
Independent. Bootstrapped. |
| Website |
https://www.moneybird.com / https://www.moneybird.nl |
| Zap count |
424 (rank 436) |
| USP |
Dutch SME “mini-bank” accounting: invoicing, VAT, Peppol, payments. 17+ years without outside investors. |
| ICP |
Dutch (and nearby) freelancers and SMEs who need BTW/VAT and bank-grade invoicing. |
| HQ / founding / funding |
Enschede, Netherlands. Product 2008 (Edwin Vlieg). No external VC. |
| Pricing posture |
Low-single-digit to low-double-digit €/mo historically (started at €10). Self-serve Dutch SaaS. Exact current list: confirm on moneybird.nl (treat as value SMB). |
| Evidence stored |
Sales/purchase invoices, receipts, quotes, VAT returns, bank mutations, payment records. |
| Why vendor-attested trails are weak |
Dutch Belastingdienst exams ask for source invoices and mutation history. Moneybird is both the invoice issuer and the archive. Edited invoices and re-sent PDFs have only the vendor’s version history. |
| Zapier role |
NL ecommerce/CRM → Moneybird invoice. Seal candidate: invoice PDF as sent + VAT return snapshot. |
bexio
| Field |
Detail |
| Parent / owner |
Die Mobiliar (Swiss insurer). Acquired 2018 for a reported CHF 115M (~$110M). |
| Website |
https://www.bexio.com |
| Zap count |
381 (rank 476) |
| USP |
Swiss all-in-one for micro-companies: accounting, invoicing, payroll, CRM. Local MWST/VAT and bank connections. |
| ICP |
Swiss freelancers, GmbH/AG micro-SMEs, and their Treuhänder. |
| HQ / founding / funding |
Rapperswil, Switzerland. Founded 2013 as easySYS (Jeremias Meier, Stefan Brunner, Marcel Lenz). ~$12M pre-exit. Owned by Die Mobiliar since 2018. |
| Pricing posture |
Swiss-franc SMB subscriptions (modules for payroll, etc.). Quote/self-serve on bexio.com. Insurer-owned, not PE-priced. |
| Evidence stored |
Books, invoices, payroll, offers, contacts, documents — the Swiss KMU back office. |
| Why vendor-attested trails are weak |
Swiss MWST and AHV payroll exams need contemporaneous records. Parent is an insurer that also sells cover to the same SMEs — books, payroll, and (adjacent) insurance live in one corporate family. Periods can be reopened by the Treuhänder. |
| Zapier role |
Swiss webshop/CRM → bexio invoice; new contact → marketing. Seal candidate: invoice, payroll run, VAT declaration. |
Dext
| Field |
Detail |
| Parent / owner |
IRIS Software Group (Hg Capital). Hg sold Dext to IRIS Dec 2024 (HgT stake realization ~£445M context). Formerly Receipt Bank. |
| Website |
https://dext.com |
| Zap count |
277 (rank 584) |
| USP |
Pre-accounting capture: receipt/invoice OCR, bank-statement extraction, publish to QBO/Xero/Sage. The source-document layer under the GL. |
| ICP |
Accountants/bookkeepers and the SMEs they serve; UK-strong, global practice channel. |
| HQ / founding / funding |
UK (London). Receipt Bank founded 2010. Rebranded Dext. Hg invested 2021; sold to IRIS (also Hg-backed) 2024. |
| Pricing posture |
Usage/doc-volume. Business plans from ~$7.50–31.50/mo; pay-as-you-go ~$0.32/doc; bank-statement extraction from ~$13/mo. Practice pricing is quote / per-client pack. |
| Evidence stored |
Original receipt/invoice images, OCR data, supplier, tax, publish history to the ledger, bank-statement extracts. |
| Why vendor-attested trails are weak |
This is the source document. If the image or OCR payload can be replaced after publish, the GL “has a receipt” that is not the one captured on day one. Dext’s publish log is Dext-attested. OCR errors that get “fixed” later look like original books. |
| Zapier role |
New processed document → Slack, Drive, practice PM. Seal candidate: raw image + OCR payload at the instant of extraction, before publish to QBO/Xero. Highest-leverage seal in this vertical. |
FreeAgent
| Field |
Detail |
| Parent / owner |
NatWest Group (formerly RBS). Acquired Mar 2018 for £53M / ~$74M. |
| Website |
https://www.freeagent.com |
| Zap count |
248 (rank 626) |
| USP |
UK freelancer/micro-business accounting with first-class Self Assessment and MTD. Free with qualifying NatWest / RBS / Ulster / Mettle business accounts. |
| ICP |
UK sole traders, landlords, small Ltds, and their accountants. |
| HQ / founding / funding |
Edinburgh, Scotland. Founded 2007 (Ed Molyneux, Roan Lavery). Crowdfunded 2015; bank-owned since 2018. |
| Pricing posture |
Sole trader £19/mo, partnership £27, Ltd £33 (ex-VAT; cheaper annually). £0 if bundled with a qualifying NatWest Group account. |
| Evidence stored |
Invoices, expenses, bank feeds, CIS, Self Assessment workings, MTD VAT/ITSA submissions, attachments. |
| Why vendor-attested trails are weak |
HMRC MTD submissions are generated from FreeAgent’s books. The bank that provides the current account also owns the ledger — same corporate group as the cash. Examiner cannot treat the ledger as independent of the bank feed. Period edits remain possible before/after submit. |
| Zapier role |
UK Stripe/PayPal → FreeAgent invoice; expense capture → FreeAgent. Seal candidate: MTD submission payload and the invoice/expense set that produced it. |
Canopy
| Field |
Detail |
| Parent / owner |
Independent (Canopy Tax, Inc.). |
| Website |
https://www.canopytax.com / https://www.getcanopy.com |
| Zap count |
217 (rank 686) |
| USP |
US tax/CPA practice suite: CRM, docs, client portal, e-sign, workflow, billing, IRS transcripts/notices, tax resolution. |
| ICP |
US CPA, EA, and tax-resolution firms. |
| HQ / founding / funding |
Lehi / Draper / South Jordan, Utah. Founded 2014 (Kurt Avarell). ~$153–292M raised across many rounds; Apr 2025 $70M (Viking Global; also styled Series C+/F in some databases). Investors: Pelion, Tenaya, NEA, Ten Coves, Ankona. |
| Pricing posture |
Modular / quote. Client-engagement module historically marketed with a free-to-250-clients hook; firm-wide suites are sales-led. Mid-market ACV. |
| Evidence stored |
Engagement letters, organizers, workpapers, e-signed docs, IRS transcripts and notice responses, time/billing, client messages. |
| Why vendor-attested trails are weak |
Tax-resolution and circular-230 files are litigation and OPR evidence. Transcript pulls and notice-response letters need a contemporaneous “we received/sent this on date D.” Canopy’s vault and timeline are vendor-hosted and staff-editable. |
| Zapier role |
New client/task/invoice → QBO, Slack, Calendar. Seal candidate: IRS notice ingested, response letter sent, engagement executed. |
Sage Accounting
| Field |
Detail |
| Parent / owner |
Sage Group plc (LSE: SGE). |
| Website |
https://www.sage.com (Sage Business Cloud Accounting) |
| Zap count |
79 (rank 1,213) |
| USP |
Incumbent SME accounting brand (especially UK). Cloud Accounting is the Xero/QBO competitor SKU (not Sage Intacct / Sage 50). |
| ICP |
UK/EU/CA/ZA SMEs and accountants already in the Sage channel; MTD VAT. |
| HQ / founding / funding |
Newcastle upon Tyne, UK. Sage founded 1981. Cloud Accounting launched ~2011 (Sage One). Public. |
| Pricing posture |
Cloud Accounting Start / Accounting / Plus typically ~£/C$ low-double-digits to $23–72/mo depending on geo. Not Sage 50 desktop ($60–270+/user). |
| Evidence stored |
Invoices, expenses, bank recs, VAT/MTD, cash-flow, (Plus) multi-currency/inventory, audit trail. |
| Why vendor-attested trails are weak |
Same GL-lock problem as QBO/Xero. Sage’s brand is “the books,” so examiners treat Sage reports as authoritative — they are still Sage-hosted. Desktop-to-cloud migrations drop attachments and history. |
| Zapier role |
Thin vs QBO/Xero. Commerce → Sage invoice. Seal candidate: posted invoice and MTD VAT return. |
Double HQ (formerly Keeper)
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://doublehq.com |
| Zap count |
169 (rank 824) |
| USP |
Month-end close + practice management for bookkeeping/CAS firms, live-connected to QBO and Xero. AI coding, schedules, close checklists. Rebranded from Keeper (2025). |
| ICP |
US bookkeeping and CAS firms; also internal finance teams that close many entities. |
| HQ / founding / funding |
New York, NY (also Austin). Founded 2020 (Ben Stein, Kenny Song). YC S21. First customer Feb 2021. $6.5M Series A (Dec 2025). |
| Pricing posture |
Per connected client / month, unlimited users. Mix-and-match packages per client. Public pricing page; SMB-firm ACV. |
| Evidence stored |
Close checklists, review notes, coding decisions, client questions, schedules, task completion timestamps, comments that constitute the review trail. |
| Why vendor-attested trails are weak |
The review is the control (CAS 70 / SOC 1 narratives, peer review, malpractice). A reviewer can tick “reviewed” after the fact or edit a note after a client questions a number. Double’s close log is Double-attested. The GL still lives in QBO/Xero — two unsigned systems. |
| Zapier role |
Close task / client request → Slack, email, PM. Seal candidate: close sign-off and the review note attached to a period. |
Exact Online
| Field |
Detail |
| Parent / owner |
Exact Group. KKR-led (take-private; Apax earlier, KKR 2019). |
| Website |
https://www.exact.com |
| Zap count |
128 (rank 959) |
| USP |
Benelux SME cloud ERP + accounting + CRM. 40+ years, 500k+ SMEs claimed. Industry packs (wholesale, manufacturing, services). |
| ICP |
Dutch/Belgian (and selected EU) SMEs and their accountants. |
| HQ / founding / funding |
Delft, Netherlands. Founded 1984 (Eduard Hagens et al.). PE-owned (KKR). |
| Pricing posture |
Subscription per company/module; sales-led in NL/BE. Mid-market vs Moneybird. |
| Evidence stored |
Full SME ERP: GL, AR/AP, inventory, CRM, projects, payroll (geo-dependent), documents. |
| Why vendor-attested trails are weak |
ERP + accounting in one tenant means inventory recodes silently move COGS. Accountant “collaboration” users can reopen periods. Exact-hosted audit trail is the statutory history Dutch examiners see. |
| Zapier role |
Ecommerce/webshop → Exact sales invoice; new account → CRM. Seal candidate: posted invoice and inventory issue. |
Fortnox
| Field |
Detail |
| Parent / owner |
EQT + First Kraft take-private 2025, offer valuing Fortnox at ~SEK 55B / ~US$5.5B. Previously listed in Sweden. |
| Website |
https://fortnox.se |
| Zap count |
125 (rank 973) |
| USP |
Dominant Swedish SMB finance OS: accounting, invoicing, payroll, payments, financing. Platform + marketplace. |
| ICP |
Swedish micro/SMEs and accounting byråer. |
| HQ / founding / funding |
Växjö, Sweden. Founded 2001. Public → PE take-private 2025. Historical listed-market raise small vs. the $5.5B take-private. |
| Pricing posture |
à-la-carte Swedish SEK modules (invoicing, bookkeeping, payroll, etc.). Low entry, high attach. |
| Evidence stored |
Books, e-invoices, payroll, tax agency (Skatteverket) filings, payment files, agency workpapers. |
| Why vendor-attested trails are weak |
Fortnox is the statutory books for a huge share of Swedish SMEs. Agency users have write access. PE-owned platform can migrate/merge tenants. Skatteverket still receives Fortnox-generated files with no independent hash. |
| Zapier role |
Swedish ecommerce → Fortnox invoice. Seal candidate: e-invoice as sent and payroll run. |
FYI
| Field |
Detail |
| Parent / owner |
Independent (FYI Docs). |
| Website |
https://fyidocs.com / https://fyi.app |
| Zap count |
105 (rank 1,065) |
| USP |
Document + practice automation for accounting firms, deep on Microsoft 365 / OneDrive. Email filing, jobs, workflows. |
| ICP |
ANZ (and expanding UK) mid-size accounting firms that live in Outlook/OneDrive. |
| HQ / founding / funding |
Adelaide, South Australia. Founded 2016 (Rob Cameron, Alan McLeod). Unfunded / no disclosed VC. |
| Pricing posture |
Per-user practice suites (Elite etc.). Sales-led. Not commodity SMB pricing. |
| Evidence stored |
Client emails, filed source docs, workpapers, job files, approval workflows — the firm’s document of record. |
| Why vendor-attested trails are weak |
Filing an email “into FYI” is the firm’s claim that this version was the advice given. FYI sits on OneDrive; Microsoft or FYI metadata can diverge. Staff can refile or replace. No independent seal of the email+attachment pair at file time. |
| Zapier role |
New document/job → other practice tools, Slack. Seal candidate: document filed to a client cabinet (the workpaper). |
BrightManager
| Field |
Detail |
| Parent / owner |
Bright (BrightSG / UK accountancy-services group). Product of an accounting firm, not a pure SaaS PE rollup. |
| Website |
https://brightsg.com (BrightManager) |
| Zap count |
103 (rank 1,075) |
| USP |
UK/IE practice management designed by accountants: jobs, CRM, billing, payroll-practice workflows. |
| ICP |
Established UK/Irish accounting, bookkeeping, and payroll bureaux. |
| HQ / founding / funding |
United Kingdom. Funding Unknown (strategic / group-owned; not a well-publicized VC story). |
| Pricing posture |
Third parties cite ~£33.60+VAT/user/mo (annual) or from ~£25/mo depending on source; Bright no longer always publishes list. Treat as sales-led mid-market. |
| Evidence stored |
Jobs, client records, deadlines (Companies House / HMRC), time, invoices, documents, staff assignment — “who did what, when.” |
| Why vendor-attested trails are weak |
AML, AML-SRA-adjacent, and PI claims ask who reviewed a job and when. Task completion and file notes are BrightManager-hosted and supervisor-editable after sign-off. |
| Zapier role |
Job created / completed → Xero, email, Slack. Seal candidate: job sign-off and filed workpaper. |
Expensify
| Field |
Detail |
| Parent / owner |
Expensify, Inc. (Nasdaq: EXFY). Independent public. |
| Website |
https://www.expensify.com |
| Zap count |
39 (premium; rank 1,762) |
| USP |
Receipt-to-report automation + Expensify Card. SmartScan OCR, policy enforcement, reimbursements. |
| ICP |
SMBs and mid-market teams that hate expense reports; card-led land-and-expand. |
| HQ / founding / funding |
Portland, OR. Founded 2008 (David Barrett). IPO Nov 2021 at $27. Still public (small-cap). |
| Pricing posture |
Collect $5/member/mo (simplified Apr 2025). Control from ~$9/active member/mo (annual + card mix). Individual free. |
| Evidence stored |
Receipt images, merchant, amount, attendees, mileage, approvals, policy exceptions, reimbursement ACH, corporate-card transactions. |
| Why vendor-attested trails are weak |
Expense fraud and IRS T&E exams attack when the receipt was captured vs. when the trip occurred. SmartScan can be replaced; reports can be reopened. Approval “timestamp” is Expensify’s clock. Card + report live in one vendor. Low Zap count means most evidence never leaves Expensify. |
| Zapier role |
Surprisingly thin (39 Zaps) for a public spend platform — premium connector, weaker grassroots automation. New report/expense → Slack, QBO, HRIS. Seal candidate: receipt image + approved report. |
Quaderno
| Field |
Detail |
| Parent / owner |
Visma. Acquired Sep 2023 (fourth Spanish Visma deal). |
| Website |
https://quaderno.io |
| Zap count |
175 (rank 805) |
| USP |
Automated sales tax / VAT / GST calculation, invoicing, and filing-ready reports for online businesses. |
| ICP |
Cross-border SaaS, ecommerce, and digital-goods sellers who outgrew “tax is a plugin.” |
| HQ / founding / funding |
Gran Canaria / Canary Islands, Spain. Founded 2014 (Carlos Hernández). Bootstrapped until Visma. |
| Pricing posture |
Self-serve from roughly mid-double-digit USD/mo historically (~$34+ cited); volume/tax-nexus add-ons. Confirm current Visma-era list. |
| Evidence stored |
Tax determinations, invoices/receipts, nexus calculations, multi-jurisdiction reports, customer tax IDs. |
| Why vendor-attested trails are weak |
A VAT invoice is a legal document. Recalculating tax after a rate/nexus change restates history. Quaderno’s determination log is the only proof the rate applied at checkout was correct. Post-Visma migrations add a second system of record. |
| Zapier role |
Stripe/Shopify payment → Quaderno invoice; Quaderno invoice → accounting. Seal candidate: tax determination + invoice PDF at issuance. |
Pennylane
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.pennylane.com / https://www.pennylane.tech |
| Zap count |
241 (rank 639) |
| USP |
French all-in-one: SME books + accountant collaboration + cash. Category leader in France’s “expert-comptable + dirigeant” loop. |
| ICP |
French SMEs and their expert-comptables. |
| HQ / founding / funding |
Paris, France. Founded 2020. €75M at €2B (Apr 2025) (Sequoia, CapitalG, Meritech, DST); €175M / ~$205M (Jan 2026, TCV) — databases cite ~$400M+ total and ~$4.25B valuation on the 2026 round. |
| Pricing posture |
Sales-led / accountant-channel packs. Not US-style public SKUs. Premium French SaaS ACV. |
| Evidence stored |
GL, invoices (Factur-X / e-invoicing), bank, VAT (TVA), collaborator comments, source docs, cash forecasts. |
| Why vendor-attested trails are weak |
French e-invoicing reform makes the invoice a state-adjacent document. Pennylane is both producer and archive. Accountant write-access can restate books after the dirigeant has already filed TVA. Hyper-growth vendor = frequent schema/data migrations. |
| Zapier role |
French Stripe/Shopify → Pennylane; new invoice → tools. Seal candidate: e-invoice as issued and TVA declaration snapshot. |
Senta
| Field |
Detail |
| Parent / owner |
IRIS Software Group (Hg). Acquired 14 Jan 2021. Same parent as Dext (2024). |
| Website |
https://www.senta.co |
| Zap count |
58 (rank 1,452) |
| USP |
Cloud practice management for UK accountants/bookkeepers: CRM, workflow, email automation, client chasing, docs. |
| ICP |
Small-to-mid UK practices whose bottleneck is client responsiveness, not complex WIP. |
| HQ / founding / funding |
UK. Founded 2014 (James Kilford). ~$0.9M pre-exit; IRIS-owned since 2021. |
| Pricing posture |
From ~£25–25.60/user/mo (third-party 2026 cites). Practice SaaS. |
| Evidence stored |
Jobs, AML/KYC checks, client emails, documents, deadline workflows, staff activity. |
| Why vendor-attested trails are weak |
Same PI/AML problem as BrightManager/Karbon. IRIS now owns both the document-capture layer (Dext) and the practice layer (Senta) — one PE group attests both the source image and the job file. |
| Zapier role |
New client/job → Xero, email. Seal candidate: AML check completed and job signed off. |
Karbon
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://karbonhq.com |
| Zap count |
306 (rank 549) |
| USP |
Collaborative practice management for accounting firms — work, clients, email, billing, capacity. Long-running G2 category leader. |
| ICP |
Scaling accounting firms globally (ANZ origin, US/UK growth), 5–500+ staff. |
| HQ / founding / funding |
San Francisco, CA (ANZ roots). Founded 2014. Up to $66M Series B (Tidemark). Additional earlier rounds Unknown in public detail beyond that B. |
| Pricing posture |
Team $59/user/mo annual ($79 monthly); Business $89 annual ($99 monthly, 3-user min); Enterprise custom. |
| Evidence stored |
Emails, work items, client timeline, time, invoices, comments, approvals, “who is doing what, when, why, and how.” |
| Why vendor-attested trails are weak |
Karbon is the contemporaneous work diary. Staff can edit comments and reopen work after a review. Email filed into Karbon is a copy. Peer-review and malpractice files depend on this timeline being honest. |
| Zapier role |
Highest-Zap practice OS on this list (306). New work/contact/invoice → QBO/Xero, Slack, Docs. Seal candidate: work item completed + the email/comment that constitutes advice. |
TaxBandits
| Field |
Detail |
| Parent / owner |
Span Enterprises (Rock Hill, SC). |
| Website |
https://www.taxbandits.com |
| Zap count |
3 (rank 4,848) |
| USP |
IRS-authorized e-file for 1099, W-2, 94x, W-9, ACA, TIN match. Per-form, no subscription required. |
| ICP |
US businesses, payroll shops, tax pros, and API/enterprise filers who need cheap, official e-file. |
| HQ / founding / funding |
Rock Hill, South Carolina (2685 Celanese Rd). IRS provider listing. Founding year / outside funding: Unknown (operating unit of Span Enterprises). |
| Pricing posture |
Transactional. 1099-class from ~$2.75/form (1–10) declining with volume; 94x from ~$5.95 first form, volume breaks to ~$3. Corrections often included. No SaaS seat tax. |
| Evidence stored |
Information returns (1099/W-2/1095/94x), W-9s, TIN-match results, IRS acknowledgements, recipient copies, state filings. |
| Why vendor-attested trails are weak |
A 1099 is a legal filing. If the transmitted XML and the recipient copy can diverge, or if a correction overwrites history, the only proof of what went to the IRS is TaxBandits’ portal. Three Zaps means almost none of this is independently copied, let alone sealed. |
| Zapier role |
Nearly unused. Theoretical: payroll/HRIS → 1099 create/file. Seal candidate: the MeF payload and IRS ACK at transmit time. Highest legal gravity, lowest Zap density on this list. |
VERTICAL 8 — HR, ATS & Employment Records (26 apps)
Discrimination, wage-and-hour, and wrongful-termination claims turn on when a document was created. After-the-fact interview notes, backdated PIPs, and “always had this policy” handbooks are a known litigation pattern. EEOC, ACAS, Fair Work, and plaintiff counsel all attack contemporaneity.
Zap density: BambooHR is the only four-digit HR Zap (1,135). ATS tools cluster 100–400. Workday is almost unused on Zapier (8) — enterprise IT, not grassroots automation.
Recruitee / Visma note: Recruitee is Tellent, owned by PSG Equity, not Visma. (Visma did buy Quaderno in Vertical 7 and other HR assets in LatAm, which is the likely source of the confusion.)
BambooHR
| Field |
Detail |
| Parent / owner |
Independent, PE-backed (Sorenson Capital; ICONIQ Growth / Calm Ventures cited). Not Paychex. |
| Website |
https://www.bamboohr.com |
| Zap count |
1,135 (premium; rank 235) |
| USP |
Default US SMB HRIS: employee records, ATS, time-off, e-sign docs, performance, payroll add-on. “Set people free to do great work.” |
| ICP |
US SMBs ~25–1,000 employees; HR generalists, not Workday-class IT. |
| HQ / founding / funding |
Lindon / Draper, Utah. Founded 2008 (Ben Peterson, Ryan Sanders). PE growth capital (2012+); some databases cite a later ~$125M growth round. Not a public company. |
| Pricing posture |
Published PEPM (26+ ees): Core $10, Pro $17, Elite $25. $250/mo floor at ≤25 employees. Quote still used in practice. |
| Evidence stored |
I-9/W-4 and personnel file, offer letters, e-signed policies, PTO, performance reviews, eNPS, ATS notes, payroll if attached, compensation history. |
| Why vendor-attested trails are weak |
The personnel file is the exhibit in a termination suit. BambooHR allows edits to reviews, notes, and compensation with a vendor log. E-signed handbooks can be replaced. Time-off balances can be adjusted after a dispute starts. “BambooHR audit log” is still BambooHR. |
| Zapier role |
The HR Zap hub. New employee → IT (Google, Slack, Okta), ATS hired → payroll. Seal candidate: signed offer, signed policy, performance review submitted, termination note. |
Recruitee (Tellent Recruitee)
| Field |
Detail |
| Parent / owner |
Tellent (Amsterdam). Owner: PSG Equity. Recruitee + Javelo + KiwiHR combined as Tellent (2022). Not Visma. |
| Website |
https://recruitee.com / https://tellent.com |
| Zap count |
436 (rank 429) |
| USP |
Collaborative mid-market ATS: career site, sourcing, pipelines, employee referrals. Now packaged as Tellent Recruitee next to Tellent HR. |
| ICP |
European and global mid-market hiring teams (DACH, Benelux, FR); 6,000–7,000+ Tellent customers claimed. |
| HQ / founding / funding |
Amsterdam. Recruitee founded ~2015 (Perry Oostdam). Tellent formed 2022; PSG-backed. Recruitee standalone VC history superseded by PE holdco. |
| Pricing posture |
Launch ~$199/mo (5 job slots), Scale ~$349/mo (unlimited), Lead custom. Annual ~20% off. Headcount can affect Tellent HR modules. |
| Evidence stored |
Applications, résumés, scorecards, interview notes, emails, GDPR consent, rejection reasons, career-site content, EEO/diversity forms (where enabled). |
| Why vendor-attested trails are weak |
Disparate-treatment cases live in scorecards and notes. Interviewers edit notes after the debrief. GDPR “we deleted it” vs. “we had it on date D” is a Recruitee log. Rejections can be re-labeled. |
| Zapier role |
High ATS volume. New candidate → Slack/assessment; hired → BambooHR/HRIS. Seal candidate: scorecard submitted and rejection email sent. |
Ashby
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.ashbyhq.com |
| Zap count |
359 (rank 488) |
| USP |
All-in-one ATS + analytics + scheduling + CRM for sophisticated TA teams. Default “modern tech ATS” (OpenAI, Ramp, Notion, Shopify cited). |
| ICP |
High-growth tech and enterprise TA (100–10,000 ees). RecOps-heavy teams. |
| HQ / founding / funding |
San Francisco. Founded 2018–19 (Benjamin Encz et al.). **$142.5M** total; $50M Series D Jul 2025 (Alkeon, Lachy Groom, F-Prime, Elad Gil). |
| Pricing posture |
Foundations $400/mo (≤100 ees, ~$360 annual). Plus/Enterprise custom; large deals $120k+/yr. |
| Evidence stored |
Full hiring record: applications, structured scorecards, interview plans, scheduling, CRM touches, DE&I analytics, offer approvals. |
| Why vendor-attested trails are weak |
Structured hiring is sold as the fairness control. If scorecards can be edited after a calibration, the structure is theater. Analytics that “prove” pipeline fairness are computed on editable events. OFCCP/EEOC production will be an Ashby export. |
| Zapier role |
New candidate/hired → HRIS, Slack, background check. Seal candidate: submitted scorecard and approved offer. |
Hibob (HiBob / bob)
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.hibob.com |
| Zap count |
332 (rank 512) |
| USP |
Mid-market global HRIS for distributed teams: core HR, onboarding, comp, time, culture, people analytics. Expanding into finance (Bob Finance, Mosaic acquisition 2025). |
| ICP |
50–5,000 employee global/scale-ups that find Workday too heavy and Bamboo too US-SMB. |
| HQ / founding / funding |
Tel Aviv origin; significant NY presence. Founded 2015 (Ronni Zehavi, Israel David, Andy Bellass, Amit Knaani). ~$570–628M raised; ~$2.7B valuation (2023 Series E). GA, Farallon, Alpha Wave, SEEK, IGP. |
| Pricing posture |
Quote / PEPM, modules. Third-party ~$16–25+ PEPM. Not self-serve. |
| Evidence stored |
Global employee master, contracts, comp cycles, time/attendance, reviews, docs, headcount plans (Mosaic). |
| Why vendor-attested trails are weak |
Multi-country employment files (contracts, working-time, works-council) are high-stakes. Comp-cycle worksheets get restated. Time records in wage-and-hour class actions are bob’s database. Admin corrections are routine. |
| Zapier role |
New starter → IT stack; time-off → calendar/payroll. Seal candidate: signed contract, approved review, locked timesheet. |
Zoho Recruit
| Field |
Detail |
| Parent / owner |
Zoho Corporation (see Zoho Books). |
| Website |
https://www.zoho.com/recruit |
| Zap count |
256 (rank 607) |
| USP |
Low-cost ATS for corporate HR and staffing agencies. Job-board posting, careers site, built into Zoho suite. ~15 years in market. |
| ICP |
SMBs and staffing firms already on Zoho; emerging-market recruiters. |
| HQ / founding / funding |
Chennai. Recruit launched ~2010–11 era (Zoho marks “15 years” ~2025–26). Bootstrapped parent. |
| Pricing posture |
Cheap per-recruiter Zoho SKUs (corporate vs. agency editions). Typically low-double-digit USD/user/mo; confirm current edition matrix. |
| Evidence stored |
Candidates, submissions to clients (agency), interviews, offers, GDPR/consent, job-board history. |
| Why vendor-attested trails are weak |
Agency disputes (“we sent that candidate first”) turn on submission timestamps. Zoho logs are Zoho-hosted. Staffing firms can backdate submissions. |
| Zapier role |
New candidate → assessment/email; hired → Zoho People/Books. Seal candidate: client submission and offer. |
Workable
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.workable.com |
| Zap count |
206 (rank 706) |
| USP |
All-in-one hiring (+ expanding HR) for SMBs. Sourcing, ATS, AI agent, assessments. 35,000+ teams claimed. |
| ICP |
Global SMBs 1–500 employees that want one hiring tool, not RecOps infrastructure. |
| HQ / founding / funding |
Athens, Greece (also Boston). Founded 2012 (Nikos Moraitakis). ~$85M (83North, Openfund, Notion). |
| Pricing posture |
Headcount-scaled. Standard $299/mo, Premier $599, Enterprise $719 (1–20 ees, annual; higher bands for more ees). Per-job option exists on some SKUs. |
| Evidence stored |
Applications, scorecards, video/assessments (bundled on higher tiers), offers, referrals, some HRIS/performance on newer HR modules. |
| Why vendor-attested trails are weak |
Same scorecard/note problem as every ATS, plus AI-agent actions (auto-source, auto-reject) that need a sealed decision log. Headcount-based pricing does not change editability. |
| Zapier role |
Candidate/hired → Slack, HRIS, background check. Seal candidate: rejection decision and offer. |
Greenhouse
| Field |
Detail |
| Parent / owner |
TPG Growth + The Rise Fund majority since 2021 ($500M investment; **$820M** post-money). |
| Website |
https://www.greenhouse.com / https://www.greenhouse.io |
| Zap count |
202 (premium; rank 723) |
| USP |
Structured-hiring ATS that defined the category for mid-market/enterprise tech. Scorecards, interview plans, DE&I reporting. |
| ICP |
Mid-market and enterprise TA teams (often 200–10,000 ees) that bought “structured hiring” as the compliance story. |
| HQ / founding / funding |
New York, NY. Founded 2012 (Daniel Chait, Jon Stross). ~$110M VC then TPG majority 2021. |
| Pricing posture |
Sales-led enterprise. Not public. High ACV vs Workable/Breezy. |
| Evidence stored |
The canonical structured-hiring file: scorecards, interview kits, offers, EEO, referrals, agency submissions, audit reports Greenhouse itself sells as “fair hiring” evidence. |
| Why vendor-attested trails are weak |
Greenhouse’s product promise is a defensible process. The defensibility is Greenhouse’s database. Interviewers change scores; coordinators reschedule and notes shift; OFCCP productions are vendor exports. PE ownership adds future platform-migration risk. |
| Zapier role |
Premium connector, mid volume. Hired → HRIS/IT. Seal candidate: submitted scorecard (immutable after submit) and offer approval chain. |
Metaview
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.metaview.ai |
| Zap count |
153 (rank 876) |
| USP |
AI recruiting scribe / agentic hiring: interview notes, sourcing agents, application review. 3M+ conversations claimed. |
| ICP |
TA teams already on Greenhouse/Ashby/Lever who want AI notes and, increasingly, AI-native recruiting. |
| HQ / founding / funding |
London (SF office). Founded 2018 (Siadhal Magos, Shahriar Tajbakhsh). $50M total; $35M Series B Jun 2025 (GV). Plural, Vertex, Seedcamp. |
| Pricing posture |
Modular agents. Sourcing Pro $100/user/mo, Max $300/user/mo; notetaker historically seat-based. Free trial. |
| Evidence stored |
Recordings, transcripts, AI summaries, scores inferred from conversation, sourcing activity. This is the interview. |
| Why vendor-attested trails are weak |
Core authenticity problem. The legally relevant event is what was said. The exhibit will be an LLM summary. Summaries can be regenerated; prompts change; speakers can be mis-attributed. Without a sealed audio hash + transcript at capture time, Metaview notes are post-hoc narrative. Same SEC 17a-4 thesis as meeting-recording vertical. |
| Zapier role |
New note/interview → ATS or Slack. Seal candidate: raw recording hash + first-generation transcript, not the polished note. |
Teamtailor
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.teamtailor.com |
| Zap count |
133 (rank 940) |
| USP |
Employer-brand-first ATS. Career sites that look like marketing sites; automation; Nordic design. ~8,500 ATS customers, Europe-heavy. |
| ICP |
50–400 employee European companies (SE/UK/FI/NO) that care about employer brand. |
| HQ / founding / funding |
Stockholm, Sweden. Founded 2013 (Erik Andersson et al.). €10M from Sprints Capital (2022); databases also show ~$16–17M. Sometimes described as mostly bootstrapped before Sprints. |
| Pricing posture |
Job-slot / company-size quotes. Small teams from ~$2,750/yr; enterprise $70k+/yr cited. Not fully self-serve US-style. |
| Evidence stored |
Applications, career-site consents, interview notes, GDPR records, messaging. |
| Why vendor-attested trails are weak |
EU hiring + GDPR: consent, deletion, and “what we knew when we rejected.” Teamtailor logs are the only clock. Marketing-quality career sites collect extra personal data that becomes discovery. |
| Zapier role |
New candidate → Slack/assessment; hired → HRIS. Seal candidate: application + consent and rejection notice. |
Breezy HR
| Field |
Detail |
| Parent / owner |
Learning Technologies Group (LTG) since Apr 2019. Sits near PeopleFluent in LTG’s suite. |
| Website |
https://breezy.hr |
| Zap count |
128 (rank 957) |
| USP |
Visual, simple SMB ATS. Free tier. 13k–17k companies claimed. |
| ICP |
SMBs and high-volume low-complexity hiring; teams that will not pay Greenhouse. |
| HQ / founding / funding |
US (originally). Founded 2014 (Darren Bounds). Small VC then LTG acquisition 2019. |
| Pricing posture |
Bootstrap $0 (1 job). Startup ~$157/mo annual, Growth ~$273, Business ~$439, Pro custom (2026 third-party). |
| Evidence stored |
Candidates, scorecards, questionnaires, offers, career portal, (limited) compliance fields. |
| Why vendor-attested trails are weak |
Cheap ATS + free tier = weakest admin controls. Notes and stages are casually edited. LTG portfolio migrations (PeopleFluent, etc.) can move or reshape data. |
| Zapier role |
SMB Zap staple. Candidate → email/Slack; hired → BambooHR. Seal candidate: questionnaire submitted and offer sent. |
Manatal
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.manatal.com |
| Zap count |
110 (rank 1,043) |
| USP |
Low-price AI ATS + recruiting CRM for agencies and in-house teams. Transparent per-seat pricing. |
| ICP |
Staffing agencies and TA teams in APAC, ME, and global SMBs; price-sensitive. |
| HQ / founding / funding |
Bangkok, Thailand. Founded 2019 (Jeremy Fichet, Yassine Belmamoun). $5.1M seed (2022, Sequoia Surge). |
| Pricing posture |
Professional $15/user/mo annual; Enterprise ~$35; Enterprise Plus ~$55. Custom above. |
| Evidence stored |
Candidates, client submissions (agency), pipelines, AI rankings, notes, emails. |
| Why vendor-attested trails are weak |
Agency “who submitted first” plus AI ranking explanations. Rankings change when the model does. Cheap seats → many users with edit rights. |
| Zapier role |
New candidate → job boards/Slack; hired → HRIS. Seal candidate: client submission timestamp. |
Crelate
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.crelate.com |
| Zap count |
104 (rank 1,072) |
| USP |
Recruiting CRM + ATS + back office for staffing firms. “Living Platform.” 25,000+ professionals claimed since 2012. |
| ICP |
US staffing / search firms (not corporate TA). |
| HQ / founding / funding |
Eagle, ID (address of record). Founded 2012. ~$11.5M (Five Elms Series A $5.3M in 2019 + 2022 growth). |
| Pricing posture |
Essentials $85/user/mo annual; Business $119/user/mo (5-seat min common → ~$595/mo floor). Plus/Enterprise quote. Annual prepaid. |
| Evidence stored |
Candidates, job orders, client submissions, placements, onboarding, back-office billing — the staffing firm’s money file. |
| Why vendor-attested trails are weak |
Fee disputes and fall-off claims: when was the candidate submitted, when did they start, what was the fee agreement. Crelate records are the firm’s only contemporaneous proof. |
| Zapier role |
New placement/candidate → accounting, Slack. Seal candidate: client submission and placement/start record. |
Zoho People
| Field |
Detail |
| Parent / owner |
Zoho Corporation. |
| Website |
https://www.zoho.com/people / https://people.zoho.com |
| Zap count |
77 (rank 1,237) |
| USP |
Low-cost HRMS: attendance, leave, performance, onboarding, cases. Suite-tied. |
| ICP |
Zoho shops, cost-sensitive SMBs, non-US mid-market. |
| HQ / founding / funding |
Chennai. People launched 2008. Bootstrapped parent. |
| Pricing posture |
Zoho-cheap per-employee editions (Standard/Professional/Premium/Enterprise). Typically single-digit to low-teens USD PEPM. |
| Evidence stored |
Attendance, leave, performance appraisals, employee files, approval workflows, cases/HR tickets. |
| Why vendor-attested trails are weak |
Time and attendance in wage claims; appraisals in termination claims. Approvals can be re-run. Attendance regularizations are a built-in rewrite. |
| Zapier role |
New hire / attendance exception → Slack, payroll, IT. Seal candidate: locked timesheet and submitted appraisal. |
Wizehire
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://wizehire.com |
| Zap count |
75 (rank 1,246) |
| USP |
Guided hiring for non-HR small businesses: job scoring, structured interviews, done-with-you recruiting. |
| ICP |
US SMBs (home services, agencies, local ops) without a recruiter. |
| HQ / founding / funding |
Houston, TX. Founded 2014 (Sid Upadhyay, Nick Carneiro). $37.5M ($7.5M A 2021 Amplo/Mercury; $30M B May 2022 Tiger Global at $250M). |
| Pricing posture |
Subscription + service hybrid. Sales-led; not a $15 ATS. Confirm current packages (software vs. recruiter-assist). |
| Evidence stored |
Applications, scorecards, interview guides, recorded answers, offers — plus Wizehire-staff notes if using assisted hiring. |
| Why vendor-attested trails are weak |
SMB owners backfill “we always interviewed this way” after a charge. Wizehire’s structured kit is the defense — if editable, the defense collapses. Third-party recruiter notes mixed with client notes muddy authorship. |
| Zapier role |
New applicant/hired → CRM, payroll, email. Seal candidate: completed scorecard. |
PeopleForce
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://peopleforce.io |
| Zap count |
69 (rank 1,299) |
| USP |
All-in-one HR for SMEs in CEE/LatAm/Ukraine. Very low PEPM. ATS + HRIS + performance. |
| ICP |
50–1,000 employee companies in Ukraine, Poland, LatAm; 1,300–1,500+ customers claimed. |
| HQ / founding / funding |
Kyiv, Ukraine. Founded 2018/19 (Andrew Cetinic). Seed (Sturgeon et al.); $5.38M pre-A Apr 2025 (Pracuj Ventures, u.ventures, Dnipro VC). |
| Pricing posture |
From $2.50/user/mo. Modular; 50-employee minimums on some plans. Explicitly priced against Western HRIS. |
| Evidence stored |
Employee file, time-off, performance, recruiting, OKRs, documents. |
| Why vendor-attested trails are weak |
Same HR-file problem at a price point that implies light compliance controls. Cross-border employment (UA/PL/LatAm) needs trustworthy contract/time records. War-time ops + small vendor = continuity/attestation risk. |
| Zapier role |
New employee → IT; candidate → Slack. Seal candidate: signed local contract and performance review. |
Hireflix
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://hireflix.com |
| Zap count |
64 (rank 1,353) |
| USP |
One-way video interviews. Flat unlimited pricing. “Most user-friendly.” |
| ICP |
SMBs and mid-market that want async screening without Spark Hire’s price. |
| HQ / founding / funding |
Barcelona, Spain. ~$660k disclosed. Small / mostly bootstrapped. |
| Pricing posture |
Small $75/mo (<50 ees), Medium $150/mo (50–250), custom for agencies. Unlimited jobs/users/interviews. |
| Evidence stored |
Pre-recorded questions, candidate videos, ratings, timestamps of when the candidate recorded. |
| Why vendor-attested trails are weak |
The video is the interview. If Hireflix re-encodes, trims, or loses the original, or if ratings are edited after a complaint, there is no independent hash of the file the candidate uploaded. Deepfakes make unsigned video weaker every year. |
| Zapier role |
Interview completed → ATS/Slack. Seal candidate: original video bytes + rating at submit. |
Deel
| Field |
Detail |
| Parent / owner |
Independent (pre-IPO chatter for 2026). |
| Website |
https://www.deel.com |
| Zap count |
54 (rank 1,498) |
| USP |
Global hiring, EOR, contractor payments, payroll, HR in one system. “Hire anyone, anywhere.” |
| ICP |
Startups to enterprise that employ or pay across many countries. |
| HQ / founding / funding |
San Francisco (founders Alex Bouaziz, Shuo Wang). YC W19; product 2019. Series E Oct 2025 $300M at $17.3B (Ribbit, a16z, Coatue). ~$1.6B raised all-in (sources vary by secondary vs primary). |
| Pricing posture |
EOR = % of payroll / per-employee (hundreds to 1k+ USD PEPM all-in). Contractor and payroll modules cheaper. Sales-led. Not a $10 HRIS. |
| Evidence stored |
Employment/EOR contracts, contractor agreements, KYC, payslips, invoices, tax forms, immigration, time, IP/confidentiality acknowledgements — the global employment file. |
| Why vendor-attested trails are weak |
Misclassification, wage, and IP-assignment cases are existential. Deel is employer-of-record and the archive of the contract. A restated contract or late-generated payslip is still “Deel says so.” Multi-entity local filings depend on Deel’s clock. |
| Zapier role |
Under-automated vs. brand size (54 Zaps). New hire → IT; contract signed → HRIS. Seal candidate: executed local contract and each payslip/invoice as issued. |
TestGorilla
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.testgorilla.com |
| Zap count |
52 (rank 1,539) |
| USP |
Skills-based screening tests to reduce résumé/bias. Library of 200+ tests. |
| ICP |
TA teams that want pre-interview filters; SMBs to mid-market. |
| HQ / founding / funding |
Amsterdam. Founded 2019/20 (Wouter Durville, Otto Verhage). $80–81M ($10M seed; $70M Series A Jun 2022 Atomico + Balderton). |
| Pricing posture |
Tiered by tests/candidates (Core/Plus/Business historically). Sales-assist at scale. Confirm current list. |
| Evidence stored |
Test invitations, scores, anti-cheat signals, candidate answers, time spent, comparative rankings. |
| Why vendor-attested trails are weak |
Adverse-impact claims attack the test. Scores can be invalidated/reset; question banks change; anti-cheat flags are vendor-interpreted. The PDF score report is generated later, not the raw response set. |
| Zapier role |
Test completed → ATS. Seal candidate: raw answers + score at completion. |
Spark Hire
| Field |
Detail |
| Parent / owner |
Independent, PE-backed (Boathouse Capital, Martinson Ventures). Acquired Comeet (ATS) and Chally (assessments) 2023. |
| Website |
https://www.sparkhire.com |
| Zap count |
40 (rank 1,749) |
| USP |
Video interviewing (one-way + live) expanded into ATS (Recruit) and behavioral assessments (Meet). |
| ICP |
Mid-market hiring teams and high-volume screening; 7,000+ orgs claimed. |
| HQ / founding / funding |
Highland Park / Deerfield / Northbrook, IL. Founded 2010 (Josh Tolan; public launch 2012). ~$19.5M. |
| Pricing posture |
Meet video ~$249–299/mo annual; ATS Pro ~$299–335, Growth ~$499/mo annual. Month-to-month higher. |
| Evidence stored |
Videos, live-interview recordings, ATS notes (Recruit), Chally assessments, ratings. |
| Why vendor-attested trails are weak |
Same video-authenticity issue as Hireflix, plus three merged products (Comeet/Chally/Spark) — evidence may have moved tenants. Assessments used as “objective” hiring criteria need sealed raw results. |
| Zapier role |
Interview complete → ATS/Slack. Seal candidate: original video + assessment report. |
Factorial
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://factorialhr.com |
| Zap count |
33 (rank 1,916) |
| USP |
All-in-one business/HR (and expanding finance/IT agents) for European SMEs. Local labor-law packs (ES/FR/etc.). |
| ICP |
European SMEs 10–500 employees. |
| HQ / founding / funding |
Barcelona, Spain. Founded 2016. Unicorn 2022; $150M Series D Jun 2026 at $2.5B (General Catalyst, Atomico). Databases cite $369M+ raised; >$700M capital available including prior commitments. |
| Pricing posture |
Bundled / sales-recommended packs. Quote-led PEPM. Mid-market European ACV. |
| Evidence stored |
Contracts, digital signatures (local labor), time/clock, payroll inputs, docs, performance, expenses — the Spanish/EU employee file. |
| Why vendor-attested trails are weak |
EU working-time and dismissal files. Clock-in corrections are the classic rewrite. Local statutory documents (nominas, convenios) generated from Factorial must match what was issued to the employee. |
| Zapier role |
Thin (33). New employee → IT; absence → calendar. Seal candidate: signed contract and locked clock-in period. |
Workday
| Field |
Detail |
| Parent / owner |
Workday, Inc. (Nasdaq: WDAY). |
| Website |
https://www.workday.com |
| Zap count |
8 (premium; rank 3,414) |
| USP |
Enterprise cloud HCM + finance on one platform. Category leader for large employers. |
| ICP |
Enterprises (typically 1,000–100,000+ ees) with IT-owned HCM. Not a Zapier-native buyer. |
| HQ / founding / funding |
Pleasanton, CA. Founded 2005 (Dave Duffield, Aneel Bhusri). IPO 2012. Market cap ~$49B (Aug 2026). FY2025 revenue ~$8.5B. |
| Pricing posture |
Enterprise subscription. Multi-year, PEPM + module, six-to-eight-figure TCV. Not public SKUs. |
| Evidence stored |
The enterprise system of record: worker, comp, recruiting, payroll, time, learning, benefits, (often) finance. All of HR evidence, at scale. |
| Why vendor-attested trails are weak |
Workday’s “audit” is the gold standard inside the enterprise — and still Workday-hosted. Integrations, EIBs, and payroll partners rewrite workers in bulk. Privileged security admins can undo events. Discovery in a class action produces Workday reports, not independent hashes. Eight Zaps means sealing will be OEM/API, not Zapier. |
| Zapier role |
Almost unused. A few new-hire triggers into long-tail tools. Not a Zap-first motion. OEM or official integration only. |
Pinpoint
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.pinpointhq.com |
| Zap count |
26 (rank 2,168) |
| USP |
ATS for in-house TA managing multiple hiring types (perm, volume, hourly). Strong UK/EU mid-market references. |
| ICP |
In-house TA in UK/EU (charities, energy, multi-brand). |
| HQ / founding / funding |
Jersey / United Kingdom (One Waverley Place, JE2 3XD). Founded 2017/18 (Tom Luce; Bill Rogers also cited). €21M growth from Expedition Growth Capital. |
| Pricing posture |
Sales-led. Mid-market ATS ACV. Not published. |
| Evidence stored |
Applications, structured interviews, career sites, agency portals, DE&I, offer approvals. |
| Why vendor-attested trails are weak |
Standard ATS editability. Agency vs. direct-source disputes. Volume-hiring scorecards get batch-updated. |
| Zapier role |
Low (26). Hired → HRIS. Seal candidate: offer approval and scorecard. |
JOIN
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://join.com |
| Zap count |
23 (rank 2,289) |
| USP |
SMB ATS + multiposting (250+ boards) for DACH/FR/ES. Job-ad creation, tracking, interviews. 20,000+ companies claimed. |
| ICP |
European SMBs that buy job-board distribution and a lightweight ATS together. |
| HQ / founding / funding |
Berlin, Germany. Founded 2018 (Tim Ruffner cited). Funding amount Unknown (Crunchbase “funded”). |
| Pricing posture |
Per open job: on the order of €20/job/mo (Standard); Advanced; Enterprise custom. Unlimited users. Month-to-month available. |
| Evidence stored |
Ads, applications, messages, interviews, multipost receipts. |
| Why vendor-attested trails are weak |
Lightweight SMB ATS: weakest access control. Multipost “we posted on date D” is JOIN-attested (relevant to agency/board disputes). |
| Zapier role |
Low. New applicant → Slack. Seal candidate: application received. |
Small Improvements
| Field |
Detail |
| Parent / owner |
Independent. Bootstrapped. |
| Website |
https://www.small-improvements.com |
| Zap count |
59 (rank 1,436) |
| USP |
Lightweight performance: 1:1s, objectives, 360s, reviews. Not a full HRIS. |
| ICP |
Tech/knowledge SMBs that already have an HRIS and want better reviews. |
| HQ / founding / funding |
Berlin, Germany. Founded 2011 (Per Fragemann). No VC. ~$5.7M ARR cited (2024). |
| Pricing posture |
From $3/user/mo annual; higher tiers ~$9/user/mo. Transparent and cheap. |
| Evidence stored |
Performance reviews, 360 feedback, 1:1 notes, objectives, praise — the exact documents rewritten after a termination. |
| Why vendor-attested trails are weak |
This is the litigation file. “The review was always this bad” vs. “they wrote it after we complained.” Cycles can be reopened; managers edit after HR asks. SI’s timestamps are the only clock. Highest legal gravity per byte in this vertical after the signed offer. |
| Zapier role |
Review completed → Slack/HRIS. Seal candidate: submitted review and 360 response. Do not seal drafts; seal submit. |
intelliHR
| Field |
Detail |
| Parent / owner |
Humanforce (Accel-KKR backed). Acquired 2023 via scheme at AUD $0.11/share, ~AUD $77M. |
| Website |
https://intellihr.com / https://intellihr.com.au |
| Zap count |
28 (rank 2,072) |
| USP |
People-analytics-heavy HRIS: configurable processes, engagement, performance, insights. |
| ICP |
ANZ mid-market that wanted analytics beyond payroll-first Humanforce; now part of that HCM suite. |
| HQ / founding / funding |
Brisbane, Australia. ASX-listed then taken private 2023. Humanforce/Accel-KKR. |
| Pricing posture |
Sales-led PEPM. Mid-market ANZ. Not public. |
| Evidence stored |
Employee master, performance, engagement surveys, incidents, goals, documents. |
| Why vendor-attested trails are weak |
Post-acquisition data migration (intelliHR → Humanforce platform) is itself an attestation event: what survived the merge? Surveys and performance used in Fair Work claims. |
| Zapier role |
Low. New employee / review → other tools. Seal candidate: performance review and incident record. |
Collage HR
| Field |
Detail |
| Parent / owner |
People Corporation (Winnipeg). Acquired 5 Nov 2019. People Corp is a Canadian benefits/HR distributor (later PE/privatization history Unknown in this pass). |
| Website |
https://www.collage.co |
| Zap count |
16 (rank 2,647) |
| USP |
Canadian all-in-one HR + benefits-connected HRIS; payroll embedded (Nmbr, 2026). |
| ICP |
Canadian SMBs that want HR + group benefits in one place. |
| HQ / founding / funding |
Toronto. Founded 2016. $5M seed then People Corp 2019. |
| Pricing posture |
Sales-led Canadian SMB. Demo/quote. Not a global PEPM brand. |
| Evidence stored |
Canadian employee file, benefits enrollments, payroll (embedded), policies, time-off, documents. |
| Why vendor-attested trails are weak |
Benefits eligibility and ROE/termination dates are CRA/EI-relevant. Parent is a benefits broker — employment data and insurance administration sit in one group. Edits to enrolment/termination dates rewrite coverage history. |
| Zapier role |
Lowest HR Zap count. New employee → Slack/IT. Seal candidate: hire/term date and benefits enrolment. |
VERTICAL 14 — GRC, Compliance & Risk (10 apps)
Low-moderate density on Zapier — under-represented vs. the real market. Buyers already sell “evidence” to auditors. The evidence is self-attested by the GRC vendor that collected it. Natural OEM conversation, not a Zap-volume game.
Whitespace (not on this Zapier list, category leaders): Vanta and Drata — see end of this section.
Secureframe
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://secureframe.com |
| Zap count |
23 (rank 2,303) |
| USP |
Automated security compliance (SOC 2, ISO 27001, HIPAA, PCI, GDPR, NIST, CMMC). Trust Center + questionnaire AI. Fastest path to the sales-blocking audit. |
| ICP |
Startups and growth SaaS (often <500 staff) whose enterprise deals are blocked on SOC 2. |
| HQ / founding / funding |
San Francisco / NY presence. Founded 2019/20 (Shrav Mehta; Natasja Nielsen also cited). $79M ($56M Series B Feb 2022; Kleiner Perkins et al.). |
| Pricing posture |
Quote. Fundamentals from ~$7,500/yr (one framework). Multi-framework mid-market deals $15k–50k+ plus auditor/pentest. |
| Evidence stored |
Control tests, cloud/IdP/HRIS snapshots, policies, personnel acknowledgements, vendor questionnaires, Trust Center artifacts, auditor PBC lists. |
| Why vendor-attested trails are weak |
Secureframe’s product is the evidence binder. Integrations pull screenshots/API facts from AWS/Okta/GitHub/HRIS and store them as “control passed on date D.” That pass is Secureframe’s word. A customer (or Secureframe) can re-run a test after remediating and present the later pass as continuous. Auditors still accept vendor-collected screenshots. |
| Zapier role |
Thin. Custom evidence / questionnaire / task → Slack, Jira, Drive. Seal candidate: each collected evidence artifact and each control-test result at collection time. OEM conversation: make the Trust Center independently verifiable. |
UpGuard
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.upguard.com |
| Zap count |
40 (highest GRC Zap count; rank 1,730) |
| USP |
Cyber vendor-risk + attack-surface / digital-risk posture (CRPM). External scores, questionnaires, breach monitoring. |
| ICP |
Security teams at mid-market/enterprise that must diligence vendors and watch their own perimeter. |
| HQ / founding / funding |
Hobart, Tasmania + US HQ Mountain View, CA. Founded 2012 (Mike Baukes et al.). $75M Series C Feb 2026 (Springcoast); prior August Capital, Square Peg, Pelion. Total well into nine figures (~$150M+ cited). |
| Pricing posture |
Sales-led. Vendor-risk seats + monitored vendors. Mid-to-high five figures typical; enterprise more. |
| Evidence stored |
Vendor questionnaires and attachments, security scores over time, attack-surface findings, breach/dark-web alerts, residual-risk decisions, third-party contracts metadata. |
| Why vendor-attested trails are weak |
After a vendor breach, counsel asks “what did you know and when?” UpGuard scores and questionnaires are the file — and they are UpGuard’s. Scores are model-driven and restated when the scanner changes. Questionnaire PDFs can be re-uploaded. The “we assessed them on date D at score S” fact is not independently sealed. |
| Zapier role |
Best GRC Zap surface (40). New vendor risk / score change / breach alert → Slack, Jira, ServiceNow, GRC. Seal candidate: questionnaire as submitted and score snapshot on decision date. |
Hyperproof
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://hyperproof.io |
| Zap count |
2 (rank 9,472) |
| USP |
Compliance operations / continuous controls: programs, risks, common-control mapping, evidence collection, FedRAMP-oriented SKU. |
| ICP |
Mid-market to enterprise GRC teams running many frameworks (SOC 2, ISO, HIPAA, HITRUST, CMMC). |
| HQ / founding / funding |
Bellevue / Seattle, WA. Founded 2018 (Craig Unger). $66.5M (Toba; $40M growth Aug 2023 / announced 2024 Riverwood Capital). |
| Pricing posture |
Enterprise quote. Well above Secureframe starter. |
| Evidence stored |
Controls, mapped requirements, evidence objects, issues, risks, audit requests, sign-offs, FedRAMP workflow artifacts. |
| Why vendor-attested trails are weak |
Hyperproof is sold as the system of record for compliance. Evidence objects are files + metadata Hyperproof stores. Relinking evidence to a different control after the fact is a product action. Two Zaps = almost no independent copy. |
| Zapier role |
Negligible. Custom evidence in → Hyperproof. Seal candidate: evidence object at upload and control-test sign-off. OEM > Zap. |
LogicGate
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.logicgate.com |
| Zap count |
5 (rank 4,162) |
| USP |
Flexible enterprise GRC automation (Risk Cloud): no/low-code apps for risk, compliance, ops risk, third-party, audit. |
| ICP |
Enterprise GRC / operational-risk teams that want to build their own applications, not just SOC 2 automation. |
| HQ / founding / funding |
Chicago, IL. Founded 2015 (Matt Kunkel, Michael McMahon). $156M total; $113M Series C Nov 2022. |
| Pricing posture |
Enterprise platform + apps. High five to six figures. Sales-led. |
| Evidence stored |
Whatever the customer builds: RCSA, incidents, KRIs, vendor risk, SOX controls, audit issues, attachments, workflow history. |
| Why vendor-attested trails are weak |
Flexibility means the customer and LogicGate admins can reshape the app, including historical fields. Workflow “completed on” is LogicGate’s engine. SOX 404 testers rely on this history. Five Zaps. |
| Zapier role |
Token. Record created → Slack/Jira. Seal candidate: control test / incident close. Enterprise OEM. |
LogicManager
| Field |
Detail |
| Parent / owner |
Independent (founder-led). |
| Website |
https://www.logicmanager.com |
| Zap count |
5 (rank 4,255) |
| USP |
Enterprise risk management + risk-based GRC. Taxonomy-driven. “Performance is a result of effective risk management.” |
| ICP |
Mid-market/enterprise ERM, healthcare, financial services, higher-ed — classic ERM buyers, not YC SOC 2 startups. |
| HQ / founding / funding |
Boston, MA. Founded 2005 (Steven Minsky). No major VC story (bootstrapped / private). |
| Pricing posture |
Published “transparent” ERM pricing; third parties cite ~$6k/yr basic to ~$150k enterprise. No long lock-up marketed. |
| Evidence stored |
Risks, controls, incidents, vendors, policies, assessments, board/ERM reports. |
| Why vendor-attested trails are weak |
Board risk reports and regulator exams (OCC, state DOI, Joint Commission) will cite LogicManager exports. Assessments can be re-opened. 20-year-old ERM platforms accumulate silent admin corrections. |
| Zapier role |
Token (5). Incident → ticket system. Seal candidate: completed risk assessment and incident record. |
ISMS.online (IO)
| Field |
Detail |
| Parent / owner |
ECI Partners (majority/growth, Nov 2023; bought from Cow Corner). |
| Website |
https://www.isms.online |
| Zap count |
9 (rank 3,404) |
| USP |
Packaged ISMS: ISO 27001 (and privacy/other) workspaces, policies, risks, assets, SoA, audits. Built by people who needed ISO themselves (2005 origin story). |
| ICP |
SMEs and mid-market pursuing ISO 27001 / privacy without a big GRC program. UK-strong, expanding US/AU/EU. |
| HQ / founding / funding |
Brighton, UK. Product roots 2005; company often dated 2012 (Mark Darby). ECI 2023 (fund scale up to ~£300m deals). Earlier Cow Corner. |
| Pricing posture |
Published IO plans on isms.online/plans (tiered workspaces). Mid-market SaaS, below ServiceNow GRC. |
| Evidence stored |
Statement of Applicability, risks, assets, policies, supplier assessments, internal-audit records, management-review minutes, evidence links. |
| Why vendor-attested trails are weak |
The SoA and internal-audit file are the ISO evidence. Certification bodies already complain about “platform says complete.” Re-opening a risk or swapping a policy version after stage-2 is a few clicks. PE ownership = future platform consolidation. |
| Zapier role |
9 Zaps. Task/evidence → Slack/Jira. Seal candidate: SoA version and internal-audit report as issued to the CB. |
NorthGRC
| Field |
Detail |
| Parent / owner |
KMD acquisition recorded 6 Jul 2015 (KMD is NEC-owned Danish IT). Brand still operates as NorthGRC; confirm whether still inside KMD/NEC or later separated — treat current holdco as KMD/NEC unless contradicted. |
| Website |
https://www.northgrc.com |
| Zap count |
2 (rank 5,470) |
| USP |
Nordic connected GRC + advisory since 2002. Templates + consultancy, not a US SOC 2 factory. |
| ICP |
Nordic mid-market/enterprise (DK/SE/NO) needing ISO/GDPR/NIS2-style programs plus advisory. |
| HQ / founding / funding |
Søborg (Soborg), Denmark. Founded 2002. Acquired by KMD 2015. Employee count small (~14 in some databases). |
| Pricing posture |
Sales + professional services. Not published. Nordic mid-market. |
| Evidence stored |
Policies, risks, controls, assessments, NIS2/GDPR registers, advisory deliverables. |
| Why vendor-attested trails are weak |
Consultancy + software in one vendor: the same firm writes the ISMS and hosts the evidence. Two Zaps. Acquisition-era data lineage is opaque. |
| Zapier role |
Negligible. OEM/advisory partnership in Nordics, not a Zap motion. |
Tugboat Logic
| Field |
Detail |
| Parent / owner |
OneTrust (acquired Sep 2021). Tugboat is OneTrust’s security-assurance / Trust Exchange lineage. |
| Website |
https://www.tugboatlogic.com / OneTrust Trust Intelligence |
| Zap count |
5 (rank 4,216) |
| USP |
Security-assurance automation (SOC 2, ISO, CMMC, HIPAA, PCI) and custom evidence collection — the Zapier app is explicitly “collect any piece of evidence.” |
| ICP |
Mid-market security/compliance teams; now a OneTrust module more than a standalone startup. |
| HQ / founding / funding |
Calgary, Alberta origin (Ray Kruck). OneTrust (Atlanta) owned since 2021. Standalone funding superseded. |
| Pricing posture |
2021 public hook: Essentials from ~$45/mo; real OneTrust deals are enterprise quote ($15k–$100k+/yr cited in comparisons). |
| Evidence stored |
Policies, control evidence, auditor shares, Trust/Security Assurance profiles, custom integration pulls. |
| Why vendor-attested trails are weak |
OneTrust’s pitch is “operationalize trust.” Evidence collected by OneTrust, stored by OneTrust, shared with customers’ customers via OneTrust. Circular attestation at industry scale. Post-acquisition product renaming makes historical evidence lineage harder. |
| Zapier role |
The connector exists to pull arbitrary evidence into the Infosec program. That is the moment to seal: hash the file as collected, not after it sits in OneTrust. |
SAI360 GRC
| Field |
Detail |
| Parent / owner |
Symphony Technology Group (STG) since Mar 2023. Formerly SAI Global (Standards Australia commercial business, 2003); later Baring PE Asia period. |
| Website |
https://www.sai360.com |
| Zap count |
1 (rank 9,472) |
| USP |
Broad IRM: ethics/compliance, risk, EHS&S, compliance learning. Enterprise GRC + training, not startup SOC 2. |
| ICP |
Global enterprises (regulated industry, EHS, ethics hotlines, policy attestation). |
| HQ / founding / funding |
Chicago, IL. Lineage 2003 (SAI Global). STG-owned 2023. |
| Pricing posture |
Enterprise + services. High ACV. Not on a pricing page. |
| Evidence stored |
Incidents/hotline cases, policy attestations, risks, audits, EHS incidents, training completions, third-party due diligence. |
| Why vendor-attested trails are weak |
Hotline case files and policy attestations are regulator and plaintiffs’ exhibits (DOJ, FCPA, OSHA). Case notes get updated after counsel reviews. Training “completion” is SAI360’s LMS clock. One Zap. |
| Zapier role |
Effectively unused. Any motion is OEM/SI into ServiceNow/Workday, not Zapier. |
JustProtect
| Field |
Detail |
| Parent / owner |
Independent (small). Public cap-table Unknown. |
| Website |
https://app.justprotect.co (Zapier listing). Distinct from justprotect.com.au (Australian consultancy) — do not conflate. |
| Zap count |
1 (rank 9,472) |
| USP |
Regulation- and content-agnostic assessment platform: centralize, automate, and simplify assessments for companies with or without a GRC. |
| ICP |
Teams running vendor/security/compliance assessments who are not on ServiceNow or OneTrust. |
| HQ / founding / funding |
Unknown with confidence. Founder references in older press point to Vikas Bhatia / security-assessment positioning; current justprotect.co entity details are thin. Treat HQ, year, and funding as Unknown. |
| Pricing posture |
Unknown (not meaningfully published). |
| Evidence stored |
Assessment questionnaires, responses, scores, attached evidence, workflow state — i.e., the assessment file. |
| Why vendor-attested trails are weak |
An assessment is only useful if the answers and attachments are the ones submitted on date D. A 1-Zap, low-transparency vendor is the weakest possible attester. Re-scoring or replacing an attachment after a failed audit is undetectable to a third party. |
| Zapier role |
Essentially unused. Seal the submitted assessment package. Only pursue if a design partner appears; do not prioritize on Zap volume. |
Whitespace — category leaders not on this Zapier list
Zapier’s GRC shelf is a B-list plus two specialists (Secureframe, UpGuard). The companies that actually own “automated evidence” mindshare are absent.
| Field |
Detail |
| Parent / owner |
Independent. |
| Website |
https://www.vanta.com |
| Zap count |
Not present on the classified Zapier list. Native integrations are first-party (cloud, IdP, HRIS, MDM) — not the Zapier directory. |
| USP |
Category-defining continuous compliance / trust automation. Fastest SOC 2 story in startup-land. Trust Center, questionnaires, vendor risk added over time. |
| ICP |
Startups → mid-market (8,000+ customers cited; heavy YC/SaaS penetration). |
| HQ / founding / funding |
San Francisco. Founded 2018 (Christina Cacioppo). ~$500M raised; $4.15B Series D Jul 2025 (Wellington; prior Sequoia Series C $2.45B). ARR scale reported in the hundreds of millions by 2026 commentary. |
| Pricing posture |
Quote. Starter SOC 2 often mid-four to low-five figures; platforms $20k–$100k+. |
| Evidence stored |
Same class as Secureframe, at larger scale: automated tests, personnel/HRIS evidence, cloud configs, policies, vendor docs. |
| Why vendor-attested trails are weak |
The market-leading circular attestation. Vanta collects evidence from the customer’s systems, stores it, and shows auditors a green check. Auditors largely trust Vanta’s collector. If Vanta’s test logic or snapshot is wrong — or re-run after a fix — the audit file is still “Vanta passed.” Independent sealing of each snapshot is a direct product wedge and an OEM conversation at $4B scale, not a Zap. |
| Implication |
Do not read “10 GRC apps on Zapier” as “the GRC market is small.” The buyers with budget live at Vanta/Drata/ServiceNow/OneTrust and integrate natively. Zapier is how Secureframe-class and UpGuard alerts leak into Slack. |
| Field |
Detail |
| Parent / owner |
Independent (Insight Partners–class growth; no confirmed take-private in sources checked). |
| Website |
https://drata.com |
| Zap count |
Not present on this list. |
| USP |
Continuous compliance with deeper control customization and API/DevOps orientation than Vanta. Enterprise-leaning automation. |
| ICP |
Security/compliance teams that want to model their own control set; growth → enterprise SaaS. |
| HQ / founding / funding |
United States (SF/LA lineage). Founded 2020 (Adam Markowitz et al.). Multi-hundred-million VC (Series B/C era $200M / ~$2B valuation in 2021 is the well-known round; later marks Unknown here). |
| Pricing posture |
Quote; typically at or above Vanta for equivalent scope. |
| Evidence stored |
Controls, automated tests, evidence, personnel, vendors, policies — same binder, more configurable. |
| Why vendor-attested trails are weak |
Identical circularity to Vanta/Secureframe. More customer-defined controls means more admin ability to reshape historical mappings. |
| Implication |
Pair with Vanta as the OEM whitespace. A Zapier-only GRC strategy misses the two logos every auditor already knows. |
Also absent (for context, not profiled): ServiceNow GRC/IRM, OneTrust (except Tugboat’s leftover Zap), AuditBoard, Workiva, Archer, MetricStream, Diligent. Those are enterprise procurement, not Zapier.
Cross-vertical notes for DataCubes / sealing
Where the record actually lives
| Layer |
Examples |
What to seal |
| Source document |
Dext, Expensify, Hubdoc-in-Xero, Hireflix/Spark/Metaview media |
Raw image/audio + first extraction |
| Posted money |
QBO, Xero, Wave, Sage, Pennylane, Fortnox, Exact, Moneybird, bexio |
Invoice-as-sent, payment, locked journal |
| Statutory filing |
TaxBandits, FreeAgent MTD, Quaderno VAT invoice, Fortnox/Skatteverket |
Transmit payload + ACK |
| Workpaper / advice |
TaxDome, Canopy, Karbon, FYI, Senta, BrightManager, Double |
Filed doc, sent advice email, close sign-off |
| Employment action |
BambooHR, HiBob, Workday, Factorial, Deel, Small Improvements |
Signed offer/contract, submitted review, locked time |
| Hiring decision |
Greenhouse, Ashby, Recruitee, Workable, Crelate |
Submitted scorecard, client submission, offer approval |
| Compliance evidence |
Secureframe, Hyperproof, Tugboat/OneTrust, Vanta*, Drata* |
Evidence blob + test result at collection |
Zapier as a go-to-market, not as the enterprise path
- Zap-first (build now): QBO, Xero, Wave, Zoho Books, TaxDome, Karbon, BambooHR, Recruitee, Ashby, HiBob, Dext.
- Zap-possible, lower volume: Canopy, Double, Pennylane, Greenhouse, Metaview, Small Improvements, UpGuard, Secureframe.
- OEM-only: Workday, Vanta, Drata, SAI360, LogicGate, Intuit-inside-the-suite beyond the existing QBO Zap.
Highest-gravity, weakest attestation (priority shortlist)
- Dext — source receipt before it becomes “the books.”
- TaxDome / Canopy / Karbon — workpapers and advice, malpractice/IRS.
- Small Improvements + BambooHR reviews — the backdated PIP problem.
- Metaview / Hireflix — AI or video as the interview of record.
- Deel contracts & payslips — global employment/misclassification.
- TaxBandits transmit + ACK — legal filing, 3 Zaps, no independent copy.
- Secureframe / Tugboat / (OEM) Vanta–Drata — they sell evidence; make that evidence independently true.
Ownership clusters worth one conversation, not 10
| Cluster |
Entities on this list |
Note |
| Intuit |
QuickBooks Online |
Also owns TurboTax/Credit Karma — books-to-return adjacency |
| H&R Block |
Wave |
Tax preparer owns the ledger |
| NatWest |
FreeAgent |
Bank owns the ledger |
| Die Mobiliar |
bexio |
Insurer owns the SME books |
| IRIS / Hg |
Dext, Senta |
Capture + practice under one PE roof |
| Visma |
Quaderno |
Tax determination inside a European rollup |
| Zoho |
Books, Recruit, People |
One admin across money and HR |
| Tellent / PSG |
Recruitee |
ATS + HR suite |
| LTG |
Breezy HR |
ATS inside a learning/HCM conglomerate |
| Humanforce / Accel-KKR |
intelliHR |
ANZ HCM rollup |
| People Corp |
Collage HR |
Benefits distributor owns the HRIS |
| OneTrust |
Tugboat Logic |
Trust platform owns the evidence collector |
| STG |
SAI360 |
Classic PE GRC |
| ECI |
ISMS.online |
PE ISO platform |
| TPG |
Greenhouse |
PE structured-hiring standard |
| KKR |
Exact Online |
PE Benelux ERP |
| EQT |
Fortnox |
$5.5B Swedish books platform |
End of profiles 04 — Accounting, HR, GRC.
George Lambert
b4150c8250