Low-code and visual programming platforms

Activepieces

Open source automation with a US operator and self-hosting options

United StatesEUOpen sourceFree plan Ownership reviewed, controller unresolvedHigh non-EU dependency

Scope verdict

Ownership reviewed, controller unresolved

Activepieces Inc. is the US operator named in the Terms, with a stated San Francisco office and Delaware governing law. The 14 September 2026 Delaware ICIS search identifies ACTIVEPIECES INC., file 6672527. The detail page did not open, so this is not a full registry extract or status certificate. No public cap table, controlling EU parent or company-specific Form D was found in the reported checks. Ultimate control remains unresolved; the United States label describes the operator.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 6 non-European infrastructure or email dependencies across 5 providers: Amazon SES, Cloudflare, Cloudflare R2, DigitalOcean, Google. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

Activepieces is an automation platform operated by Activepieces Inc. in the United States. Flows are built without code using integrations called pieces, and can include AI steps. The community core uses the MIT licence; enterprise components have separate licence terms.

You can run Activepieces on your own infrastructure or use its hosted cloud. The company says its cloud runs in Frankfurt by default, with other regions on request. That hosting claim does not establish European company control: the hosted provider's ultimate ownership remains unresolved. Self-hosting gives the deploying organisation control over its infrastructure and configuration.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Core service hosting

DigitalOcean

Non-European provider
Observed
The handbook names DigitalOcean for Redis and PostgreSQL; the first-party Trust Center identifies the main database and PII. Availability of the FRA1 region does not establish that Activepieces uses it. Actual database and backup regions remain unverified.

Why this matters

Reviewed evidence places DigitalOcean in the core service path, so customer data may be processed under non-European control. Check the cited source for the documented region and scope.

Public website

Cloudflare

Non-European provider
Observed
Google Public DNS, 2026-09-14, as reported in the follow-up: activepieces.com and cloud.activepieces.com resolve to Cloudflare anycast addresses 104.21.83.205 and 172.67.181.76; domain nameservers are braden.ns.cloudflare.com and suzanne.ns.cloudflare.com. These public website and cloud front-door records do not expose the origin region.

Why this matters

Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Supporting services

Cloudflare R2

Non-European provider
Observed
The first-party Trust Center lists Cloudflare R2 with US and PII labels. This is a declared subprocessor relationship; the label does not independently verify every workload or all customer-data residency. R2 storage is distinct from the Cloudflare public front door.

Why this matters

The published disclosure lists Cloudflare R2 for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

Amazon SES

US-controlled cloud
Observed
The supplied 2026-09-14 TXT/MX/SPF review identifies Amazon SES. Raw records were not included, so this is recorded as a reported vendor dependency without asserting a specific sending route, mail volume or data region.

Why this matters

The published disclosure lists Amazon SES for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Supporting services

Google Firebase

Non-European provider
Observed
The supplied 2026-09-14 TXT/MX/SPF review identifies Firebase project activepieces-b3803. A project identifier does not establish application hosting, customer-data location or company ownership; exact record values were not supplied.

Why this matters

The published disclosure lists Google Firebase for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Low-code and visual programming platforms

View all →