Zendesk
Zendesk, Inc. ·www.zendesk.de· As of: 2026-07-30
Our verdict
A helpdesk creates no edge, because every competitor can buy the same one. Without one you lose commitments, deadlines and the history of a case, and you fall behind a standard customers already assume. The difference comes from what happens to the case data afterwards, not from the ticket system itself. That is precisely why Zendesk is the buy option against which every switch or build decision gets measured.
Who it fits
Solo
suitable with caveats
Entry through Support Team at 19 EUR per seat per month is affordable. But someone working alone rarely needs more than a tidy mailbox, and documented EU storage only starts two plans higher up.
Mid-market
suitable
This is where the tool fits best. Multiple channels, escalation rules and reporting are covered from Suite Team upwards, and rollout needs no dedicated project team. The bill stays manageable as long as the seat count is stable.
Enterprise
suitable
Roles, tenants, certifications and audit logging exist, but some of them sit behind Enterprise and behind a paid add-on with no public price. Anyone who needs evidence negotiates for it item by item instead of simply booking it.
Buy, switch or build
Off-the-shelf
The established off-the-shelf helpdesk
You buy a finished category with channels, rules, reporting and a market of extensions. Rollout takes days rather than months, and nobody has to reinvent the basics. You pay with seat prices that grow with the team, and with a data setup whose location and logging depend on plan tiers and add-ons rather than on the contract.
AI-native
A helpdesk that optimises for resolution instead of tickets
The younger design flips the target metric: what counts is not the well-managed ticket but the request that never reaches a human. That cuts the number of seats needed and shifts cost into consumption. The price is dependence on the quality of the knowledge base and a young vendor market where staying power is rarely substantiated. Zendesk itself is moving the same way with its outcome-based billing.
Build it yourself
Your own case register on your own database
A full helpdesk is not worth building. Building makes sense only where the case originates in your own product and the case data belongs to that product, for instance when every ticket hangs off a device, a contract or a record. Then you build the register yourself and buy channels and interface around it. Doing this without that reason means spending two years rebuilding features available at 55 EUR per seat.
Our advice
- Solo: Buy, smallest plan, no add-ons. As long as no EU commitment is needed, Support Team is enough.
- Mid-market: Buy. Before signing, get EU hosting activated in writing and ask for the price per automated resolution.
- Enterprise: Buy, but write hosting location, audit logging and the AI regulation transparency duties into the contract instead of booking them.
Who is behind it
Staying power: Established
The vendor has been in market since 2007 and has been owned by a consortium of financial investors since late 2022. That secures capital but shifts governance towards returns, which shows up in how pricing is set.
- Year founded: 2007, headquartered in San Francisco · Source · As of 2026-07-30
- Ownership: acquired by a consortium led by Hellman & Friedman and Permira together with ADIA and GIC, roughly USD 10.2 billion, completed on 22 November 2022; privately held since then · Source · As of 2026-07-30
- Certification: ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, ISO 27701:2019, SOC 2 Type II on request, PCI DSS, FedRAMP LI-SaaS, CSA STAR AI Level 1 and 2 · Source · As of 2026-07-30
- Handling of sub-processors: complete public list, new sub-processors announced at least 30 days in advance, right to object in writing; version effective 16 July 2026 for new customers and 15 August 2026 for existing ones · Source · As of 2026-07-30
- Contracting entity: Zendesk, Inc., a Delaware corporation, 181 Fremont St., San Francisco; the master subscription agreement names no separate EU contracting entity · Source · As of 2026-07-30
Cost of leaving: Moderate
The data belongs to the customer and can be pulled through the REST API on every plan. Convenient it is not: bulk export to JSON, CSV or XML is not enabled by default according to the vendor, the account owner has to request it from support, the export tool is missing on entry plans, the CSV export omits ticket comments and descriptions, and AI agent tickets cannot be exported at all. After the term ends, 30 days remain for the export.
Regulation and data
| Data processing agreement | yes, as part of the contractThe data processing agreement is, per the vendor, part of the contract and does not need to be negotiated separately. Signing it electronically is possible in addition.Source · As of 2026-07-30 |
|---|---|
| Storage location | EU data location only with the separately activated Data Center Location add-on, available from Suite Professional upwardsThis is the instructive part. The vendor states explicitly that it only makes hosting location commitments to customers who have this add-on, and that it otherwise moves account data between regions without notice. The add-on carries no charge per the vendor, but it is not active automatically and has to be requested from the account representative or support. Selectable regions include the European Economic Area, the United Kingdom, the United States, Japan and Australia. Even with the add-on, named exceptions stay in the United States, among them voice text data, chat email reports and campaign data.Source · As of 2026-07-30 |
| Subprocessors | named publicly and in fullThe list names purpose and location, including Amazon Web Services as infrastructure in the United States, Ireland, Germany, the United Kingdom, Japan and Australia, plus Cloudflare, Twilio, Snowflake, Datadog and MongoDB. For generative features it names OpenAI, Microsoft, Google, Groq, ElevenLabs and Fireworks.Source · As of 2026-07-30 |
| Third-country transfer | processing in the United States, based on standard contractual clauses and self-certification under the EU-US Data Privacy FrameworkThe agreement incorporates the Commission's standard contractual clauses under Module 2 and adds the UK addendum for the United Kingdom. The vendor commits to maintaining its self-certification.Source · As of 2026-07-30 |
| Training on customer data | external model providers do not train on the data; the vendor's own models are trained on sanitised service dataBoth hold at once and are often confused. The vendor commits that external language model providers do not use customer data for their training, and points to zero retention endpoints. For its own models, which may also serve other customers, it instead describes sanitisation: fields carrying identifiers such as name and email address are excluded, and free text is machine-stripped of identifying markers. A publicly documented opt-out did not surface in this review.Source · As of 2026-07-30 |
| Retention and deletion | deletion starts 90 days after termination, production data after 40 to 120 days depending on the service, backups up to 130 daysFor ticketing, help centre and forum the vendor names 40 days in production and 130 days in backups, for live chat and messaging 120 days, for analytics 90 days. Once started the process cannot be reversed. Export is only possible in the 30 days after the term ends, which is considerably earlier.Source · As of 2026-07-30 |
| Certifications | ISO 27001:2022, ISO 27017:2015, ISO 27018:2019, ISO 27701:2019, SOC 2 Type II, PCI DSS, HIPAA programme, FedRAMP LI-SaaS, Cyber Essentials Plus, CSA STAR AI Level 1 and 2The SOC 2 report is released on request only and is not public. An attestation under the German C5 catalogue is not named on the trust page.Source · As of 2026-07-30 |
| EU AI Act, Article 50 | unclearThe vendor's trust page does not mention the European AI regulation, although the product contains generative features and automated replies. Anyone who has to meet the transparency duties under Article 50 gets no commitment here and must obtain it contractually.no source given · As of 2026-07-30 |
| Audit logging | access logs only with the paid Advanced Data Privacy and Protection add-on, available from Suite Enterprise upwardsThis add-on bundles 90 days of access logs, encryption with your own key management service, extended deletion rules, masking of personal data and automatic redaction. The vendor publishes no price for it; depending on account type the purchase runs through the shopping cart or through the account representative. Important distinction: this add-on does not include regional hosting, which has its own separate add-on.Source · As of 2026-07-30 |
What it really costs
Entry price
Support Team costs 19 EUR per seat per month on annual billing and covers email and ticketing only. Suite Team sits at 55 EUR, Suite Professional at 115 EUR. Suite Enterprise with Copilot is priced on request only. Monthly billing costs around 20 percent more according to the vendor.
Source · As of2026-07-30
What gets expensive
In three places. First the add-ons: Copilot costs 50 EUR per seat per month, the workforce engagement bundle another 50 EUR, the contact centre 82 EUR. Second consumption: automated resolutions by AI agents are billed separately by outcome, and the unit price does not appear on the pricing page. Third the obligations: a documented EU hosting location requires at least Suite Professional at 115 EUR, and access logs require Suite Enterprise plus an add-on with no public price. So anyone buying for regulatory reasons does not pay 19 EUR but starts at 115 EUR and negotiates the rest.
What it displaces
- Shared mailbox for customer requests
- Case tracking in spreadsheets
- Ownership assigned by word of mouth
Interfaces
- REST API on every plan
- Webhooks and triggers
- Data export to JSON, CSV and XML once support has enabled it
- App marketplace and custom applications
- Connection of your own key management through the paid add-on
At Convios: Not used by us
Convios does not use Zendesk. Everything in this profile comes from the vendor's own documentation, not from our own operation.
Matching methods
Evidence
- 1.Plan prices of 19, 55 and 115 EUR per seat per month, the Copilot, workforce engagement and contact centre add-ons, and outcome-based billing of automated resolutions · As of 2026-07-30
- 2.EU hosting depends on the Data Center Location add-on, which is free of charge but only applies from Suite Professional upwards and is not activated automatically · As of 2026-07-30
- 3.Without that add-on the vendor makes no hosting location commitment and moves account data between regions without notice · As of 2026-07-30
- 4.Even with a region activated, named exceptions stay in the United States, among them voice text data, chat email reports and campaign data · As of 2026-07-30
- 5.Access logs, customer-managed encryption keys and masking sit in the paid add-on from Suite Enterprise upwards, with no public price · As of 2026-07-30
- 6.Data processing is part of the contract, standard contractual clauses Module 2 are incorporated, and the vendor self-certifies under the EU-US Data Privacy Framework · As of 2026-07-30
- 7.Sub-processors are named in full with purpose and location, and new ones are announced 30 days in advance · As of 2026-07-30
- 8.Bulk export is not enabled by default, must be requested from support, is missing on entry plans, and the CSV export omits comments and descriptions · As of 2026-07-30
- 9.External language model providers do not train on customer data, while the vendor's own models are trained on sanitised service data · As of 2026-07-30
- 10.Deletion starts 90 days after cancellation, production data after 40 to 120 days depending on the service, backups up to 130 days · As of 2026-07-30
- 11.Acquisition by a consortium led by Hellman & Friedman and Permira for about 10.2 billion dollars, completed on 22 November 2022 · As of 2026-07-30
- 12.Certifications under ISO 27001:2022, 27017, 27018 and 27701 plus SOC 2 Type II on request · As of 2026-07-30
Last reviewed: 2026-07-30byDr. Oliver Gausmann, Convios GmbH
Details out of date? Let us know.