# Tray.ai — Workflow Management

Tray.ai by Tray.ai, Inc. holds a panel rating of 3/5 from 6 AI judges (category median 2/5), as of 2026-10-15. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Tray.ai, Inc. (https://tray.ai)
- Category: [Workflow Management](https://whats-best.ai/software/workflow-management.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/workflow-management/tray-ai
- Alternatives: https://whats-best.ai/software/workflow-management/tray-ai/alternatives ([markdown](https://whats-best.ai/software/workflow-management/tray-ai/alternatives.md))
- Data as of: 2026-10-20 · evaluated 2026-10-15 · oldest source captured 2026-10-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Tray.ai, Inc.
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Default not stated; pages mention the US, the EU, United Kingdom and Australia [S3]
- Free plan: Not stated on the vendor’s pages as of 13 Oct 2026

## The panel's verdict

Tray.ai, Inc. of San Francisco offers an integration and automation platform on a SaaS basis, and the bench scored it strongest on integrations and connectors and on governance and audit, both at 7-8. A documented SAP Business One connector and custom connectors via the SDK are named, and an on-prem agent reaches internal services and databases over private IP without exposing public IPs. Governance rests on role-based access to per-connector and per-connection granularity, approval-gated promotion through dev, staging and prod, and decision records capturing who, when, what was shown and the outcome; retry behaviour and limits are published per error class. Hosting and portability scores cluster at 5, because the engine runs on the vendor's cloud and the on-prem agent is connectivity, not hosting, and sovereignty at 3, with a US contracting entity, an EU region on the Enterprise plan, and no public information on subprocessors. Process design scored 6-8; no criterion split the judges materially. The captured pages give different connector counts — 700+ and 474+ pre-built — and the pricing pages show no price figures.

**Speaks for it:**
- Approvals route by role, with two approvers above higher-impact changes, deputy routing for an absent approver, and expiry defaulting to not acting.
- Dev, staging and prod are separated by approval gates, with audit logs of configurable retention streaming to Splunk or Datadog.
- The on-prem agent reaches internal services and databases over private IP without exposing public IPs.
- Projects and individual workflows export and import as JSON, including between organisations.
- Retry behaviour is documented per error class, alongside published payload, timeout and rate limits.

**Held against it:**
- The platform is offered on a SaaS basis, and the on-prem agent is connectivity rather than a runtime the buyer controls.
- The EU region sits on the Enterprise plan and in the add-on list rather than as a standard choice.
- The vendor is recorded as Tray.ai, Inc. of San Francisco, and we found no public information on subprocessors or default execution location.
- The captured pages give different figures for the connector count — 700+ and 474+ pre-built.
- We found no public information on a public status page with incident history, failure alerting, SCIM provisioning or named certifications.

**Best for:**
- You need agent-action approvals an auditor or works council can defend, with role-based routing and a decision record of who saw what.
- Your team must reach internal databases and services behind a firewall without exposing public IPs.
- You want one governance model across workflows, agents, MCP tools and pipelines, with audit logs streaming to your own SIEM.
- You automate SAP Business One and want connectors documented action by action, with templates.

**Avoid if:**
- You need the engine to run on infrastructure you control — the service is offered on a SaaS basis and the on-prem agent is connectivity, not hosting.
- You require EU regional hosting as standard rather than an Enterprise-plan option.
- You are planning an exit to another platform — the documented export and import runs between the vendor's own orgs and workspaces.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Process Owner | The Integration Engineer | The Operations Analyst | The Head of IT | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Process design, forms & approvals | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 4/5 | 3/5 |
| Connectors, API & on-premise reach | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Execution, error handling & monitoring | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3/5 |
| Governance, credentials & audit trail | 3.5/5 | 4/5 | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 |
| Hosting options & portability | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| European sovereignty | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **3/5** | **3.5/5** | **3.5/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The Process Owner** (v1.0): Runs purchase approvals and invoice release for a 400-person Mittelstand company. Wants approvers set by role rather than by name, a substitute when someone is on holiday, deadlines that escalate, and a process change that does not break the forty requests already in flight.
- **The Integration Engineer** (v1.0): Wires the ERP to the shop, the shop to DATEV and the CRM to everything else. Wants connectors documented by action rather than counted in logos, a generic HTTP step for the rest, an on-premise agent that reaches the SQL server without a hole in the firewall, and a failed run replayable from the step that failed.
- **The Operations Analyst** (v1.0): Is asked every Monday why invoices took eleven days. Wants a searchable execution history, cycle times per step, alerts that reach a channel rather than an unread mailbox, runtime and throughput limits published before the month-end run hits them — and to know what a loop over 5,000 rows costs in tasks.
- **The Head of IT** (v1.0): Answers for every automation a department builds without asking. Wants SSO, separate test and production, an inventory of workflows with their owners — and an exit: definitions exportable as BPMN or documented JSON, a self-hosted edition, and an engine licence that will still apply in five years.
- **The Data Protection Officer** (v1.0): Reads every workflow as a chain of transfers. Asks where the execution log keeps its copy of the payload and for how long, which subprocessors and AI model providers a step sends data to, whether payloads can be masked, and what the approval trail records about employees before the works council asks.
- **The Skeptic** (v1.0): Knows that "7,000 integrations" counts connectors nobody maintains, that "unlimited workflows" says nothing about the tasks each run consumes, and that "no-code" ends at the first API without a connector. Reads for what counts as a task, how long failed runs are kept, which model an "AI agent" step sends data to, and whether the workflows can leave the platform at all.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- California privacy: yes [S3]
- Certifications: SOC 1 · SOC 2 Type 2 · HIPAA · GDPR · CCPA · EU-US DPF · Swiss-US DPF · UK-US DPF · annually [S10]
- DPA: https://tray.ai/dpa · yes [S4]
- DPA available: yes · yes · yes · yes · yes [S2]
- Dpf certified: EU-U.S. DPF · UK Extension · Swiss-U.S. DPF [S3]
- Dpf dispute resolution: free of charge · JAMS [S3]
- Dynamic authentication: Dynamic Authentication preserving user-level permissions (customer quote, Zuora) [S1]
- Ftc oversight: yes [S3]
- Laws referenced: GDPR · UK GDPR · FADP [S3]
- No AI training google oauth: yes [S3]
- Right to audit: Enterprise contracts · audit reports · DPAs · sub-processor lists [S10]
- SOC: yes · yes · yes · yes · 100% [S1]
- Transfer mechanisms: Standard Contractual Clauses · EU-U.S. DPF · UK Extension · Swiss-U.S. DPF [S3]
- Trust center: /trust [S10]

**Data**
- Account scope retention: until deletion of the workspace [S8]
- Archived items restorable: yes · yes · yes [S13]
- Breach notification: yes [S4]
- Call recording: yes [S3]
- Cpra response days: 45 · 45 [S3]
- Current run scope retention: 30 [S8]
- Data storage key limit: 400 [S8]
- Data storage nested depth: 32 [S8]
- Data storage overall limit: none [S8]
- Logs rerun window: 7 [S8]
- Logs retention: 7 · 30 · yes [S8]
- No automated decision making: no [S3]
- No sale: no [S3]
- Opt out processing days: 10 [S3]
- Policy change notice days: 30 [S3]
- Workflow scope retention: until deletion of the workflow [S8]

**Hosting**
- Region options: Enterprise · yes · yes [S1]
- Regions: US · EU · APAC · at rest · in transit [S10]
- Regions: US · EU · UK · Australia [S3]

**Integrations**
- Alternative stacks: Microsoft Dynamics 365 · Google BigQuery · Microsoft Teams · Azure Active Directory · ServiceNow · HubSpot [S5]
- Cli: Tray CLI for SDLC on AI projects [S1]
- Connector count: 700+ [S2]
- Connector sdk: Request a connector or build your own with the Tray.ai connector SDK. [S14]
- Cookie policy URL: https://tray.ai/cookies [S3]
- Count: 700+ [S7]
- Cross org transfer: yes · yes [S13]
- Deployment API automation: yes · Projects · Solutions [S13]
- Enterprise SSO: yes · Tray Helix apps [S1]
- Environment promotion recommendation: standalone_change · project [S13]
- Export scope: workflows · project_configuration · solutions · data_tables · vector_tables · apim_operations · basic_agent_metadata [S13]
- Jira: Jira · writes [S5]
- Okta: Okta · reads [S5]
- Project export format: projects · individual_workflows · json [S13]
- Related: HubSpot · Salesforce · Shopify · WooCommerce [S7]
- Salesforce: Salesforce · reads [S5]
- Security docs URL: https://tray.ai/trust [S3]
- Slack: Slack · writes [S5]
- Snowflake: Snowflake · writes [S5]
- Workflow import modes: new_workflow · overwrite_existing [S13]

**Legal**
- Address: privacy@tray.ai · 25 Stillman Street, San Francisco, CA 94107, United States [S3]
- Confidential information: yes [S4]
- DPA: Privacy · Cookies · MSA · DPA · SLA · Sub-processors [S7]
- Entity: Tray.ai, Inc. [S4]
- Export control: yes [S4]
- Footer documents: Privacy · Cookies · MSA · DPA · SLA · Sub-processors · Status [S1]
- Governing law: San Francisco, California · California [S4]
- Ip indemnification: US patent, copyright, trademark, trade secrets · yes [S4]
- Last updated: 2025-01-28 [S4]
- Last updated: 2026-01-01 · 2024-10-08 [S3]
- Page last reviewed: 2026-09 [S5]
- Principal place of business: 25 Stillman Street, San Francisco, CA 94107 [S4]
- UK subsidiary: Plan.nr Ltd · UK · wholly owned [S3]

**Pricing**
- Billing basis: no [S4]
- Enterprise plan: yes · yes · yes · unlimited · yes · yes · yes · 180 [S2]
- Free trial: yes [S2]
- Invoice terms: in advance · 30 [S4]
- Model: usage_and_features · yes · no [S2]
- Page reference: pricing page linked from homepage; no prices stated on this page · yes [S1]
- Pro plan: specific use cases · 700+ · 3 · 7 · 7 [S2]
- Taxes: yes · yes [S4]
- Team plan: 20 · yes · 7 · yes · 30 · yes [S2]
- Trial available: yes [S2]
- Upgrade downgrade: yes · yes [S2]

**Product**
- Additional addons: HIPAA · SSO · regional hosting · 30-day log retention · 180-day insights visibility · Tray IDP · data engineering · log streaming [S2]
- Additional addons: HIPAA · SSO · Regional hosting · 30-day log retention · 180-day insights visibility · Tray IDP · Data engineering · Log streaming [S2]
- Agent builder: yes · yes · yes [S7]
- Agent development addon: Agent Gateway for MCP · Merlin Agent Builder · yes [S2]
- Agent gateway features: yes · yes · yes · yes · yes · 700+ [S2]
- Agent gateway mcp: MCP Gateway with managed MCP servers, connectors as governed tools, audit & observability [S1]
- Agent gateway mcp: yes · yes · yes [S7]
- Agent gateway mcp: publish composite MCP Tool · 700+ connectors as MCP Tools · governance · flexible authentication · observability · access control [S2]
- Agent gateway mcp: build and deploy MCP services from workflows or connectors with governance [S2]
- Agent tools: Create or Update Business Partner Records · Create Sales Orders · Create and Post Invoices · Update Inventory Records · Create Purchase Orders · Log Journal Entries · Manage Service Calls and Tickets · Look Up Business Partner Details · Fe… [S7]
- AI no training on customer data: yes · yes [S4]
- Approval rate monitoring: approval rate by action type · median time to decision · expiries · post-execution corrections [S5]
- Approval workflow parts: blast radius threshold, request showing real effect, safe expiry defaulting to no action, decision record [S5]
- Audit logging streaming: Audit logging with configurable retention and real-time SIEM streaming [S10]
- Auth refresh retry: 3 · yes · 20 [S8]
- Auto respond 200 rate limit: no [S8]
- Aws options: Transit Gateway · PrivateLink · VPC Peering [S12]
- Backend error retry: 3 [S8]
- Backend error retry: 3 [S8]
- Bidirectional dedup: yes · yes [S7]
- Blast radius dimensions: record count, reversibility, customer-facing, financial, destructive [S5]
- Built with: Tray Headless [S5]
- Call connector endpoint 200 outcome field: Call connector endpoint responses include outcome and output fields; a 200 does not guarantee third-party success [S9]
- Callable response timeout: no [S8]
- Callable response timeout: no timeout [S8]
- Change history grouping: Workflows · Project configuration · Solution · Data tables · Vector tables · APIM operations · Agents [S6]
- Change visual summary: Visual summary with bar chart showing created/updated/deleted proportions and total count [S6]
- Children under 18: 18 [S3]
- Claims performance: Tray.ai customer case studies, 2024-2026 · 60% · 3x [S1]
- Cli: the Tray CLI brings a real SDLC to AI projects [S14]
- Coes approved assets: Approved connectors, sub-workflows, and agent templates publishable as reusable building blocks [S10]
- Composite change types: Project import · Project rollback [S6]
- Connected applications: yes [S4]
- Connector categories: Popular · All · Marketing · General automation services · Databases · Finance · Digital product design · Human resources · LLMs · Security and compliance [S14]
- Connector count: pre-built connectors · 474 [S14]
- Connector exists: SAP Business One connector [S7]
- Connector sharing prereq: sharing by Tray account email addresses · connector must be deployed [S11]
- Connector timeout: 45 · 120 · 60 [S8]
- Connectors available: Okta + Slack · Salesforce + Slack · Okta + Salesforce · Jira + Slack [S5]
- Credential handling: systems referenced by name as workspace authentications [S5]
- CSV import limit: 1 [S8]
- CSV max columns: 4096 [S8]
- CSV max row size: 8 [S8]
- CSV persistence: 30 [S8]
- CSV reader step payload limit: 1 [S8]
- CSV single call limit: 1 [S8]
- Customer owns output: yes [S4]
- Data mapping engine: yes · yes [S7]
- Data masking: Built-in data masking in workflows [S10]
- Data storage account scope: until workspace deletion [S8]
- Data storage overall limit:  [S8]
- Data storage workflow scope: until workflow deletion [S8]
- Decision record contents: who, when, what was shown, outcome, aftermath [S5]
- Enterprise plan: yes · yes · yes · unlimited · 180 · yes · yes · yes [S2]
- Environment isolation: Environments separated by approval gates requiring sign-off for production [S10]
- Example connectors: Salesforce · Slack · Snowflake · NetSuite · Workday REST · ServiceNow [S14]
- Expiry default: not approved [S5]
- File link persistence: 6 [S8]
- First delivery time: first agent or integration typically in under a week [S1]
- Form builder capabilities: send live calls, inspect input payload, inspect responses, edit payload to force errors [S9]
- Form builder demo app testing: Form Builder demo app for testing connector operations [S9]
- Form trigger payload limit: 1 · 10 [S8]
- Headless prompts: 6 · Tray Headless plugin · Claude Code · Codex [S5]
- Helix: governed runtime for AI-built apps with managed runtime, IT visibility, security, named ownership [S2]
- Helix AI deployment: One-command deployment to managed runtime from Claude Code, Codex, or Cursor [S1]
- Helix app registry: Internal app marketplace with access-based visibility [S1]
- Helix app security: enterprise SSO · managed auth · scoped access [S1]

**Support**
- Advantage plus: 24/7/365 support · enhanced SLAs · dedicated Slack channel · yes [S2]
- Advantage plus included: Team · Enterprise [S2]
- Included plans: all plans · team · enterprise [S2]
- Professional services: co-development · adoption acceleration/training · solution architecture · expert network of certified implementation partners [S2]
- Professional services: launch co-development · adoption acceleration · solution architecture · expert network [S2]
- Suspension email notice: email [S4]
- Tray advantage: business hours support · knowledge base · community forums · Tray Academy · live workshops · yes · yes [S2]
- Tray advantage: all plans · yes · yes · yes · yes · yes [S2]
- Tray advantage plus: 24/7/365 · yes · yes [S2]

77 more facts on the canonical page: https://whats-best.ai/software/workflow-management/tray-ai

## Questions

### Is Tray.ai European?

No. whats-best.ai classifies Tray.ai as Rest of world.

### Where does Tray.ai store data?

The default storage location for customer data is not stated on the vendor’s pages as of 13 Oct 2026. The vendor’s pages mention the US, the EU, United Kingdom and Australia as hosting locations, per [the vendor’s page captured 13 Oct 2026](https://whats-best.ai/evidence/5824).

### Does Tray.ai have a free plan?

Not stated on the vendor’s pages as of 13 Oct 2026.

### What are the best alternatives to Tray.ai?

As of 15 Oct 2026, the panel rates [n8n (3/5)](https://whats-best.ai/software/workflow-management/n8n), [Camunda (2.5/5)](https://whats-best.ai/software/workflow-management/camunda) and [Frends (2.5/5)](https://whats-best.ai/software/workflow-management/frends) highest among the other 16 Workflow Management products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [n8n](https://whats-best.ai/software/workflow-management/n8n) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Tray.ai alternatives](https://whats-best.ai/software/workflow-management/tray-ai/alternatives).

## What this page leaves out

- 32 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 8 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://tray.ai/ (checked 2026-10-13)
- [S2] Pricing page: https://tray.ai/pricing/ (checked 2026-10-13)
- [S3] Privacy policy: https://tray.ai/legal/privacy-policy/ (checked 2026-10-13)
- [S4] Terms of service: https://tray.ai/legal/msa/ (checked 2026-10-13)
- [S5] Process design, forms & approvals — found from sitemap: https://tray.ai/automate/agent-action-approval/ (checked 2026-10-13)
- [S6] Process design, forms & approvals — found from sitemap: https://tray.ai/documentation/platform/enterprise-core/lifecycle-management/project-versioning (checked 2026-10-13)
- [S7] Connectors, API & on-premise reach — found from sitemap: https://tray.ai/connectors/sap-business-one-integrations/ (checked 2026-10-13)
- [S8] Execution, error handling & monitoring — found from sitemap: https://tray.ai/documentation/platform/enterprise-core/logs-debugging/technical-limits (checked 2026-10-13)
- [S9] Execution, error handling & monitoring — found from sitemap: https://tray.ai/documentation/platform/automation-integration/building-workflows/configuring-steps/error-handling (checked 2026-10-13)
- [S10] Governance, credentials & audit trail — found from sitemap: https://tray.ai/platform/governance-trust/ (checked 2026-10-13)
- [S11] Governance, credentials & audit trail — found from sitemap: https://tray.ai/documentation/developer/platform-apis/permissions (checked 2026-10-13)
- [S12] Hosting options & portability — found from sitemap: https://tray.ai/documentation/platform/connectivity/on-premise-systems/on-prem-options (checked 2026-10-13)
- [S13] Hosting options & portability — found from sitemap: https://tray.ai/documentation/platform/enterprise-core/lifecycle-management/import-export (checked 2026-10-01)
- [S14] Connectors, API & on-premise reach — found from sitemap: https://tray.ai/connectors/all-integrations/ (checked 2026-10-13)

---

Cite as: whats-best.ai, "Tray.ai — Workflow Management", AI panel analysis, as of 2026-10-20. https://whats-best.ai/software/workflow-management/tray-ai

Corrections: https://whats-best.ai/correct/565?target=page