Process Street
Process Street is a compliance operations platform that turns written policies into AI-enforced workflows. Its Cora agent monitors execution, flags risks and builds a timestamped audit trail across regulated finance, healthcare, manufacturing and property teams.
What is Process Street?
Process Street is a cloud platform that its publisher, Process Street, Inc. of San Francisco, calls a compliance operations platform. The framing is narrower than generic workflow software: the aim is not only to run a process, but to be able to prove afterwards that it was run correctly.
The product is built from three parts. Docs holds policies and standard operating procedures under version control and governance, with ISO 9001, SOC 2, SOX and FDA programmes named as targets. Ops executes those policies as workflows, from simple recurring chores to business-critical procedures. Cora, the AI compliance agent, watches what actually happens: it tracks task completion, enforces SLAs, detects missed steps, raises exception alerts on control failures and high-risk trends, compares live runs against the underlying SOP, and flags steps that have drifted or gone stale.
Around these sit five platform layers, namely Process AI, Automations, Analytics, Apps and Integrations. Process AI generates a workflow in seconds from a short instruction or an uploaded document, complete with due dates, assignments, approvals, stop tasks and variables. AI-Tasks then work inside a run, reading uploaded documents, transforming data, analysing sentiment or translating content using values carried over from earlier steps.
Day to day, teams handle Workflows, Tasks, Forms, Pages and Data Sets. Conditional logic, enforced task order, dynamic due dates, task-level permissions, role assignments, scheduled runs and revision restore are all standard. Every action lands in a timestamped, user-linked log that can be exported for an auditor, which is the feature the whole positioning rests on.
Reach is broad: iOS and Android apps, Slack including Enterprise Grid, Microsoft Teams, a public API, native webhooks, and connectors for Zapier, Make, Power Automate and Tray.io. The company reports more than 3,000 customer organisations, over a million users and in excess of 12 million workflow runs, citing Salesforce, Colliers and the Government of Canada among its references.
The obvious caveat is commercial rather than technical: no price is published. Startup, Pro and Enterprise all route to a sales conversation, and the only self-service entry point is a 14-day Pro trial.
What it does
- Turn a written policy or SOP into a structured, auditable workflow in one click
- Generate a complete workflow from a short instruction or an uploaded document using AI
- Enforce task order, approvals, due dates and role assignments on every run
- Monitor execution in real time and detect missed or delayed steps automatically
- Flag compliance risks and control failures before they surface as audit findings
- Produce timestamped, user-linked audit records and export them for regulators
- Connect workflows to Salesforce, Slack, Jira and thousands of apps via API, webhooks or Zapier
When to use Process Street / When not to
A quick filter to help you decide if Process Street is the right fit.
When to use Process Street
- Operations and compliance managers in regulated industries who must prove every process step to an auditor
- Quality and regulatory affairs teams running ISO 9001, SOC 2, SOX or FDA programmes
- HR and people operations teams standardising employee onboarding across a large headcount
- Customer success teams repeating a structured client onboarding for every new account
- Property, facilities and manufacturing managers who need identical checklists executed across many sites
When not to use Process Street
- Buyers who need a published price before speaking to sales, since all three plans are quote-only
- Individuals and hobbyists, as the service is expressly intended for use by organisations
- Teams looking for a permanent free tier rather than a 14-day trial of the Pro plan
- Non-English-speaking teams, because no interface language other than English is advertised
- Small teams needing heavy API usage on entry pricing, capped at 50 calls per month on Startup
How to use Process Street
A typical end-to-end flow, from setup to results.
- Create an account at app.process.st/sign-up; every new account opens on a 14-day Pro trial with no credit card required
- Choose a starting point: take a ready-made template from the public library, write the workflow yourself, or let AI build it
- For the AI route, open the Generate with AI screen and supply a short instruction or upload an existing policy document
- Review the generated workflow and adjust its tasks, form fields, conditional logic and rich media
- Add controls where they matter: approvals, enforced task order, dynamic due dates and stop tasks for dependencies
- Assign work to named people or to roles such as HR manager, so each run resolves to the right person automatically
- Set permissions per folder, template or task, and invite outside collaborators as guests rather than paid members
- Connect your stack through native automations, the public API, webhooks, or the Zapier, Make and Power Automate connectors
- Run the workflow, then follow progress, bottlenecks and missed steps from the analytics dashboard and Cora's monitoring
- Export timestamped audit records and compliance reports when an auditor asks for evidence
Pros & Cons
Pros
- Covers policy, execution and audit evidence in one product instead of stitching three tools together
- Serious and verifiable security posture: SOC 2 Type II, ISO 27001, HIPAA with a BAA on request, CCPA and AWS CIS
- Data residency chosen by the customer across US, EU, UK, Canada, Australia and UAE regions, with private-cloud VPC deployment available
- Unambiguous AI stance: customer data is never used to train models and workflow data stays confined to its own run
- AI can build a working workflow straight from an existing policy document, which shortens migration considerably
- Broad integration surface, from no-code connectors to a documented public API and native webhooks
- Genuine mobile and chat coverage, with maintained iOS, Android, Slack and Microsoft Teams apps
Cons
- No public pricing whatsoever: Startup, Pro and Enterprise all route to a sales conversation
- No permanent free plan, only a 14-day trial of the Pro tier
- The discounted Startup plan is restricted to companies with fewer than 15 employees and under $2 million in revenue
- Entry-level quotas are tight, at 50 API calls and 100 automation actions per month on Startup
- Single sign-on, SCIM, HIPAA, data residency, private cloud and custom reports are reserved for higher tiers
- Fees are non-refundable and billed in US dollars only
- No interface languages are advertised, and the site publishes two different postal addresses
Pricing & Plans
There is no permanent free plan and no published price point. The pricing page lists three tiers, Startup, Pro and Enterprise, and each one directs the visitor to a sales conversation rather than to a figure, so no entry cost can be stated. Free access is limited to a 14-day trial of the Pro plan, opened on every new account without a credit card; a purchase is required to continue once it expires. All fees are charged in US dollars and are described in the terms as non-refundable. Invoicing is offered on the Pro and Enterprise plans, registered non-profit organisations may request a discount, and the platform can also be bought through AWS Marketplace.
- 5 users
- 10 guests
- 5
- 000 Data Set records
- unlimited storage capped at 5 MB per file
- 10 automation apps
- 100 automation actions per month and 50 public API calls per month. Price on request.
- a custom number of users and guests
- 10
- 000 Data Set records
- 100 MB per file
- all automation apps
- custom automation and API volumes
- custom reports
- data sync and BI integration
- custom Data Set and file limits
- unlimited public API access
- data residency and private cloud in the customer's own VPC
- priority support
- fully-managed workflows
- custom integrations
- bulk document import
- process consulting and personalised team training. Price on request.
- unlimited workflows
- tasks
- forms and pages
- encryption in transit and at rest
- role-based access and permissions
- email and chat support
- and the Zapier
- Make
Data, GDPR & hosting
A consolidated view of how Process Street handles your data.
GDPR overview
Compliance is claimed explicitly and documented in some depth. A dedicated GDPR statement, last updated on 1 April 2024, names a Data Protection Officer, Cameron McKay, reachable at privacy@process.st. A data processing addendum supplements the terms and is issued on request to an organisation's administrator, with Standard Contractual Clauses in Exhibit B. The privacy policy, effective 11 August 2026, sets out the EEA legal bases and the full set of data subject rights. Process Street is certified under the EU-U.S. Data Privacy Framework, its UK extension and the Swiss-U.S. framework, with JAMS as dispute body, and publishes its subprocessors in a Trust Center. One gap deserves mention: no Article 27 EU representative is named anywhere on the site.
Who owns the data?
Customers supply the Content they store and Process Street does not claim ownership of it. Where the service is bought by an organisation, that organisation rather than the individual user controls the information processed and acts as account administrator: it can reset passwords, restrict, suspend or terminate access, and retain account data. Process Street states that its staff will not view customer Content except to maintain, provide or improve the service, to resolve a support request, or to comply with law. Data read or created inside a workflow is confined to that workflow instance and cannot be reached from elsewhere, even within the same organisation.
Reuse rights
Inside their own account, customers may reuse, edit, export and share what they store without asking permission: workflow runs, exportable audit records and compliance reports exist for exactly that purpose. Control is a matter of settings rather than licence, with administrators defining who reaches each folder, template, page or task, and outside collaborators invited as guests. Process Street reuses the data on its own account only to operate, maintain, secure and improve the service, to produce aggregated non-identifying metrics, and to satisfy legal obligations. It states plainly that customer data is never used to train AI models and that its AI providers are not permitted to do so either.
Data retention & training
Hosting summary
Process Street runs on Amazon Web Services, using RDS and S3, and stores and processes data in the United States by default; the privacy policy confirms that personal data is primarily held in the US. Customers who need another jurisdiction can select data residency in further AWS regions: the security page lists the EU, UK, Canada, Australia and the UAE, while the compliance page names the US, UK, Canada, EU and UAE. Enterprise customers can go further and deploy a private cloud inside their own VPC. The database is replicated synchronously, and regular snapshots are moved to a separate data centre so service can be restored even if an entire Amazon region fails. Data centres are SSAE 16 audited. Web connections use TLS 1.2 or above, with encryption applied both in transit and at rest. Where personal data leaves the EEA, the UK or Switzerland, transfers rely on the company's Data Privacy Framework certification or on Standard Contractual Clauses.
Where Process Street works
Country-level availability.
Not available in
Things to keep in mind
Risks and trade-offs to weigh before adopting Process Street.
- Quote-only pricing makes budgeting impossible in advance and hands the pace of the decision to the vendor's sales team
- Automated enforcement can breed compliance theatre, with staff ticking boxes to satisfy the workflow rather than thinking about the underlying risk
- Delegating risk detection to Cora may gradually dull the professional judgement of the compliance staff who should be exercising it
- Detailed timestamped and user-linked action logs are a surveillance capability as much as an audit trail, and employees may not realise how closely their work is recorded
- An employer that owns your email domain can assert administrative control over an account created with a work address, then access and retain what it holds
- The mandatory individual arbitration clause and class-action waiver can only be escaped by posting a physical opt-out letter within 30 days of accepting the terms
- The privacy policy also covers a separate Slack and Teams assistant called Dash, whose data collection is considerably broader than the workflow product itself
Setup & Integrations
Technical difficulty
Low for a first workflow, higher for an enterprise rollout. The product is no-code: you sign up online, start a 14-day Pro trial without a card, then either pick a template, write the workflow yourself, or have AI generate one in seconds from an instruction or an uploaded document. No-code connectors cover Zapier, Make and Power Automate. The real effort comes later, with SAML single sign-on, SCIM provisioning, Active Directory, data residency, private cloud and granular permissions. Paid setup services, bulk document import and team training are available on the higher plans.
Deployment
Apps stores
Integrations
Behind Process Street
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Process Street.
Frequently asked questions
How much does Process Street cost?
Is there a free plan or a free trial?
Who qualifies for the Startup plan?
Is my data used to train AI models?
Which security certifications does Process Street hold?
Where is my data hosted, and can I choose the region?
Does Process Street offer an API and mobile apps?
Can I obtain a DPA and request deletion of my data?
Should you pick Process Street?
Process Street has done something unusual for a workflow tool: it has picked a side. Rather than competing on flexibility, it competes on evidence, and every part of the product bends towards showing an auditor that a procedure was actually followed. Docs governs the policy, Ops executes it, and Cora watches the execution and writes the record. For an operations or compliance lead in a regulated business, that closed loop is genuinely hard to assemble from separate tools.
The supporting substance is there. SOC 2 Type II and ISO 27001 certification, HIPAA with a business associate agreement on request, a named data protection officer, a data processing addendum, published subprocessors, and customer-chosen data residency across six regions, including private cloud inside your own VPC, are commitments few tools in this category match. The AI position is equally clear: customer data is never used to train models, and what a workflow reads stays inside that workflow.
The friction is commercial. Not one price appears anywhere on the site. Startup, Pro and Enterprise all end at a sales conversation, and the only way in without talking to someone is a 14-day Pro trial. There is no permanent free tier, entry quotas are modest, and several of the features that justify the platform, such as single sign-on, HIPAA and data residency, live on higher plans. Two different postal addresses on the site, and terms last updated in March 2024 against a privacy policy dated August 2026, are small untidinesses worth noting.
The verdict is straightforward. If you need to prove execution rather than merely organise it, and you are willing to run a procurement conversation, Process Street is a strong candidate. If you want to enter a card and see a price first, look elsewhere.
- Choosing a selection results in a full page refresh.
- Opens in a new window.