Best Zendesk Security and Compliance Apps (2026): 15 Marketplace Apps Scored

The 15 apps at a glance

Averages are computed from the catalog's per-star counts. Prices and dates were read on each listing and vendor page on October 29 and 30, 2026.

How we scored them

From the 80 apps in the Security, Risk and Compliance category we kept third-party apps that redact data, answer privacy requests, delete or retain data, or control who sees it. We left out identity-verification apps, IT and security-operations connectors, bundles, and apps ranked in our other Zendesk roundups. Each app is scored 0 to 2 on five criteria.

Ties are broken by review count, then installs, then name, and the order inside a tier says nothing about quality. Free apps and fully priced plan lists score 2 on price; a price that only exists inside a vendor bundle scores 1. Works in the ticket scores 2 only for apps in the ticket sidebar or editor; nav bar, user sidebar and background apps score 1. Maintained uses each listing's "Last updated" date.

What Zendesk does without an app

Zendesk isn't ranked, but it sets the baseline. Admins and agents in custom roles with permission can redact text and attachments in ticket comments. Zendesk's article lists the limits: "Bulk redaction is not supported," a maximum of 75 attachments can be redacted at once, entire tickets can't be redacted, and redaction can't be reversed. It also says to redact before merging, because redacting the original after a merge doesn't touch the merged ticket (our guide to merging tickets in Zendesk covers what a merge copies).

For retention, Zendesk's ticket deletion schedules delete only archived tickets, "tickets that have been closed for more than 120 days," and only one schedule can be active unless you buy the Advanced Data Privacy and Protection add-on, which raises that to 10 and adds automatic redaction triggers. We've written up what deletion schedules delete and what the ADPP add-on includes. The apps below fill the gaps: bulk work, open tickets, users and organizations, access-request exports, and rules about who sees what.

Top tier, 10 of 10: GDPR Compliance

1. GDPR Compliance: the full privacy-request toolkit, 10/10

GrowthDot's GDPR Compliance covers the whole request cycle from one app: retrieve and export a person's data for an access request, anonymize personal details while keeping the ticket for reporting, delete users, organizations and tickets in bulk, remove attachments by file type, and unmerge tickets. Agents can run it from the ticket sidebar, the user profile or saved lists, per GrowthDot's help article. It has 54 reviews averaging 4.87 and sits in Zendesk's Featured Apps collection. Jim Uomini wrote on its listing, about a year ago: "GDPR Compliance is quite reasonably priced considering how much it offers."

Scores: reviews 2, price 2, works in the ticket 2, setup 2, maintained 2.

The listing says "Free integration," and the fees are on GrowthDot's page: Standard at $50 per subdomain a month ($41.70 billed yearly) and Premium at $65 ($54.20 yearly), which adds automations and scheduled processes. Both have a 7-day trial, and attachment deletion includes 3 GB free, then a $89 one-time bundle. Last updated August 7, 2026.

Before a large run, note that GrowthDot's article on what gets anonymized says "the anonymization process will remove all ticket attachments," so export anything you must keep first.

Second tier, 8 of 10: four apps

SendSafely, Restrict CC and Advance Field Management score 0 on reviews and full marks elsewhere. Search & Destroy scores 1 on reviews (36, short of 50) and 1 on working in the ticket, because it runs from the nav bar.

2. SendSafely: encrypted files in and out of the ticket, 8/10

SendSafely lets agents send and receive encrypted files and messages from the Agent Workspace sidebar, and lets customers upload sensitive files through a portal widget, with files up to 10 GB. The listing says files are encrypted before upload and "Sensitive data never touches Zendesk servers." Miguel Contreras wrote on its listing, more than a year ago: "We needed a solution to securely receive large files from customers, as Zendesk's 50MB limit was insufficient."

Scores: reviews 0, price 2, works in the ticket 2, setup 2, maintained 2.

Its 64 ratings average 3.98 from the catalog's star counts (39 five-star, 8 one-star), 0.02 short of a review point. The app installs free, but its install notes require a SendSafely Business or Enterprise plan after the 2-week trial, and the pricing page lists Business at $232 a month for 8 users, billed annually. Last updated August 6, 2026.

3. GDPR: Search & Destroy: deletion by saved search, 8/10

Sparkly's GDPR: Search & Destroy deletes tickets and users from Zendesk search queries, runs those queries on a schedule, and empties the soft-deleted bins. It runs from the nav bar in the background with no external server. It has 36 reviews averaging 4.94. Julian wrote on its listing almost four years ago: "What I particularly enjoy is that the app does not store any data: our data stays within Zendesk."

Scores: reviews 1, price 2, works in the ticket 1, setup 2, maintained 2.

The listing shows Professional at $99 a month for up to 75,000 deletions a day and Enterprise at $249 for up to 250,000 a day, adding deletion by CSV, each after a 7-day trial. You pay for how fast history has to go. Last updated November 12, 2025, inside our 12-month window.

4. Restrict CC: stops data going to the wrong person, 8/10

Restrict CC from CX Cloud Solutions controls three things on the ticket: who can add CCs or followers, who can be added (for example, only people on the requester's domain or yours), and who can remove a CC someone else added. You choose whether it blocks a disallowed address or only warns the agent. The listing says the app runs in the agent interface and sends customer data nowhere else.

Scores: reviews 0, price 2, works in the ticket 2, setup 2, maintained 2.

It costs $2 per agent per month after a 14-day trial, and the vendor suggests installing it only for the agents who need it, which also caps the bill. Last updated March 30, 2026.

5. Advance Field Management: who sees and edits each field, 8/10

Other Avenue's Advance Field Management sets per-field rules by Zendesk group: show a field to everyone or to chosen groups, make it read-only for some, restrict sensitive dropdown values, and apply rules only to certain forms, brands or statuses. The listing says no ticket data goes to Other Avenue.

Scores: reviews 0, price 2, works in the ticket 2, setup 2, maintained 2.

It costs $10 per agent per month after a 15-day trial, and the setup notes say to install it for every agent, so the bill covers every agent. It was published in September 2026 and last updated October 9, 2026. Compare it with what Zendesk roles and permissions already cover before paying per seat.

Third tier, 7 of 10: eight apps

All eight score 0 on reviews and 1 on working in the ticket: six run from the nav bar, CallTutor in the background and Volvox in the user sidebar.

6. PCI PHI Call Redaction-Transcription: card numbers out of call recordings, 7/10

CallTutor.com's app transcribes Zendesk Talk recordings and removes spoken card numbers, CVV codes and expiry dates, plus health information on request, in English only. It swaps the recording on the ticket for the redacted one and comments on whether anything was redacted. Doug Breaker wrote on the listing almost two years ago: "The transcription happens quickly, usually within minutes of a call ending." A newer review from John Klein, posted the day before we read the listing, says "It works on redacting recordings, but we can't get it to redact transcripts yet."

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

It costs $9 per PCI-handling Talk agent per month, with support-only agents free and no minimum. Setup is a sign-up on CallTutor's site and an OAuth connection. Last updated October 5, 2026.

7. Purge My Zendesk: clear an account out, 7/10

GrowthDot's Purge My Zendesk permanently deletes users, tickets and organizations in bulk, aimed at teams leaving Zendesk, closing a brand or starting over. Only the account owner can run it, which one reviewer called "not so usable"; GrowthDot replied that the restriction exists to prevent data loss. An anonymous reviewer wrote about a year ago: "Ultimately, it took about 1-2hrs for it to fully remove all 120k tickets and 12k users."

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

GrowthDot's page prices it at $19.90 as a one-time payment, free on sandbox accounts. Last updated March 10, 2026.

8. Redacto: text and attachment redaction with backups, 7/10

ZENCLAB's Redacto finds tickets by status, tags, dates and attachment size, downloads attachments as a ZIP before redacting them, and redacts text in comments and subjects by keyword, regex or presets for emails and phone numbers, with a preview first. Recurring redaction tasks can run daily, weekly or monthly.

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

It costs $9.99 a month per account, the cheapest paid redaction app here. One of its 2 five-star reviews, from 11 months ago, says the team "responds very quickly." Last updated August 1, 2026.

9. GDPR Personal data extraction: an access request in one click, 7/10

Volvox's app adds a button to the user sidebar that pulls a person's profile and all their ticket details into a printable format, for answering a data access request. It's free, has more than 330 installs, and was last updated March 24, 2026.

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

Its single review, a four-star "great app," is more than eight years old, so test it on a sandbox user with a long history first.

10. Ticket Deleter: old tickets out on a filter, 7/10

Datafox Labs' Ticket Deleter filters solved and closed tickets by date range and tags and deletes them. By default it soft-deletes, which leaves a 30-day window to restore; a newer setting deletes permanently. Justine Gauthier wrote on the listing more than two years ago that it is "functional, easy to install and use, and the support is very responsive."

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

It costs $3 per agent per month after a 3-day trial. Restrict it to admins at install so you pay only for their seats. Last updated April 25, 2026.

11. Attachment Redaction Tool: free bulk attachment cleanup, 7/10

MotoPress' Attachment Redaction Tool searches closed tickets in a date range, lists every attachment it finds, and redacts them one at a time or all at once. It needs no credentials or API keys, and the listing recommends searching a week or a month at a time.

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

It's free and was last updated March 19, 2026.

12. Data Custodian: search, redact and delete with an evidence trail, 7/10

Data Custodian is from Help Center Doctor, the apps of independent developer Pablo Simón. It searches tickets, people and organizations, exports to CSV, Excel or JSON, makes bulk changes in batches of 100 with undo, and on Business and up deletes, redacts with pattern packs for cards, IBANs and national IDs, anonymizes a person, and runs retention rules after a dry run. Every action records who, when, the criteria, counts and IDs, and destructive actions are admin-only.

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

The listing shows four plans per account: Free, Pro at $99 a month, Business at $199 and Enterprise at $349, each paid plan with a 14-day trial. It was published in September 2026 and last updated October 6, 2026.

13. Security Audit & Evidence: an access review of the account itself, 7/10

Also from Help Center Doctor, Security Audit & Evidence checks the account against 40 controls: two-factor enrollment, session timeouts, IP restrictions, admin counts, unauthenticated webhooks, API tokens and email authentication. It produces an evidence pack with SHA-256 hashes, and the listing is plain about limits: it "does not certify compliance with any framework" and "never changes a setting."

Scores: reviews 0, price 2, works in the ticket 1, setup 2, maintained 2.

The free plan shows the score and 12 authentication and access controls; Pro at $149 a month adds all 40 controls and the evidence pack, and Business at $249 adds quarterly access-review packs with reviewer sign-off. Last updated October 6, 2026. Our Zendesk security checklist covers the same settings by hand.

Lower tiers: Knots and Nightfall

14. AI Ticket Redaction by Knots: redaction when a ticket is solved, 6/10

Knots' AI Ticket Redaction scans a ticket's content and attachments when it's marked solved and permanently redacts what your rules name: personal data, card numbers, IBANs, IDs and serial numbers, including text read by OCR from PDFs. It runs in the background through a Knots account, configured from the nav bar.

Scores: reviews 0, price 1, works in the ticket 1, setup 2, maintained 2.

The listing says "Free integration" with a 14-day trial, but Knots' pricing page doesn't price the app on its own: Essentials at $269 a month includes 3 Knots apps, and an additional app costs $100. That bundle price is the incentive in plain view, since the free install is the way into a suite. Last updated January 13, 2026, with no reviews.

15. Nightfall DLP: enterprise data-loss prevention, 4/10

Nightfall AI's app scans tickets, comments and attachments with machine-learning detectors and can redact, delete an attachment or make a comment private when it finds sensitive data. Its data-practices section says ticket content is sent to Nightfall's cloud for detection.

Scores: reviews 0, price 0, works in the ticket 1, setup 1, maintained 2.

The listing's install instructions say to book a meeting with Nightfall's team, and its pricing page shows per-user, per-year plans with no amounts and a "Contact sales" route. Last updated April 22, 2026.

Comparing the four jobs

Restrict CC and Advance Field Management act for every agent who opens a ticket, so they charge per agent; admin tools mostly charge per account.

What a privacy app changes for an AI agent on the same tickets

When a Zendesk account with redaction or retention apps reaches us, we check what they change for Macha's agent. Its tools read the ticket, comments, custom fields, past tickets and attachments (images, PDFs, documents), and write status, priority, fields, tags, internal notes and public replies.

We check four things. First, redaction and anonymization: an attachment an app has removed, or a comment it has rewritten, is gone for the agent too, so instructions can't depend on reading a file that a rule deletes on solve. Second, retention: the AI Knowledge Builder builds a knowledge base from past tickets and simulations replay them, so a deletion app that clears last year's tickets shrinks both, and we run them before an aggressive schedule starts. Third, access rules: Restrict CC and Advance Field Management say they act in the agent interface, and neither listing says it governs API updates, so we set the agent's own instructions and field writes around the same rules (see custom fields and AI agents). Fourth, safe mode: we replay past tickets in a simulation and confirm whether replies post as internal notes or public before anything runs on its own.

Where AI fits

Macha runs AI agents inside the Zendesk account you already have, set up and monitored by the Macha team. It suits teams on Zendesk with redaction or retention rules who want routine tickets answered inside those rules. Pricing starts at $299/month for 750 tickets, with a trial of $50 of free usage (about 125 tickets), no credit card, no time limit.

Which one fits your situation?

• You get access and erasure requests every month: GDPR Compliance, or Data Custodian if you want dry runs and stored evidence.
• You get a handful of access requests a year: GDPR Personal data extraction, which is free.
• Customers send IDs, logs or contracts: SendSafely, so the files never sit in Zendesk.
• Your policy says to delete tickets after a set time: Zendesk's deletion schedules first, then Search & Destroy or Ticket Deleter for tickets the schedules don't reach.
• You take card payments by phone: PCI PHI Call Redaction-Transcription.
• Old attachments are the risk: Redacto, or Attachment Redaction Tool for a free one-off sweep.
• Wrong CCs or wide field access are the risk: Restrict CC and Advance Field Management.
• An auditor wants proof about the account: Security Audit & Evidence.
• You're leaving Zendesk or closing a brand: Purge My Zendesk.
• You already pay for Knots or Nightfall: their redaction apps, which ride on those contracts.

FAQs

What are the best Zendesk security and compliance apps?

On our rubric, GrowthDot's GDPR Compliance scores 10 of 10, and four apps share the second tier on 8.

Can Zendesk redact tickets without an app?

Yes, one comment or attachment at a time, and it can't be reversed. The Advanced Data Privacy and Protection add-on adds redaction suggestions and automatic redaction triggers.

How do I delete old tickets in Zendesk automatically?

Zendesk's deletion schedules delete tickets closed more than 120 days ago. GDPR: Search & Destroy and Ticket Deleter delete by search or filter, including younger tickets.

Do privacy apps affect AI agents in Zendesk?

Yes. Redaction removes content the agent would otherwise read, and deletion shrinks the ticket history used to build knowledge and run simulations. Check both before the agent goes live.

<div class="docs-callout"><div><p class="docs-callout-title">Are you listed here?</p><p class="docs-callout-body">Partners and app makers can send corrections with a public source to [email protected]. We fix facts within a week. Scores follow the rubric above, not requests.</p></div></div>

How we researched this

On October 29, 2026 we pulled the Security, Risk and Compliance category from the Zendesk Marketplace catalog (1,812 apps): 80 apps from 70 vendors. We read all 15 kept listings on October 29 and 30, and we used only plans the catalog marks as active, checking vendor pricing pages where a listing points to outside fees. Native Zendesk behavior comes from Zendesk's help center. We didn't install any app or contact any vendor.

Prices are shown in US dollars; prices published in other currencies were converted at European Central Bank reference rates of October 29, 2026.

Disclosure: Macha makes AI agents that run inside help desks. Nobody paid to be listed, and Macha is not ranked here.