The Zendesk evaluation that ends in the security review
Your team needs a deployment it can operate and an approval path it can inspect. Start with those requirements, then compare Zendesk hosting and workflow options with the work required to run Latch yourself.
Follow one exception from incoming ticket to approval and external result. Latch offers self-hosted ticketing, custom action providers and source code on Enterprise under a commercial source licence. Zendesk also has native approvals; evaluate their fit before replacing a working queue.
what the review actually asks
Zendesk cloud, in a region you select on higher plans.
Your servers, your network, your backup policy.
A vendor-hosted service, under the AI terms you accept.
A configured endpoint, including a model your team operates.
Native approval events; downstream evidence depends on the configured action flow.
Action request, review transitions and the result returned by the provider.
For a high-volume consumer queue, Zendesk is usually the right answer
Zendesk has spent close to two decades building customer-experience tooling, and it shows in the places that matter for support at consumer scale. Latch does not compete on these and is not trying to.
Compare the tools around the queue before planning a replacement. Read Olark vs Zendesk for website chat, Assembled vs Zendesk WFM for workforce planning, and Calabrio vs Zendesk for contact-centre quality and workforce tooling.
Live chat, messaging, social, and telephony arrive in one suite with routing and staffing tools built for them. Latch covers email, web forms, and API intake. There is no Latch voice product.
Review the marketplace apps your queue already depends on. A replacement Latch integration is code your team implements and operates; include that work in the migration decision.
A mature help center with community forums, article localisation, and deflection reporting. Latch is a queue and a control layer. It does not try to be your knowledge base.
Operator familiarity, documentation and partner support are part of the evaluation. Compare the training and operating work of the existing queue with the proposed replacement.
If your queue is consumer support, your volume is high, and no rule prevents ticket data from sitting in a vendor cloud, buy Zendesk. The rest of this page is for the teams where one of those three conditions does not hold.
Two differences that survive the feature checklist
One is the deployment boundary. The other is how a recorded approval is coupled to the external action and its returned evidence.
Cloud only means cloud only
Zendesk offers regional hosting on higher plans, which satisfies many data-residency policies. It does not satisfy a policy that says ticket content cannot leave your network, and it cannot run on a disconnected network. No plan or add-on turns a hosted service into software deployed in your environment.
Run the application on infrastructure your team operates. Review configured identity, model, email and provider services alongside the database and durable storage. See the deployment controls.
Approval on the ticket is not the same as control of the external action
Zendesk now supports approval requests inside tickets. The decision is tracked, a pending request blocks ticket closure, and an individual approver cannot be the requester, assignee, or creator of the approval request. Zendesk action flows can also call external systems. Zendesk has announced wait-for-response and sequential approval action flows for accounts with access to those capabilities. Teams should inspect the complete path from decision to external effect rather than treating the approval request alone as execution proof.
Sensitive work runs as a plugin action from inside the ticket, behind a role check and an approval step. The plugin action does not execute until the decision exists, and the result written back includes what the external system said. Maker-checker review blocks the action requester from approving or executing that request. The authorized reviewer may also execute it.
Read the current Zendesk approval workflow comparisonZendesk and Latch, side by side
The rows are ordered by what usually decides the evaluation, not by what flatters us. The last four rows go to Zendesk.
| Capability | ZendeskCloud suite | Latch WorkflowEnterprise source access |
|---|---|---|
deployment in your environment Runs on hardware you control | —Cloud only. Cannot be deployed in your environment. | ✓In your environment, private cloud, or your own VMs. |
Disconnected deployment Identity, email, model and provider dependencies | —Access to the hosted service is required. | ≈Evaluate dependencies and the intended deployment topology. |
Data residency Where ticket content physically sits | ≈Regional hosting on higher plans, on Zendesk infrastructure. | ✓Wherever you deploy it, under your own controls. |
Approval enforcement on downstream actions The action is blocked until a decision is recorded | ✓Eligible action flows can wait for approval and continue based on the decision. | ✓A configured maker-checker action requires approval before separate execution. |
Independent approval identity Who is excluded from approving the request | ✓An individual approver cannot be the requester, assignee, or approval-request creator. | ✓The action requester cannot approve or execute their own request. |
Audit evidence of the external result What Stripe or the ERP actually returned | ≈Action flows can call external systems; retained result evidence depends on the configured flow and action. | ✓Request, decision transitions and returned execution outcome on the ticket. |
Execution against external systems How an action reaches Stripe, the ERP, or an internal API | ≈Action flows support connected systems, custom actions, and custom code. | ✓Plugins run server-side behind role, policy, and approval checks. |
Model deployment choice Where inference runs and what data it receives | ≈Review the configured AI service, terms and data flow. | ✓Evaluate a configured model endpoint, including one your team operates. |
Per-agent pricing Whether cost tracks headcount | ≈Priced per agent, per month, per plan tier. | ✓Flat tiers by user band. No per-agent seat charge. |
Live chat, messaging, and voice Real-time consumer channels | ✓Mature chat, messaging, and telephony in one suite. | —Email, web form, and API intake. No voice product. |
App marketplace breadth Prebuilt integrations you install rather than write | ✓Evaluate marketplace coverage for your current workflow. | ≈SDK and plugins. Integrations are written, not installed. |
Help center and self-service content Knowledge base, community, localisation | ✓Full help center with community forums and translations. | —Not a knowledge base product. Pairs with the one you have. |
Hiring and operator familiarity How long a new agent takes to become useful | ✓Established product with training and hiring familiarity. | ≈Familiar queue model, but the approval steps are new to learn. |
Approval capabilities checked against official Zendesk documentation on October 3, 2026. Other suite rows describe broad product fit and require account-specific verification. The approval rows reflect Zendesk's current approval requests, action flows, and waiting and sequential workflows. Zendesk ships changes often. Check the current plan pages before a decision rests on a row. Latch pricing is on the pricing page. The same comparison against Jira Service Management covers the ITSM and issue-tracking side of the question.
Choose model endpoints alongside the deployment
A model endpoint your team operates can support your inference requirements. Document its data flow, credentials and recovery plan, along with email and provider dependencies. Self-hosting is the start of that review, not proof that all traffic stays local.
Operators review suggestions and decide which actions to request. Configured permission and approval checks govern execution. Read how ticket routing and triage work.
Move one queue first, not the whole help desk
A full cutover on day one is how migrations fail. The queue with the strongest case for moving is usually the smallest: payment exceptions, vendor changes, or whichever back-office workflow currently runs half in Zendesk and half in Slack.
Export the full history
The Zendesk API returns tickets, comments, users, organizations, custom fields, tags, and attachments. Pull the whole history rather than a date window. Reconstructing an archive later costs more than storing it now.
Map the structures that survive
Groups become queues, ticket forms become ticket types, macros become templates, and SLA policies map across. Three things do not survive unchanged: marketplace apps, chat transcripts, and help-center articles. Decide where each of those lands before the import runs.
Run one queue in parallel
Point the intake address for a single workflow at Latch and leave everything else on Zendesk. Add the approval step on the action that needed one all along. The team compares the two on real work rather than on a demo dataset.
Cut over per queue, or do not
Move the next queue when the first one is boring. Keeping Zendesk for consumer chat while the regulated back office runs on Latch is a legitimate end state, not a half-finished migration. Escalation policies and handoffs work across the two.
If your volume is chat and voice, if your workflows depend on marketplace apps nobody wants to rewrite, and if no policy restricts where ticket data sits, a migration will cost more than it returns. Say no to it. The teams that gain from moving are the ones already paying for the gap in another currency: manual approval chains, evidence assembled by hand before an audit, or a compliance answer they cannot give.
Open source ticketing alternative
What Enterprise source access means, which rights depend on the agreement, and how to assess a maintained application change.
See open source ticketing alternativePlugins and integrations
How an action reaches Stripe, an ERP, or an internal API from inside the ticket, and what the plugin writes back.
See pluginsOperations teams
Queue design, escalation policy, and SLA management for the teams running exceptions rather than consumer support.
See the operations pathHonest comparison library
Olark, Assembled, and Calabrio are often searched against Zendesk even when they solve a different layer of the support operation.
See the comparisonsQuestions teams ask before they switch
The questions that come up in the second meeting, once the feature comparison is done and the migration is real.
Can Zendesk run on our infrastructure with source access?
Zendesk is a hosted service. Compare its available regional-hosting options with your actual residency requirements. Latch offers self-hosted deployment and Enterprise source code under a commercial source licence; operating and contractual responsibilities still need review.
Does Zendesk have approval workflows?
Yes. Zendesk supports ticket approval requests and eligible action flows that wait for a response, continue based on the decision and support sequential approvals. Check account eligibility and the configured flow before deciding that migration is necessary.
Can we keep Zendesk and use Latch for a separate queue?
Yes. Evaluate a separate Latch workflow for back-office exceptions while existing support intake stays in Zendesk. Define ownership, handoffs and duplicate-prevention rules. This is a deployment pattern to test, not an automatic integration.
What does migration involve?
Inventory tickets, comments, users, fields, attachments and marketplace dependencies. Agree field mapping and preservation rules, then test an import and one queue in parallel. Do not assume every macro or app has a direct Latch equivalent.
Is Latch cheaper?
Compare the current pricing pages and total operating cost. Latch offers tiers by user band and Enterprise deployment by agreement. Include infrastructure, backups, upgrades and custom integration maintenance in a self-hosting estimate.
Do we lose the Zendesk app marketplace?
A Latch plugin is integration code your team operates. Assess each app dependency and the work needed to replace it. Zendesk marketplace coverage can be a strong reason to keep the existing support workflow.
Can model inference stay in our environment?
Evaluate a model endpoint you operate alongside the deployment. Inspect its data flow and availability. Choosing self-hosting alone does not guarantee that email, identity, plugins or configured external models stay inside the same network.
See the queue before you plan a migration
Walk through intake, triage, the approval step, and the audit trail on a real workflow. Bring the queue you would move first, the downstream system it touches, and the control you need to prove.
Free workspace · 100 tickets · No card required. See what is included.