Free whiteglove setup from a ConsentStack Concierge
Microsoft Power Automate

Microsoft Power Automate

Microsoft Power Automate is a workflow automation platform that connects to websites through embedded triggers and action widgets. Scripts load form interfaces, approval flows, and automated process components that interact with Microsoft's cloud services. Sets session cookies to authenticate users and maintain workflow state during multi-step automated processes.

Microsoft
Part of Microsoft
Back to Vendor Library

Overview

Microsoft Power Automate (formerly Microsoft Flow) is a workflow automation platform that connects web-based triggers and actions across Microsoft and third-party services. When detected on websites, Power Automate typically appears through embedded approval forms, automated notification widgets, or trigger endpoints that initiate cloud workflows from user interactions on the page. The platform bridges website events with backend business processes in the Microsoft 365 and Power Platform ecosystem.

What This Script Does

Power Automate embeds and integrations load from Microsoft's cloud infrastructure to connect website interactions with automated workflows.

  • Scripts loaded: Power Automate components load via iframes from flow.microsoft.com or through embedded forms and trigger buttons from Power Platform endpoints
  • Workflow triggers: Website events (form submissions, button clicks, scheduled intervals) trigger cloud-based workflows that execute a sequence of actions across connected services (sending emails, updating databases, posting notifications)
  • Cookies set:
    • Authentication cookies on login.microsoftonline.com for Microsoft Entra ID sign-in when the workflow requires authenticated user context
    • Session cookies to maintain the workflow interaction state during multi-step approval or input processes
  • Data transmitted: Trigger data (form field values, user selections, event metadata) is sent to Microsoft's Power Platform servers, which route it through the configured workflow steps. Each step may transmit data to additional connected services.
  • No tracking: Power Automate does not set advertising or analytics cookies. Its scripts exist to facilitate workflow automation.

Consent & Compliance

Microsoft Power Automate falls under the functional consent category.

Under GDPR and ePrivacy, Power Automate embeds serve a functional automation purpose. Authentication and session cookies are strictly necessary for delivering the workflow interaction under the ePrivacy Directive's exemption. Data processed through workflows must comply with GDPR requirements at each step, but the embedding mechanism does not introduce non-essential tracking cookies.

Under CCPA/CPRA, data submitted through Power Automate triggers and processed through workflow steps constitutes personal information governed by the site operator's privacy policies. Microsoft processes this data under its Power Platform data processing terms.

Should You Block This Without Consent?

No. Power Automate embeds provide functional workflow capabilities that users interact with intentionally (submitting forms, approving requests). Blocking them would disable the automated business process. The cookies set are limited to authentication and session management.

Is Microsoft Power Automate GDPR compliant?

Microsoft Power Automate typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Microsoft Power Automate can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Microsoft Power Automate, not on Microsoft Power Automate itself.

Visit website

Consent Categories

Functional

Also Known As

Microsoft FlowPower Automate workflowsMicrosoft automationPower Platform

Industries

Computers Electronics and TechnologyProgramming and Developer Software

Tracked Domains (1)

flow.microsoft.comFunctional

flow.microsoft.com is a functional domain operated by Microsoft Power Automate, used to run site features like chat, video, embeds, and preferences.

Frequently Asked Questions

Other Microsoft Products

Bing Ads
Bing Ads
Microsoft Advertising (Bing Ads) is the advertising platform for search campaigns on Bing, Yahoo, and partner networks. The Universal Event Tracking (UET) tag fires on advertiser sites to record conversions and build remarketing audiences. Data flows into the Microsoft Advertising dashboard for campaign reporting and bid optimization.
Microsoft Advertising UET Tag
Microsoft Advertising UET Tag
Microsoft Advertising UET Tag is the Universal Event Tracking pixel for Microsoft's ad platform, formerly Bing Ads. The JavaScript tag fires on advertiser websites to track page views, conversions, and custom events for campaign optimization. Sets cookies to identify visitors across sessions and attribute conversions to Microsoft Search and Audience Network ad clicks.
Bing Webmaster Tools
Bing Webmaster Tools
Sets a meta tag or BingSiteAuth.xml file to confirm site ownership with Microsoft Bing. The verification asset collects no personal data; Bing then provides search performance, crawl error, and keyword analytics accessible only through authenticated Webmaster Tools dashboard sessions.
LinkedIn
LinkedIn
LinkedIn Insight Tag is a conversion tracking and audience analytics tool for LinkedIn advertising. Scripts set a first-party cookie and send page view and conversion events to LinkedIn's servers. Data supports campaign attribution, demographic reporting on site visitors, and LinkedIn retargeting audience creation.
Microsoft Azure AD
Microsoft Azure AD
Microsoft Azure AD (now Microsoft Entra ID) is a cloud identity and access management service for single sign-on and user authentication on websites. Scripts load the Microsoft Authentication Library to handle OAuth flows, display login prompts, and manage access tokens. Stores authentication cookies and session tokens to maintain user login state across visits.
Microsoft Dynamics 365
Microsoft Dynamics 365
Microsoft Dynamics 365 is a suite of CRM and ERP applications that integrates with websites through tracking scripts and embedded forms. Web tracking code captures visitor behavior, page views, and form submissions to build customer profiles and score leads. Sets cookies to identify returning visitors and attribute marketing touchpoints across sessions.
Microsoft Power Apps
Microsoft Power Apps
Microsoft Power Apps is a low-code application development platform that enables embedded business applications on websites. Scripts load custom app interfaces from Microsoft's cloud, render form controls and data views, and connect to backend data sources through Power Platform connectors. Sets session cookies to maintain application state and user authentication.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Microsoft Viva
Microsoft Viva
Microsoft Viva is an employee experience platform that surfaces on websites through embedded engagement and learning modules. Scripts load content feeds and knowledge cards from Microsoft's cloud infrastructure. Sets authentication cookies for user identity and personalized workplace content delivery.
Power BI
Power BI
Power BI is Microsoft's business intelligence and data visualization platform. Its embedded scripts render interactive dashboards and reports within web pages, loading data visualizations through iframes or JavaScript APIs. Embedded reports may set authentication cookies and make requests to Microsoft's cloud services.
Xandr
Xandr
Xandr scripts serve programmatic display and video ads by placing cookies, collecting audience data, and participating in real-time bidding auctions. Scripts match visitors against audience segments and transmit behavioral data to Microsoft's advertising marketplace for targeting and measurement.

Related Vendors

Microsoft Power Apps
Microsoft Power Apps
Microsoft Power Apps is a low-code application development platform that enables embedded business applications on websites. Scripts load custom app interfaces from Microsoft's cloud, render form controls and data views, and connect to backend data sources through Power Platform connectors. Sets session cookies to maintain application state and user authentication.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Google Search
Google Search
Google Search appears on websites through the Programmable Search Engine, enabling custom site-specific search functionality. Scripts load the search widget from Google's servers to render search bars and display results within the host website. Sends search queries to Google's index and may set cookies for search personalization and query history.
Microsoft Viva
Microsoft Viva
Microsoft Viva is an employee experience platform that surfaces on websites through embedded engagement and learning modules. Scripts load content feeds and knowledge cards from Microsoft's cloud infrastructure. Sets authentication cookies for user identity and personalized workplace content delivery.
Apple Business Chat
Apple Business Chat
Apple Business Chat enables direct customer messaging between websites and Apple's Messages app. Scripts load chat buttons and conversation interfaces that connect visitors to business support agents through iMessage. Sets minimal session cookies to maintain conversation context but does not track browsing behavior or collect analytics data.
Contact At Once!
Contact At Once!
Contact At Once! (now part of CarGurus) is a live chat platform for automotive dealerships. Scripts embed a chat widget on dealer websites to connect shoppers with sales staff in real time. Sets cookies to track chat session state.

Manage consent for Microsoft Power Automate

ConsentStack automatically detects and manages Microsoft Power Automate trackers so your site stays compliant with global privacy regulations.

Get started free