Overview
Microsoft Power Automate (formerly Microsoft Flow) is a workflow automation platform that connects web-based triggers and actions across Microsoft and third-party services. When detected on websites, Power Automate typically appears through embedded approval forms, automated notification widgets, or trigger endpoints that initiate cloud workflows from user interactions on the page. The platform bridges website events with backend business processes in the Microsoft 365 and Power Platform ecosystem.
What This Script Does
Power Automate embeds and integrations load from Microsoft's cloud infrastructure to connect website interactions with automated workflows.
- Scripts loaded: Power Automate components load via iframes from
flow.microsoft.comor through embedded forms and trigger buttons from Power Platform endpoints - Workflow triggers: Website events (form submissions, button clicks, scheduled intervals) trigger cloud-based workflows that execute a sequence of actions across connected services (sending emails, updating databases, posting notifications)
- Cookies set:
- Authentication cookies on
login.microsoftonline.comfor Microsoft Entra ID sign-in when the workflow requires authenticated user context - Session cookies to maintain the workflow interaction state during multi-step approval or input processes
- Authentication cookies on
- Data transmitted: Trigger data (form field values, user selections, event metadata) is sent to Microsoft's Power Platform servers, which route it through the configured workflow steps. Each step may transmit data to additional connected services.
- No tracking: Power Automate does not set advertising or analytics cookies. Its scripts exist to facilitate workflow automation.
Consent & Compliance
Microsoft Power Automate falls under the functional consent category.
Under GDPR and ePrivacy, Power Automate embeds serve a functional automation purpose. Authentication and session cookies are strictly necessary for delivering the workflow interaction under the ePrivacy Directive's exemption. Data processed through workflows must comply with GDPR requirements at each step, but the embedding mechanism does not introduce non-essential tracking cookies.
Under CCPA/CPRA, data submitted through Power Automate triggers and processed through workflow steps constitutes personal information governed by the site operator's privacy policies. Microsoft processes this data under its Power Platform data processing terms.
Should You Block This Without Consent?
No. Power Automate embeds provide functional workflow capabilities that users interact with intentionally (submitting forms, approving requests). Blocking them would disable the automated business process. The cookies set are limited to authentication and session management.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
flow.microsoft.comFunctionalFrequently Asked Questions
Does Microsoft Power Automate require cookie consent?
No. Power Automate provides functional workflow automation — approval forms, trigger buttons, and process interfaces — that users interact with intentionally. Authentication cookies on login.microsoftonline.com and session state cookies are strictly necessary for the workflow to operate under ePrivacy's strictly necessary exemption.
What data does Microsoft Power Automate transmit?
Trigger data such as form field values, user selections, and event metadata is sent to Microsoft's Power Platform servers at flow.microsoft.com. Each workflow step may transmit data to connected services like SharePoint, Dataverse, or custom APIs. No advertising cookies are set; all scripts serve automation delivery rather than behavioral tracking.
How does ConsentStack categorize Microsoft Power Automate?
ConsentStack classifies Power Automate as functional. Because its cookies are limited to authentication and session management for user-initiated workflow interactions, ConsentStack does not block Power Automate embeds. Workflow automation components load normally, ensuring business process integrations remain operational for site visitors.
Other Microsoft Products
Related Vendors
Manage consent for Microsoft Power Automate
ConsentStack automatically detects and manages Microsoft Power Automate trackers so your site stays compliant with global privacy regulations.