UiPath vs Orchestrator Zero
oz0 records agent jobs running on your infrastructure. UiPath combines agents, desktop automation and business processes. oz0 focuses on operating agents across your machines, with reviewed tool definitions, a model gateway and a verifiable audit trail.
What UiPath is
UiPath's agentic automation adds low-code and coded agents to the UiPath Platform, next to its RPA robots and Maestro, a BPMN process orchestrator. Agents run as jobs on UiPath-hosted serverless robots, on a self-hosted Automation Suite or, in preview, on your own robots.
docs.uipath.com- Runs
- Self-hosted or managed
- Licence
- Proprietary, Python SDK MIT
- Checked
- 27 October 2026
Side by side.
UiPath's ratings come from its own pages. A column's name opens its definition and how Orchestrator Zero does it. How we rated
Where it runs
Any machine you own
Yes
DocsConditional: Local robots in preview
Agents run on UiPath-hosted serverless robots or on an Automation Suite cluster you run; running agent jobs on your own unattended robots is in preview.
Linux, macOS and Windows
Conditional: Windows; Linux in Docker
The robot installs natively on Windows, runs on Linux only as a Docker image, and on macOS only in user mode for attended automations, while local agent jobs need unattended robots.
Self-hosted control plane
Yes
DocsYes: Automation Suite on Kubernetes
Automation Suite is the self-hosted UiPath platform, on Linux, EKS, AKS or OpenShift, and it includes Agents.
No inbound ports
Yes
DocsYes: Robots and Relay dial out
Robots open outbound connections to Orchestrator and its SignalR channels, and agents or MCP servers on a private network are reached through UiPath Relay without inbound firewall ports.
Fleet operations
Yes
DocsConditional: Robots; agent jobs in preview
Orchestrator joins robots through machine templates, labels them with tags, routes jobs to chosen machines, disables machines and pushes client updates, but running agent jobs on your own robots is in preview.
docs.uipath.com docs.uipath.com docs.uipath.com docs.uipath.com
Durability
Durable runs
Conditional: Manual retry from last step
Agents pause for people or external processes and resume when those finish, and an operator can retry a faulted Maestro instance from its last completed step; automatic resume of an agent run after a crash is not documented.
Governance
Tool policy outside the model
Yes: Per-agent tool guardrails
Each tool can carry declarative rules that log, filter, block or escalate a call to a person, enforced at runtime; they are set per agent by its developer, and the admin-wide AI Trust Layer guardrails check LLM content only.
Approvals in chat
Yes: Teams, Slack, Outlook; cloud
Agent escalations create Action Center tasks that pause the run until a person responds, and in Automation Cloud people can decide from Teams, Slack or Outlook.
Tool snapshots
Yes
DocsConditional: A2A cards kept until refresh
A registered A2A agent's card is stored and only fetched again when someone with Edit permission selects Refresh card; no change detection or review of MCP tool definitions is documented.
Tenants built in
Yes
DocsYes
An organisation holds several tenants, each with its own Orchestrator, services, users and data.
Cost
Budgets that stop a run
Conditional: Unit cap; LLM call boundaries
With tenant consumption enforcement enabled in Automation Cloud, an agent can stop at the next LLM call after its allocated billing units run out. Enforcement is at consumption boundaries, so some overconsumption is possible.
Security
Provider keys off the workers
Yes
DocsYes: AI Trust Layer gateway
Every LLM call goes through the AI Trust Layer gateway, which holds UiPath-managed or customer connections, and coded agents use the SDK's chat models without provider tokens.
Sandbox with an egress allowlist
Conditional: Isolated, no egress allowlist
Coded and Command MCP servers run in isolated, ephemeral containers, with no egress allowlist documented; limiting their traffic is left to your own network controls.
Audit and compliance
Tamper-evident audit trail
Conditional: Logs, not tamper-evident
The AI Trust Layer audit log records agent LLM calls with inputs and outputs for 60 days and A2A agent changes are audited; no hash chaining or other tamper-evidence is documented.
Erasure by key
Not documented
Searched UiPath docs for per-user keys, GDPR and deleting one user's agent data; customer-managed keys are set per organisation, and nothing else was found.
Retention with legal hold
Conditional: Retention, no legal hold
Process retention policies delete or archive job data after a set number of days; no legal hold that pauses deletion is documented.
Openness
Model provider choice
Yes
DocsYes: Incl. own models via Relay
UiPath-managed OpenAI, Anthropic and Google models, plus your own subscriptions or any compatible LLM, including one hosted in a private network and reached through Relay.
MCP and A2A
Yes
DocsConditional: A2A in preview
Agents use MCP servers as tools, and Agent Gateway adds A2A in both directions, which is in preview.
Where UiPath is stronger.
Mature RPA robot fleet
UiPath robots automate desktop and web apps on Windows, on Linux in Docker and on macOS, managed from Orchestrator with machine templates, tags and central client updates.
docs.uipath.comHosted cloud with certifications
Automation Cloud is a managed service, and the UiPath Trust Center lists ISO/IEC 27001:2022 and a SOC 2 Type 2 report.
trust.uipath.comApprovals in Teams and Slack
People can answer agent escalations inline from Microsoft Teams, Slack or Outlook. Orchestrator Zero has Slack, Discord and Teams, all tested only against stand-ins so far, and nobody decides from email.
docs.uipath.comVisual agent and process builders
Business users build agents on the Agent Builder canvas in Studio Web and model end-to-end processes in Maestro BPMN.
docs.uipath.com
Full in UiPath, partial in oz0: Tool policy outside the model, Approvals in chat.
Differences to examine.
Compare the scope, conditions and editions in the source notes.
- Any machine you own
- Linux, macOS and Windows
- Fleet operations
- Tool snapshots
- Budgets that stop a run
- Tamper-evident audit trail
- MCP and A2A
Using both
UiPath's Agent Gateway registers external A2A agents and MCP servers, including ones on a private network reached through Relay, so a Maestro process or UiPath agent could call an agent that Orchestrator Zero exposes over either protocol.
Based on documentation; this pairing has not been tested.
Find your first task.
Explore an example or read the public Docs preview. Software access is coming soon.