Encryption & access control — found from sitemap — Slack

Cited by

Facts read from this source

• Provider Report an error

  “Slack uses infrastructure provided by Amazon Web Services, Inc. (“AWS”) to host or process Customer Data submitted to the Slack services and GovSlack services.”

• Architecture Report an error

  “The Slack services and GovSlack services are operated on a multitenant architecture at both the platform and infrastructure layers that is designed to segregate and restrict access to the data”

• Access logging Report an error

  “Detailed access logs are available both to users and administrators of paid teams. We log every time an account signs in, noting the type of device used and the IP address of the connection.”

• Remote session termination Report an error

  “Administrators can remotely terminate all connections and sign out all devices authenticated to the Slack services or GovSlack services at any time, on demand.”

• Custom retention Report an error

  “Owners of paid Slack teams can configure custom message retention policies on a team-wide and per-channel basis.”

• Retention deletion nightly Report an error

  “Setting a custom duration for retention means that messages or files older than the duration you set will be deleted from the Slack services’ or GovSlack services’ production servers on a nightly basis.”

• Return of customer data Report an error

  “Within 30 days post contract termination, customers may request return of their respective Customer Data submitted to the Slack services and GovSlack services (to the extent such data has not been deleted by Customer).”

• Hard delete production Report an error

  “Within 24 hours of workspace Primary Owner-initiated deletion, Slack hard deletes all information from currently running production systems (excluding team names and search terms embedded in URLs in web server access logs).”

• Backup destruction Report an error

  “Slack services and GovSlack services backups are destroyed within 14 days”

• Termination deletion grid Report an error

  “Slack will, within 90 days following the subscription termination, delete, and ensure that all of its Affiliates and applicable third party hosting providers delete, all copies of Customer Data”

• Backups tested Report an error

  “Customer Data and our source code are automatically backed up every night. The operations team is alerted in the event of a failure in this system. Backups are fully tested at least every 90 days to confirm that our processes and tools work as expected.”

• Data at rest geography Report an error

  “Slack will store Customer Data at rest within certain major geographic areas except as otherwise provided in your Order Form.”

• Intrusion detection Report an error

  “Slack, or an authorized external entity, will monitor the Slack services and GovSlack services for unauthorized intrusions.”

• Vulnerability scanning Report an error

  “We perform automated vulnerability scans on our production hosts and remediate any findings that present a risk to our environment.”

• Security review process Report an error

  “New features, significant functionality, and design changes go through a security review process facilitated by the security team.”

• Static analysis and peer review Report an error

  “our code is audited with automated static analysis software, tested, and manually peer-reviewed prior to being deployed to production.”

• Disaster recovery Report an error

  “Our operations team tests disaster recovery measures regularly and has a 24-hour on-call team to quickly resolve unexpected incidents.”

• Status pages Report an error

  “Slack publishes system status information on the Salesforce Trust website and/or the Slack System Status page.”

13 facts read from this page are not shown because they could not be confirmed on the page as captured.