MirrorWeb Insight for Slack
MirrorWeb Insight is the archiving and communications compliance platform built for modern workplaces. From WhatsApp to websites, be audit-ready at a moment's notice with MirrorWeb.Install MirrorWeb Insight for Slack to capture communications data recorded within the Slack Platform.MirrorWeb Insight automatically highlights areas of risk for further investigation. Approve, escalate, or flag messages from within the Insight platform as part of your regulatory compliance activities.
Permissions
MirrorWeb Insight for Slack will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
MirrorWeb
Company headquarters location
United Kingdom
Terms of service
Privacy & data governance
Data retention policy
6.1 This Section 6 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal data.
6.2 Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
6.3 We will retain your personal data as follows:
(a) personal data will be retained for a minimum period of 36 months following 25th May 2018, and for a maximum period of 60 months following 25th May 2018.
6.4 In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the following criteria:
(a) the period of retention of your personal data will be determined based on the relevancy of our information to your company or job title.
6.5 Notwithstanding the other provisions of this Section 6, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
Data archiving and removal policy
6.3 We will retain your personal data as follows:
(a) personal data will be retained for a minimum period of 36 months following 25th May 2018, and for a maximum period of 60 months following 25th May 2018.
6.4 In some cases it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the following criteria:
(a) the period of retention of your personal data will be determined based on the relevancy of our information to your company or job title.
6.5 Notwithstanding the other provisions of this Section 6, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
MirrorWeb customers have a defined retention policy, which is typically 7 years for our communications archival customers. After the specified retention period, customer data will be permanently deleted from our systems. Data is archived during the retention period and fully removed after this timeframe, except where legally required to retain specific information.
Data storage policy
10.1 We use cookies for the following purposes:
(a) personalisation - we use cookies to store information about your preferences and to personalise the website for you (cookies used for this purpose are: Google Analytics, Google Adwords
(b) analysis - we use cookies to help us to analyse the use and performance of our website and services (cookies used for this purpose are: Google Analytics, Google Adwords
(c) cookie consent - we use cookies to store your preferences in relation to the use of cookies more generally
Customer data is securely stored on MirrorWeb’s AWS cloud infrastructure. Sensitive customer data is not stored in cookies, and all processing involving customer data is carried out on secure servers or microservices compliant with industry standards. All data is encrypted both at rest and in transit to ensure maximum protection.
Data hosting details
Cloud hosted
Data hosting company
AWS
App/service has sub-processors
no
App/service uses large language models (LLM)
no
Certifications & compliance
Data deletion request procedure
8.5 In some circumstances you have the right to the erasure of your personal data without undue delay. Those circumstances include: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed. However, there are exclusions of the right to erasure. The general exclusions include where processing is necessary: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
Customers can request data deletion by contacting us at support@mirrorweb.com. Once a request is received, it will be logged, and the content will be subsequently marked for deletion where legally possible. (edited)
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2024-08-05
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, AzureAD
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@mirrorweb.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no