Meet global standards for privacy and security
Compliance
Slack adheres to GDPR, CCPA and other privacy and security regulations. We also have policies and controls for you to manage security threats, keep your data safe and help you meet your compliance obligations.
Need help finding the information you need to complete your security or privacy questionnaire? We’ve organized our compliance resources so you can demonstrate Slack’s ability to meet your organization's requirements.
Read our white paper on complianceRead our Transfer Impact Assessment
Compliance certifications and attestations
SOC 2
(Type Ⅱ)
Trust Services Principles
APEC for Processors Certification
Privacy Recognition for Processors (PRP) System
CSA
Cloud Security Alliance
Meet specific industry regulations and international security and data privacy standards
Health Insurance Portability and Accountability Act (HIPAA)
Slack can be configured for HIPAA compliance, including electronically protected health information (e-PHI).
Financial Industry Regulatory Authority (FINRA)
Slack is FINRA 17a-4 configurable so your team can collaborate and still meet your compliance requirements.
Federal Risk and Authorization Management Program (FedRAMP)
Slack is FedRAMP Moderate authorized to meet the compliance needs of organizations in the public sector.
GovSlack is FedRAMP JAB High authorized and is also pursing DoD CC SRG IL4 compliance.
Federal Education Rights and Privacy Act (FERPA)
Slack supports its educational customers and their unique compliance responsibilities.
Trusted Information Security Assessment Exchange
Scope-ID SHYV0T
Assessment-ID AMHN37
TISAX and TISAX results are not intended for the general public.
Information Security Registered Assessors Program (IRAP)
Slack has been assessed by an independent IRAP assessor against the requirements of the Australian Information Security Manual (ISM). Customers can contact their Slack Account team to request a copy of our IRAP report.
ISMAP
Information System Security Management and Assessment Program (ISMAP)
Slack was assessed for the Information System Security Management and Assessment Program (ISMAP), a Japanese Government program evaluating the security posture of cloud service providers. Slack's registration may be viewed on the ISMAP list of registered services.
Frequently asked questions
We are committed to helping our customers and users understand, and where applicable, comply with the General Data Protection Regulation (GDPR). For more, please see our commitment page.
The GDPR does not require EU data to reside in the European Union. Slack’s Data Processing Agreement, and the European Union’s Model Clauses, will continue to ensure compliance for EU personal data transfers outside of the EU.
We’re committed to helping Slack customers and users understand and exercise their rights under the California Consumer Privacy Act (CCPA). On this page, we clarify Slack’s role and obligations under the CCPA and provide additional information to help our customers meet their compliance needs.
Slack offers Data Processing Addenda that supplement the Customer Terms of Service or any MSA.
This page provides important information about the identity, location and role of Slack Subprocessors.
Slack's Modern Slavery Statement can be found here
Yes, you can make this request using our Privacy and Security Form
We do! Please see our Security Whitepaper or visit our Security page for more information.