Skip to main content
Platform Review
PricingSign in
← All platforms
Workflow & Automation · slack.com

Slack AI

Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.

Overall riskMEDReviewed 2026-06-09
Creator: low · GRC: medium · Counsel: medium
enterprise band
Severe
creator · pending
Dealbreaker · Training without opt-out
49 verified findings7 policy surfaces1/2 core docs verified

Partially verified: Privacy Policy assessed · Terms of Service pending. Everything below comes only from what was read in full.

Risk triage

Watch: Privacy and data use

Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.

0
high
34
medium
15
low
1/2
docs
Trains on your data?
Not yet assessed
no verified finding covers this surface yet
Who owns outputs?
Not yet assessed
no verified finding covers this surface yet
Commercial use?
Not yet assessed
no verified finding covers this surface yet
Every rating:verbatim-citedsnapshot-datedchange-loggedHow we keep ratings honest →
Risk by role
Select a role to tailor the summary and reorder the findings below.

Scores derived from 23 enriched findings — same verbatim citations as below. AI-generated, not legal advice.

What this means for you
  • Slack AI's training terms are conditional — check the tier, opt-out, and enterprise exceptions before relying on protection.
  • Data handling is conditional — 8 privacy or retention clauses warrant review before using Slack AI at scale.

Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.

How to read this page: Overall risk rates what Slack AI's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.

Creator lens
NOT YET ASSESSED

IP/output assessment pending — terms of service not yet verified This lens receives a band only once its source document has been captured and read in full.

Know where this document lives? Point us to the URL or PDF and the pipeline will verify it.

Enterprise lens
Data use, retention, subprocessors, audit
SEVERE
Dealbreaker — Training without opt-out. Your inputs/outputs are used to train models and the policy provides no way to decline. see the clause

Based on 217 verified, verbatim-cited findings below — read the citations.

Automated assessment against a published rubric — not legal advice.

Partially verifiedWorkflow & Automation

Partially verified — Privacy Policy — Verified (read in full, 49 findings); Terms of Service — Capture under review. Findings below are from fully-read, verified documents only; remaining core documents are pending capture.

Why partial?

Needs review

A core policy document is captured but requires review before AIRIN can mark the corpus fully verified.

Document status
  • Privacy Policy
    Verified - read in full - 49 citationsstaticLast captured 2026-06-07
  • Terms of Service
    Completeness unconfirmedrendered
Tier conditions

Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.

plan language
Privacy & data use

This segment discloses the types of information Slack may receive from third-party services (e.g., account creation events, interaction data), explicitly restricts storage of third-party passwords, and references the procedure for importing contact information — establishing both the scope of third-party data ingestion and a specific restriction on credential storage.

"Examples of information which Slack may receive in this manner include whether you successfully created a new account or interacted with a third-party application in a way that is attributable to Slack usage activity. We do not, however, re..."
📍 Privacy Policy › “Information We Collect And Receive”Jump to exact text →
plan language
Privacy & data use

Establishes the procedure for California consumers to exercise CCPA rights, including submission methods, identity verification requirements, authorized agent designation, and the mechanism to opt out of cookie-based sharing via Global Privacy Control.

" California consumers may make a request pursuant to their rights under the CCPA by contacting us at privacy@slack.com or by filling out this form . We will verify your request using the information associated with your account, including e..."
📍 Privacy Policy › “Your California Privacy Rights”Jump to exact text →
plan language
Privacy & data use

This segment identifies the categories of Other Information used and lists Slack's legitimate interest bases for processing, including service delivery, error resolution, security monitoring, usage analysis, and support — establishing the legal permissions under which Slack processes personal data without consent.

" We use Workspace and account information, Usage information, Cookie information, Third-Party Services Information, Contact information, Third-Party data, Audio and video metadata, and Additional information provided to Slack for the follow..."
📍 Privacy Policy › “How We Process Your Information and our Legal Bases for Doing So”Jump to exact text →
plan language
Privacy & data use

Establishes the procedure for contacting Slack with privacy policy questions, complaints, or to exercise statutory rights, specifying the contact email and promising a response within a reasonable timeframe, with differentiated addresses for US/Canada vs. other jurisdictions.

" Please also feel free to contact Slack if you have any questions about this Privacy Policy or Slack’s practices, or if you are seeking to exercise any of your statutory rights. Slack will respond within a reasonable timeframe. You may cont..."
📍 Privacy Policy › “Contacting Slack”Jump to exact text →
plan language
Privacy & data use

This segment discloses Slack's automatic collection of server log data and device information when users access or use the Services, establishing Slack's data collection practices as an operative disclosure obligation under applicable privacy law.

"As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Services and record it in log files. This log data may include your Internet Pro..."
📍 Privacy Policy › “Information We Collect And Receive”Jump to exact text →
plan language
Privacy & data use

This segment establishes Slack's role as a data processor acting under Customer instructions for Customer Data, confirms the Customer's role as data controller, and defines the permitted uses of Other Information to operate the Services — creating binding obligations on Slack to process data only in accordance with Customer instructions and applicable law.

" Customer Data will be used by Slack in accordance with a Customer’s instructions, including to provide the Services, any applicable terms in the Customer Agreement, a Customer’s use of Services functionality, and as required by applicable ..."
📍 Privacy Policy › “How We Process Your Information and our Legal Bases for Doing So”Jump to exact text →
plan language
Privacy & data use

This segment defines 'Customer Data' and 'Other Information' as distinct categories of information collected through the Services, establishing the definitional framework for how Slack processes data submitted by Customers and Authorized Users, including messages, files, and other content.

" Slack will collect and receive information through operating the Services and Websites, and through other interactions with Slack. Such information will include Customer Data and other information and data (“ Other Information ”) in a vari..."
📍 Privacy Policy › “Information We Collect And Receive”Jump to exact text →
plan language
Privacy & data use

Combining third-party sourced data with first-party collected data for marketing and business purposes may expand the data profile of individuals significantly. Under GDPR, notice and a lawful basis are required for such combination; the 'legitimate interests' basis applied here is contestable.

"Third-Party data : Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from parent corporation(s), affiliates and sub..."
📍 Privacy Policy › “Information We Collect And Receive”Jump to exact text →

Evidence appendix

Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.

High - 0
Medium - 34
Tier-specific - 0
Total citations - 49
Severity
Surface
Document
Tier
Privacy & data use
CautionHigh
" We collect this information for the business and commercial purposes described in the ‘ How We Process your Information and our Legal Bases for Doing So ’ section above. We share this information as described in the ‘ How We Share and Disclose Information ’ section above. Slack does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect (and will not sell it without providing a right to opt out). We may also share personal information (in the form of identifiers and internet activity information) with third party advertisers for purposes of targeting advertisements on non-Slack websites, applications, and services. In addition, we may allow third parties to collect personal information from our sites or services if those third parties are authorized service providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal information, or if you use our sites or services to interact with third parties or direct us to disclose your personal information to third parties. Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use, disclose, or may sell this information), to delete their personal information, to opt out of any “sales”, to know and opt out of sharing of personal information for delivering advertisements on non-Slack websites, and to not be discriminated against for exercising these rights. "
Privacy Policy › “Your California Privacy Rights”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Restricts Slack from selling personal information as defined under CCPA without providing an opt-out right, while permitting sharing of identifiers and internet activity information with third-party advertisers for targeted advertising purposes and cross-referencing how information is used and shared.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Audio and video metadata : Slack may receive, capture, and store metadata derived from your use of features such as Slack Huddles or Clips, and additional related data such as data regarding the date and time of your Slack Huddle and the Authorized User that you connected with. Additional information provided to Slack : We also receive Other Information when submitted to our Websites or in other ways, such as responses or opinions you provide if you participate in a focus group, contest, activity or event, feedback you provide about our products or services, information you provide if you apply for a job with Slack, enroll in a certification program or other educational program hosted by Slack or a vendor, request support, interact with our social media accounts or otherwise communicate with Slack."
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment discloses Slack's collection of audio/video metadata from features like Huddles and Clips, including date/time and connection data, and describes the collection of additional information submitted voluntarily by users — establishing the scope of Slack's data collection from product features and voluntary submissions.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"Log data . As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Services and record it in log files. This log data may include your Internet Protocol (IP) address, the address of the web page you visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and your language preferences."
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Automatic log collection is standard. However, IP addresses and referrer URLs are personal data under GDPR and their retention period and sharing scope are not specified in the provided text.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
"As with most websites and technology services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Services and record it in log files. This log data may include your Internet Protocol (IP) address, the address of the web page you visited before using the Website or Services, browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and your language preferences. Device information . Slack collects information about devices accessing the Services, including type of device, what operating system is used, device settings, application IDs, unique device identifiers and crash data. Whether we collect some or all of this Other Information often depends on the type of device used and its settings. Location information . We receive information from you, our Customers and other third-parties that helps us approximate your location. We may, for example, use a business address submitted by your employer (who is our Customer) or an IP address received from your browser or device to determine approximate location to assist with localization or for security purposes."
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment discloses Slack's automatic collection of server log data and device information when users access or use the Services, establishing Slack's data collection practices as an operative disclosure obligation under applicable privacy law.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" Slack will collect and receive information through operating the Services and Websites, and through other interactions with Slack. Such information will include Customer Data and other information and data (“ Other Information ”) in a variety of ways: Customer Data . Customers or individuals granted access to a Workspace by a Customer (“ Authorized Users ”) routinely submit Customer Data (such as messages, files or other content submitted through Services accounts) to Slack when using the Services. Other Information. Slack also collects, generates and/or receives the following categories of Other Information: Workspace and account information : To create or update a Workspace account, you or our Customer (e.g. your employer) supply Slack with an email address, phone number, password, domain, and/or other account set up details (for more detail on Workspace creation, click here . In addition, Customers that purchase a paid version of the Services provide Slack (or its payment processors) with billing details such as credit card information, banking information, and/or a billing address. Usage information: Services metadata . When an Authorized User interacts with the Services, metadata is generated that provides additional context about the way that an Authorized User uses the Services. For example, Slack logs the Workspaces, channels, people, features, content, and links you view or interact with, the types of files shared and what Third-Party Services are used (if any) Log data . "
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment defines 'Customer Data' and 'Other Information' as distinct categories of information collected through the Services, establishing the definitional framework for how Slack processes data submitted by Customers and Authorized Users, including messages, files, and other content.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" To develop and provide search, learning and productivity tools and additional features. Slack tries to make the Services as useful as possible for specific Workspaces and Authorized Users. For example, we may: improve search functionality by using Other Information to help determine and rank the relevance of content, channels or expertise to an Authorized User; make Services or Third-Party Service suggestions based on historical use and predictive models; identify organizational trends and insights; customize a Services experience; or create new productivity features and products. It is in our interest and in the interest of Customers and Authorized Users to continuously improve and develop the customer support we provide."
Privacy Policy › “How We Process Your Information and our Legal Bases for Doing So”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment establishes Slack's permission to use Other Information to develop search, learning, and productivity tools, including improving search relevance, generating service suggestions via predictive models, identifying organizational trends, and creating new product features — directly addressing AI/ML training and product development uses of user data under a legitimate interest basis.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" We use Workspace and account information, Usage Information, Cookie information, Third-Party Services Information, Third-Party data, and Additional information provided to Slack for the following legitimate interests: To send marketing emails and other communications. We sometimes send emails about new product features, promotional communications or other news about Slack. These are marketing messages so you can control whether you receive them. If you have additional questions about a message you have received from Slack please get in touch through the contact mechanisms described below. It is in our interest to promote the Websites and Services and send our direct marketing. "
Privacy Policy › “How We Process Your Information and our Legal Bases for Doing So”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Grants Slack permission to use workspace, account, usage, cookie, third-party, and additional information for the legitimate interest of sending marketing emails and promotional communications, while noting user control over receipt.

AI-generated interpretation, not legal advice.

Privacy & data use
CautionHigh
" To aggregate or de-identify information. In some cases, we aggregate or de-identify information we have associated with you and use the resulting information, for example, to improve the Services. It is in our interest to research and improve the Services; It is in the interests of Customers and Authorized Users to practice data minimisation and privacy by design in respect of their information. "
Privacy Policy › “How We Process Your Information and our Legal Bases for Doing So”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment establishes Slack's permission to aggregate or de-identify personal information and use the resulting data to improve the Services, invoking both Slack's legitimate interest in research and the principle of data minimisation — creating a lawful basis for de-identified analytics and product improvement activities.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"Third-Party data : Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from parent corporation(s), affiliates and subsidiaries, our partners, or others that we use to make our own information better or more useful. This data may be combined with Other Information we collect and might include aggregate-level data, such as which IP addresses correspond to zip codes or countries. Or it might be more specific: for example, how well an online marketing or email campaign performed."
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Combining third-party sourced data with first-party collected data for marketing and business purposes may expand the data profile of individuals significantly. Under GDPR, notice and a lawful basis are required for such combination; the 'legitimate interests' basis applied here is contestable.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"During a Change to Slack’s Business. If Slack engages in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Slack’s assets or stock, financing, public offering of securities, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all of the Information described in the ‘Information We Collect and Receive’ section may be shared or transferred, subject to standard confidentiality arrangements."
Privacy Policy › “How We Share and Disclose Information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

In M&A or similar events, Slack may transfer the full scope of user information to new entities. The only protection is 'standard confidentiality arrangements,' which is undefined and may not bind the successor to current privacy commitments.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"We share this information as described in the ‘ How We Share and Disclose Information ’ section above. Slack does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect (and will not sell it without providing a right to opt out). We may also share personal information (in the form of identifiers and internet activity information) with third party advertisers for purposes of targeting advertisements on non-Slack websites, applications, and services. In addition, we may allow third parties to collect personal information from our sites or services if those third parties are authorized service providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal information, or if you use our sites or services to interact with third parties or direct us to disclose your personal information to third parties."
Privacy Policy › “Your California Privacy Rights”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Despite not 'selling' personal data under CCPA, Slack shares identifiers and browsing/activity data with third-party advertisers for targeted advertising. This is a meaningful privacy risk for individual users, and the default posture is sharing unless users opt out via Global Privacy Control or direct request.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"Corporate Affiliates. Slack may share Information with our corporate affiliates, parents and/or subsidiaries."
Privacy Policy › “How We Share and Disclose Information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Slack may share all categories of Information with corporate affiliates without explicit purpose limitation or user consent requirement, creating risk of secondary use by affiliated entities.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"A Customer can choose to permit or restrict Third-Party Services for its Workspace and Slack can receive personal data from such Third-Party Services. Typically, Third-Party Services are software that integrate with our Services, and a Customer can permit its Authorized Users to enable and disable these integrations for its Workspace"
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

The Customer (employer), not the individual Authorized User, controls which third-party integrations are permitted. This means personal data can be shared with third parties without direct consent from the individual whose data is shared.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"Law Enforcement and Regulators. If we receive a request for information, we may disclose Other Information if we reasonably believe disclosure is in accordance with or required by any applicable law, regulation or legal process."
Privacy Policy › “How We Share and Disclose Information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

The standard for disclosure is Slack's reasonable belief, which is subjective. No commitment to notify users of such requests is stated, and the scope includes 'any applicable law, regulation or legal process.'

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"Aggregated or De-identified Data. We may disclose or use aggregated or de-identified Information for any purpose. For example, we may share aggregated or de-identified Information with prospects or partners for business or research."
Privacy Policy › “How We Share and Disclose Information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Slack claims an unrestricted right to use and disclose aggregated or de-identified data derived from user information for any purpose, including sharing with external prospects and partners. No limitation on use or right to object is provided.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
"Once enabled, the provider of a Third-Party Service may share certain information with Slack. For example, if a cloud storage application you are using is enabled to permit files to be imported to a Workspace, we may receive the user name and email address of Authorized Users, along with additional information that the application makes available to Slack to facilitate the integration."
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

The phrase 'additional information that the application makes available to Slack' is open-ended and does not specify limits on what third parties can share. Users are directed to check third-party privacy settings rather than being given Slack-level guarantees.

AI-generated interpretation, not legal advice.

Subprocessors & data sharing
High
" ‘Information We Collect and Receive’ section may be shared or transferred, subject to standard confidentiality arrangements. "
Privacy Policy › “How We Share and Disclose Information”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

Restricts the transfer or sharing of information described in the prior section to being subject to standard confidentiality arrangements, establishing a confidentiality obligation on any such sharing or transfer.

AI-generated interpretation, not legal advice.

Privacy & data use
High
"Examples of information which Slack may receive in this manner include whether you successfully created a new account or interacted with a third-party application in a way that is attributable to Slack usage activity. We do not, however, receive or store passwords for any of these Third-Party Services when connecting them to the Services. For more information on Slack’s interaction with Third-Party Services, click here . Contact information : In accordance with the consent process provided by your device or other third-party API, any contact information that an Authorized User chooses to import (such as importing an address book to find coworkers and Slack Connect contacts or calendar from a device or API), forward or upload to the Services (for example, when sending emails to the Services) is collected when using the Services. Third-Party data : Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from parent corporation(s), affiliates and subsidiaries, our partners, or others that we use to make our own information better or more useful. This data may be combined with Other Information we collect and might include aggregate-level data, such as which IP addresses correspond to zip codes or countries. Or it might be more specific: for example, how well an online marketing or email campaign performed. "
Privacy Policy › “Information We Collect And Receive”Jump to exact text →
Source: Privacy Policy- Snapshot 2026-06-07- View source
Permalink to this finding →
Automated analysis

This segment discloses the types of information Slack may receive from third-party services (e.g., account creation events, interaction data), explicitly restricts storage of third-party passwords, and references the procedure for importing contact information — establishing both the scope of third-party data ingestion and a specific restriction on credential storage.

AI-generated interpretation, not legal advice.

Clause detail — protections, your obligations, and coverage

Every clause below is a verbatim quote from Slack AI's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.

✅ Protections found

8 verified clauses

Clauses in Slack AI's policies that work in your favour — commitments the platform made to you.

  • Privacy & data use
    Individuals in the European Economic Area, the United Kingdom, Brazil, and across the globe have certain statutory rights in relation to their personal data. Subject to any exemptions provided by law, you may have the right to request access to your personal i…

    Grants individuals in the EEA, UK, Brazil, and globally statutory rights to access, update, delete, or correct their personal information using account settings or by contacting the Customer, subject to legal exemptions.

    📍 Privacy Policy › “Your Rights”Jump to exact text →
  • Audit rights, DPA & residency
    Slack may transfer your Personal Data to countries other than the one in which you live, including transfers to the United States. To the extent that Personal Data is transferred abroad, Slack will ensure compliance with the requirements of the applicable laws…

    Obliges Slack to ensure compliance with applicable data protection laws for cross-border Personal Data transfers, including reliance on European Commission Standard Contractual Clauses as a lawful transfer mechanism.

    📍 Privacy Policy › “International Data Transfers”Jump to exact text →
  • Privacy & data usesale/sharing of personal data
    California consumers may make a request pursuant to their rights under the CCPA by contacting us at privacy@slack.com or by filling out this form . We will verify your request using the information associated with your account, including email address. Governm…

    Establishes the procedure for California consumers to exercise CCPA rights, including submission methods, identity verification requirements, authorized agent designation, and the mechanism to opt out of cookie-based sha…

    • Designated security contact: privacy@slack.com
    📍 Privacy Policy › “Your California Privacy Rights”Jump to exact text →
  • Audit rights, DPA & residency
    Data protection law in certain jurisdictions differentiates between the “controller” and “processor” of information. In general, Customer is the controller of Customer Data. In general, Slack is the processor of Customer Data and the controller of Other Inform…

    Defines the roles of Customer as controller and Slack as processor of Customer Data, and Slack as controller of Other Information, while specifying which Slack entity serves as controller or processor in different geogra…

    📍 Privacy Policy › “Identifying The Data Controller And Processor”Jump to exact text →
  • Moderation & enforcementterms can change anytime
    Slack may change this Privacy Policy from time to time. Laws, regulations, and industry standards evolve, which may make those changes necessary, or we may make changes to our services or business. We will post the changes to this page and encourage you to rev…

    Establishes the procedure by which Slack may amend the Privacy Policy, including posting changes, providing additional notice for material changes via email or Services, and directing users to deactivate accounts if they…

    • Terms changes: advance notice promised
    📍 Privacy Policy › “Changes To This Privacy Policy”Jump to exact text →
  • Audit rights, DPA & residency
    The APEC CBPR system provides a framework for organizations to ensure protection of personal data transferred among participating APEC economies and the PRP demonstrates an organization’s ability to provide effective implementation of a personal data controlle…

    Describes the APEC CBPR and PRP certification framework as a safeguard for cross-border data transfers among APEC economies, and provides a procedure for individuals to contact a third-party dispute resolution provider f…

    📍 Privacy Policy › “International Data Transfers”Jump to exact text →

+ 2 more verified clauses of this kind on this platform, cited in full in the report.

📋 Rules you must follow

0 verified clauses

What Slack AI requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.

No user-conduct rule has been verified in Slack AI's published policies yet.

What the policies actually cover

7 topics
  • Product telemetry & usage tracking12 clauses
  • Advertising & tracking1 protective3 clauses
  • Sale or sharing of personal data1 protective2 clauses
  • Government & law-enforcement disclosure4 clauses
  • Terms can change at any time1 protective1 clause
  • Deletion rights & post-termination survival1 clause
  • Breach-notification promises1 protective2 clauses

24 further verified clauses are cited on this page but not yet assigned a topic.

Cross-clause notes

Ambiguity — Caution

Verified retention clauses point in different directions: the Privacy Policy, Privacy Policy › “Data Retention” describes broad or open-ended retention, while the Privacy Policy, Privacy Policy › “Data Retention” describes deletion or erasure. Which clause controls in a given situation is not resolved by the documents' text alone — this is surfaced as an ambiguity, treated as Caution.

Automated cross-reference against the published rubric — not legal advice.

Clause intelligence

Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.

261
clauses
44
patterns
44
stances
tier conditionality · 23privacy sharing · 15data retention · 2legal burden · 2ip license · 1training use · 1
data retentionMEDIUMPrivacy Policy › “Data Retention”

The clause allows indefinite, perpetual, or necessity-based retention.

Slack may retain Other Information pertaining to you for as long as necessary for the purposes described in this Privacy Policy (such as to provide the Services, including any optional features you use, and to provide customer support). This may include keeping your Other Information after you have deactivated your account for the period of time needed for Slack to pursue legitimate business interests, conduct aud...
Open source citation
data retentionMEDIUMPrivacy Policy › “Data Retention”

The clause allows indefinite, perpetual, or necessity-based retention.

Slack may retain Other Information pertaining to you for as long as necessary for the purposes described in this Privacy Policy (such as to provide the Services, including any optional features you use, and to provide customer support). This may include keeping your Other Information after you have deactivated your account for the period of time needed for Slack to pursue legitimate business interests, conduct aud...
Open source citation
ip licenseHIGH“Terms & Conditions”

The clause includes sublicensable, transferable, or assignable rights.

This offer cannot be combined with any other offer. Limit one offer per customer. Offer is non-transferable. This offer does not apply to annual plans or to upgrades to Slack’s Enterprise+ Plan. If you are interested in the Enterprise+ Plan, you can contact our Sales team Opens in new window for more information. This offer is available for a limited time only, and prior to redemption by you, Slack may end or modi...
Open source citation
legal burdenMEDIUM“Included”

The clause requires defense, indemnity, or hold-harmless obligations.

Anomaly Event Response Defend against risks by automatically ending user sessions on anomalous events.
Open source citation
legal burdenMEDIUM“Anomaly Event Response”

The clause requires defense, indemnity, or hold-harmless obligations.

Defend against risks by automatically ending user sessions on anomalous events.
Open source citation

Tier matrix

Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.

TierSurfaceVerdictRiskCitations
All applicable tiersindemnity liabilityconditionalMEDIUM2
All applicable tiersprivacy data useconditionalMEDIUM1
All applicable tierssubprocessors data sharingworsensHIGH5
All applicable tierstraining useworsensHIGH1
Apisubprocessors data sharingconditionalMEDIUM1
Enterprisetier differencesworsensHIGH7
Freetier differencesconditionalMEDIUM1
Pro / Paidtier differencesconditionalMEDIUM1
Standardtier differencesconditionalMEDIUM1
Team / Businessdata retentionconditionalMEDIUM2
Team / Businessprivacy data useworsensHIGH3
Team / Businesssubprocessors data sharingconditionalMEDIUM5

Policy evolution

Open full timeline

Before/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.

Jul 8, 2026tier conditionMEDIUM

Latest stance: rights or controls vary by tier on tier differences

Which plan do I need to use Slackbot? Soon, Slack users across every plan will be able to try Slackbot. Demand has been extraordinary, and we are opening access so every team can experience an agent built directly into their flow of work. Slack Free and Pro users will have the chance to explore Slackbot’s capabilities firsthand through a limited trial experience. Ongoing Slackbot access will continue to be available to Business+ and Enterprise+ customers, and coming soon, Salesforce CRM customers who connect their accounts to Slack will also receive ongoing access to Slackbot!
Open timeline citation
Jul 8, 2026legal burdenMEDIUM

Latest stance: indemnity on indemnity liability

Anomaly Event Response Defend against risks by automatically ending user sessions on anomalous events.
Open timeline citation
Jul 8, 2026legal burdenMEDIUM

Latest stance: indemnity on indemnity liability

Defend against risks by automatically ending user sessions on anomalous events.
Open timeline citation
Jul 8, 2026tier conditionMEDIUM

Latest stance: rights or controls vary by tier on tier differences

By redeeming this offer, you agree that these offer terms form part of and modify Slack’s Customer Terms of Service Opens in new window (or the terms of your written agreement regarding your use of Slack’s services) (your “Agreement”) entered into between you and the Slack entity identified in the Agreement and that, after the Discount Period, Slack’s then-current standard pricing set forth on Slack’s Pricing Page Opens in new window will apply to the remainder of your plan and to any plan renewals. Please see the terms of your Agreement for information on how to cancel or downgrade your paid subscription prior to any such renewal. If you redeem this offer and then cancel your paid Slack plan or downgrade to a free plan during the Discount Period, this offer may no longer be available to you.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

We collect this information for the business and commercial purposes described in the ‘ How We Process your Information and our Legal Bases for Doing So ’ section above. We share this information as described in the ‘ How We Share and Disclose Information ’ section above. Slack does not sell (as such term is defined in the CCPA or otherwise) the personal information we collect (and will not sell it without providing a right to opt out). We may also share personal information (in the form of identifiers and internet activity information) with third party advertisers for purposes of targeting advertisements on non-Slack websites, applications, and services. In addition, we may allow third parties to collect personal information from our sites or services if those third parties are authorized service providers who have agreed to our contractual limitations as to their retention, use, and disclosure of such personal information, or if you use our sites or services to interact with third parties or direct us to disclose your personal information to third parties. Subject to certain limitations, the CCPA provides California consumers the right to request to know more details about the categories or specific pieces of personal information we collect (including how we use, disclose, or may sell this information), to delete their personal information, to opt out of any “sales”, to know and opt out of sharing of personal information for delivering advertisements on non-Slack websites, and to not be discriminated against for exercising these rights.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on subprocessors data sharing

Examples of information which Slack may receive in this manner include whether you successfully created a new account or interacted with a third-party application in a way that is attributable to Slack usage activity. We do not, however, receive or store passwords for any of these Third-Party Services when connecting them to the Services. For more information on Slack’s interaction with Third-Party Services, click here . Contact information : In accordance with the consent process provided by your device or other third-party API, any contact information that an Authorized User chooses to import (such as importing an address book to find coworkers and Slack Connect contacts or calendar from a device or API), forward or upload to the Services (for example, when sending emails to the Services) is collected when using the Services. Third-Party data : Slack may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns and other matters related to our business from parent corporation(s), affiliates and subsidiaries, our partners, or others that we use to make our own information better or more useful. This data may be combined with Other Information we collect and might include aggregate-level data, such as which IP addresses correspond to zip codes or countries. Or it might be more specific: for example, how well an online marketing or email campaign performed.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

Audio and video metadata : Slack may receive, capture, and store metadata derived from your use of features such as Slack Huddles or Clips, and additional related data such as data regarding the date and time of your Slack Huddle and the Authorized User that you connected with. Additional information provided to Slack : We also receive Other Information when submitted to our Websites or in other ways, such as responses or opinions you provide if you participate in a focus group, contest, activity or event, feedback you provide about our products or services, information you provide if you apply for a job with Slack, enroll in a certification program or other educational program hosted by Slack or a vendor, request support, interact with our social media accounts or otherwise communicate with Slack.
Open timeline citation
Jun 17, 2026data sharingMEDIUM

Latest stance: third party or vendor sharing on privacy data use

This section provides additional details about the personal information we collect about California consumers and the rights afforded to them under the California Consumer Privacy Act or “CCPA,” as amended by the California Privacy Rights Act or “CPRA”. California law requires that we detail the categories of personal information that we collect and disclose for certain “business purposes,” such as to service providers that assist us with securing our services or marketing our products, and to such other entities as described in earlier sections of Privacy Policy. In addition to the information provided above in the ‘Information We Collect And Receive’ section, we collect the following categories of personal information from you, your employer, data analytics providers, data brokers, and Third-Party Services for our business purposes: Identifiers/contact information; Commercial information; Internet or electronic network activity information; Financial information; Geolocation information; Professional or employment-related information; Audio and visual data; In limited circumstances where allowed by law, information that may be protected under California or United States law; and Inferences drawn from any of the above categories.
Open timeline citation

Capture recency

  • Privacy Policy:Last captured 2026-06-07· verified 2026-06-07verified once — no re-scan in 96 days
  • Terms of Service:Last captured 2026-06-09· verified 2026-06-09verified once — no re-scan in 94 days

Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.

↓ 226 fewer findings this quarter vs last (25 vs 251). First scan: June 2026.

Claim this profile

Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Slack AI's policies — no human edits the data.

Need this for procurement or legal diligence?

Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.

Know where the missing document lives?

We haven't yet verified Slack AI's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.

Every finding above is a verbatim quote from Slack AI's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.

📢 POLICY UPDATES ALERT

AIRIN Brief

Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.