We use sub-processors solely to provide and operate our service. All sub-processors are carefully selected and are required to meet appropriate security, confidentiality, and data-protection obligations.

Scope of data shared

Sub-processors may process limited Slack-derived data only as necessary to perform their specific function. This may include:

• File metadata (such as file type and title)
• Technical identifiers (such as workspace ID or user ID)

File contents are not shared with AI sub-processors unless explicitly required for functionality.

Purpose limitation

Sub-processors are used strictly for the following purposes:

• Secure application hosting and data storage
• Automated validation of file metadata (e.g., file type and title)
• Operational monitoring and reliability

Sub-processors are not permitted to use Slack data for advertising, profiling, or unrelated purposes.

Data minimization

We follow the principle of data minimization:

• Only the minimum data required is shared
• Metadata is preferred over content whenever possible
• Data is retained only for as long as necessary to provide the service

Security and compliance

All sub-processors are required to:

• Implement industry-standard security measures