← All report cards · Registry

Built from public records and checked 2026-10-22. Not an audit of Slack. How scores are made · spotted a mistake? Tell us.
B
SaaS products

Slack

Team messaging and collaboration, a Salesforce company · Score 89/100 · Last checked 2026-10-22

The short version

Messages are encrypted in transit and at rest but not end-to-end. Consider Enterprise Key Management if you need more control.

Built from: public records, checked 2026-10-22.

Score breakdown

Security record91
Documented incidents and safeguards (public record, not a technical test)
Data jurisdiction88
Which laws and governments can reach your data
Ownership transparency86
How plainly the owner can be traced
Third-party exposure92
Documented analytics, advertising and attribution partners

Who owns it

Slack→Slack Technologies, LLC→Salesforce, Inc.

Parent based in: 🇺🇸 United States

Laws that can apply: US CLOUD Act, FISA 702

Where your data can go

WhoCountryWhy they are involved
Amazon Web Services🇺🇸 United States Hosting (from Slack's 2023 subprocessor list; the current list could not be read)

Jurisdictions touched: 🇺🇸 United States

What the public record says

mediumSource-code repositories downloaded with stolen employee tokens

Slack said a threat actor used stolen employee tokens to download private code repositories in December 2022. It reported no customer data or production access involved. Source

good to knowEncrypted in transit and at rest; customer-held keys available

Slack says customer data is encrypted by default and offers Enterprise Key Management. This is not end-to-end encryption. Source

good to knowIndependent attestations listed, including SOC 2 Type II and ISO 27001

Slack's security page lists SOC 2/3, ISO 27001, 27017, 27018 and FedRAMP Moderate, among others. Claims are Slack's own. Source

good to knowPublic bug bounty since 2014

Slack's engineering blog says its bounty programme launched in February 2014. Source

Sources

Ownership, locations and data partners come from the company's own pages and filings where they exist. Last checked 2026-10-22.