Slack (Salesforce)
Salesforce-owned team messaging platform: channels, huddles, Slack Connect, workflow automation and enterprise key management.
Certifications & Accreditations
| Certification | Certifying Body | Scope | Achieved | Expiry | Status |
|---|---|---|---|---|---|
| ISO/IEC 27001:2022 | Accredited third-party certification body | Slack production services and supporting corporate ISMS | — | — | Current |
| ISO/IEC 27017:2015 and ISO/IEC 27018:2019 | Accredited third-party certification body | Cloud security controls and protection of PII in public cloud for Slack services | — | — | Current |
| ISO/IEC 27701:2019 | Accredited third-party certification body | Privacy information management system extension to the Slack ISMS | — | — | Current |
| SOC 2 Type II and SOC 3 | Independent third-party auditor | Slack services. SOC 3 published publicly; SOC 2 report available to customers under NDA | — | — | Current |
| CSA STAR | Cloud Security Alliance | CAIQ self-assessment / STAR registry entry for Slack | — | — | Current |
Compliance Frameworks
ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
Slack acts as processor under the Salesforce Data Processing Addendum; SCCs and UK IDTA available
HIPAA Security
Partial
HIPAA support available on Slack Enterprise Grid with a BAA
PCI DSS v4.0
Partial
Slack is not a cardholder data environment; payment processing handled by Salesforce billing
Copyright © 2026 SnapGRC