Polymer DLP for Slack
Polymer is smart data loss prevention (DLP) that goes beyond violation alerts to automate cloud data security and compliance. Use Polymer to automatically reduce the risk of data exposure and empower employees to make better data security decisions without disrupting workflows.Detect data vulnerabilities
* Classify sensitive data automatically with NLP, NER, and REGEX
* Scan and continuously monitor Slack channels for PII, PHI, and more shared in messages and files
* Pinpoint data security risks based on context—channel, user, team, application
* Reduce false alerts for your information security and compliance teams with unparalleled data detection accuracy
Remediate policy violations
* Alert employees of data policy violations in real time within Slack
* Redact, quarantine, or delete sensitive data in messages and files
* Empower employees to make better decisions about how they share data via automatic nudges
* Operationalize data security workflows
Mitigate ongoing data security risks
* Quantify risk and isolate patterns with user and platform risk scores
* Use detailed analytics and reports to proactively address areas of vulnerability
* Easily configure your data policies and security settings per organizational need
* Integrate with legacy DLP solutions and other SaaS apps for comprehensive coverage
* Manage DLP centrally by hosting on a single tenant with dedicated KMS keysCustom data protection
Polymer is completely customizable to your organization. Configure your data policies, user settings, and DLP mode when you install the app for Slack and update them at any time in the Polymer Hub. Data policies:
* Use a pre-built data policy (like HIPAA, PCI, GDPR, SOC 2)
* Customize your detection rules using 150+ data elements, including:
Standard PII - Name, Age, Location, Phone Number, Email, Ethnic Group
IDs - Social Security Number, Taxpayer ID, Passport Number, Driver's License Number, Vehicle ID
Finance - Credit Card Number, IBAN, SWIFT, CUSIP, Routing Numbers
Health - ICD, FDA, DEA, NPI
Network - IP Address, Hardware ID, MAC Address
Crypto - Bitcoin, Ethereum, Litecoin Addresses & Private Keys
Custom - REGEX, API Keys, Application UUIDs, Secrets & MoreUser settings:
* Designate what user groups or employees should have access to specific data
* Exclude specific Slack channels from monitoringDLP modes:
* Silence - Generates data policy violation and suspicious activity reports
* Alert - Generates data policy violation and suspicious activity reports; bot for Slack warns users in real time when violations occur
* Remediate - Generates data policy violation and suspicious activity reports; bot for Slack warns users and redacts/deletes sensitive data in real time when violations occurScan and monitor 100+ file types including:
* DOC(X), XLS(X), TXT, CSV
* HTML, JSON, XML
* JPEG, PNG, GIF
* PPT(X), ODP, KEY
* ZIP, JAR Fast & easy onboarding
Polymer’s low-code platform and pre-built data policy templates can start detecting and protecting sensitive data across your SaaS apps in minutes. Workplace owners should install the Polymer DLP app for Slack to protect PII, PHI, and IP data.Other integrations
* Google Drive
* Microsoft OneDrive
* Microsoft Teams
* Box
* GitHub
* Bitbucket
* ZendeskThis version of Polymer is designed for the Slack Free, Standard, and Plus plans. If you are using the Slack for Enterprise plan, click here.To learn more or to schedule a demo, visit our website at https://www.polymerhq.io.
* Classify sensitive data automatically with NLP, NER, and REGEX
* Scan and continuously monitor Slack channels for PII, PHI, and more shared in messages and files
* Pinpoint data security risks based on context—channel, user, team, application
* Reduce false alerts for your information security and compliance teams with unparalleled data detection accuracy
Remediate policy violations
* Alert employees of data policy violations in real time within Slack
* Redact, quarantine, or delete sensitive data in messages and files
* Empower employees to make better decisions about how they share data via automatic nudges
* Operationalize data security workflows
Mitigate ongoing data security risks
* Quantify risk and isolate patterns with user and platform risk scores
* Use detailed analytics and reports to proactively address areas of vulnerability
* Easily configure your data policies and security settings per organizational need
* Integrate with legacy DLP solutions and other SaaS apps for comprehensive coverage
* Manage DLP centrally by hosting on a single tenant with dedicated KMS keysCustom data protection
Polymer is completely customizable to your organization. Configure your data policies, user settings, and DLP mode when you install the app for Slack and update them at any time in the Polymer Hub. Data policies:
* Use a pre-built data policy (like HIPAA, PCI, GDPR, SOC 2)
* Customize your detection rules using 150+ data elements, including:
Standard PII - Name, Age, Location, Phone Number, Email, Ethnic Group
IDs - Social Security Number, Taxpayer ID, Passport Number, Driver's License Number, Vehicle ID
Finance - Credit Card Number, IBAN, SWIFT, CUSIP, Routing Numbers
Health - ICD, FDA, DEA, NPI
Network - IP Address, Hardware ID, MAC Address
Crypto - Bitcoin, Ethereum, Litecoin Addresses & Private Keys
Custom - REGEX, API Keys, Application UUIDs, Secrets & MoreUser settings:
* Designate what user groups or employees should have access to specific data
* Exclude specific Slack channels from monitoringDLP modes:
* Silence - Generates data policy violation and suspicious activity reports
* Alert - Generates data policy violation and suspicious activity reports; bot for Slack warns users in real time when violations occur
* Remediate - Generates data policy violation and suspicious activity reports; bot for Slack warns users and redacts/deletes sensitive data in real time when violations occurScan and monitor 100+ file types including:
* DOC(X), XLS(X), TXT, CSV
* HTML, JSON, XML
* JPEG, PNG, GIF
* PPT(X), ODP, KEY
* ZIP, JAR Fast & easy onboarding
Polymer’s low-code platform and pre-built data policy templates can start detecting and protecting sensitive data across your SaaS apps in minutes. Workplace owners should install the Polymer DLP app for Slack to protect PII, PHI, and IP data.Other integrations
* Google Drive
* Microsoft OneDrive
* Microsoft Teams
* Box
* GitHub
* Bitbucket
* ZendeskThis version of Polymer is designed for the Slack Free, Standard, and Plus plans. If you are using the Slack for Enterprise plan, click here.To learn more or to schedule a demo, visit our website at https://www.polymerhq.io.
Permissions
Polymer DLP for Slack will be able to view:
Polymer DLP for Slack will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Polymer Solutions, Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Data is retained in accordance with Polymer’s Privacy Policy which is available upon request. Polymer maintains transaction log data only for a limited period, after which the log data is deleted. We will retain your personal information as needed to fulfill the purposes for which it was collected. We will retain and use your personal information as necessary to comply with our business requirements, legal obligations, resolve disputes, protect our assets, and enforce our customer agreements. If you have any questions or concerns regarding Polymer privacy practices, please send a detailed message to support@polymerhq.io.
Data archiving and removal policy
Data is archived and removed in accordance with Polymer’s Privacy Policy which is available upon request. You can always opt not to disclose information to Polymer, but keep in mind some information may be needed to register with Polymer to take advantage of some Polymer features. You may be able to add, update, or delete information by contacting support@polymerhq.io. Some non-personal information may remain in our records after deletion of personal information from your account. We may use any aggregated data derived from or incorporating your personal information after you update or delete it, but not in a manner that would identify you personally. If you have any questions or concerns regarding Polymer privacy practices, please send a detailed message to support@polymerhq.io.
Data storage policy
Data is stored in accordance with Polymer’s Privacy Policy which is available upon request. In general, Polymer treats metadata of users on a given platform (such as username, user email, activity logs) as semi-sensitive and it is stored for 12 months in an encrypted format. Physical data assets such as files and documents that are shared on Slack are copies retained in a temporary storage area for a one-month period. Physical data asset retention can be reduced to a minimum of one day and a maximum of 365 days. Metadata is retained for the life of the customer using Polymer. If you have any questions or concerns regarding Polymer privacy practices, please send a detailed message to support@polymerhq.io.
Data center location(s)
United States
Data hosting company
AWS
App/service has sub-processors
no
Certifications & compliance
Data deletion request procedure
Data is deleted in accordance with Polymer’s Privacy Policy which is available upon request. If you would like to delete your data or have any questions or concerns regarding Polymer privacy practices, please send a detailed message to support@polymerhq.io.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack App Directory, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2020-06-03
Executive summary is available to potential customers upon request
yes
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
support@polymerhq.io
Has a vulnerability disclosure program
no
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no