Spot
This app will allow individuals at your organization to use Slack to submit workplace concerns and feedback to Spot's case management system. Administrators of your Spot account can then use the Spot dashboard to follow up on issues reported via Slack. To learn more about Spot, visit http://talktospot.com/
Spot will be able to view:
Spot will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Spot
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Data is stored until a customer deletes it within the Spot dashboard. Customer data is marked for deletion once they are no longer a Spot customer. Employees that have created a report should contact the company that they submitted their information to. Companies own their data and Spot provides them with the tools to perform the data deletion. For all other requests or to request deletion of your Personal Information, you can do so at any time by contacting us at hello@talktospot.com.
Data archiving and removal policy
To ensure no data loss, Spot's infrastructure is set up to create regular backups. These hourly automated backups are retained for 7 days. All backups are stored on encrypted storage, with access limited to key people on the Spot team.
Log data is stored for 90 days, but it doesn’t contain any personal data.
Backups are located where our servers are hosted: AWS’s EU-West 1 location (Ireland, London, Paris).
Companies own their data and Spot provides them with the tools to perform the data deletion. For all other requests or to request deletion of your Personal Information, you can do so at any time by contacting us at hello@talktospot.com.
Data storage policy
All data on the Spot service is encrypted both during transit (TLS) and at rest using AES-256. We require all administrators with access to the Spot dashboard to use two-factor authentication (TOTP) to ensure that external parties cannot gain access to your company's sensitive data. We also provide optional single sign-on (SSO).
Our servers are located in Europe (Ireland, London, Paris). The infrastructure provided by AWS is ISO 27001, SOC 1, and SOC 2 certified.
Physical access to the data center is strictly controlled both at the perimeter and at building ingress points by professional security staff, using video surveillance, state of the art intrusion detection systems, biometric locks, and other electronic means.
Data center location(s)
France, Ireland, United Kingdom
Data hosting details
Cloud hosted
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
Data deletion request procedure
Each request is individually handled and we guarantee to respond to all requests in less than 48 hours.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2020-12-18
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Any SAML 2.0
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@talktospot.com
Has a vulnerability disclosure program
no
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
no
Third party services used by this app
Uses token rotation
no