Browse Apps
Sign In To InstallLearn More

DoControl

Sign In To InstallLearn More
Description PermissionsSecurity & Compliance
About DoControl          DoControl is a SaaS Security solution offering comprehensive visibility, threat detection, and remediation for SaaS data overexposure, insider threats, and over-permissioned third-party OAuth applications, across major SaaS ecosystems. Unlike traditional API-CASB and DLP solutions, DoControl integrates business and security context for swift response to threats and effective insider risk management. DoControl for SlackDoControl protects sensitive files that are accessed and shared throughout all Slack public channels*. The platform integrates with Slack to secure all shared files accessed by every identity and entity, both internal employees as well as 3rd party collaborators. Unified Data Inventory for Maximum Visibility
Docontrol instantly builds an inventory of Slack assets and users. Data collection is completed within hours, regardless of the organization size. Data can be queried easily, allowing users to get granular on a large scale.   SaaS Data Loss Prevention
DoControl uses Natural-Language Processing (NLP) to provide real-time scanning and classification for sensitive data types, including PII, PCI and PHI - across all files stored in Slack public channels. DoControl minimizes false positives by collecting business context on each end-user, providing insight into what presents actual risk versus what is standard business practice (i.e. the legal department often shares sensitive files containing PII with trusted 3rd parties). Automated Security Workflows for Granular Enforcement
DoControl’s automated, conditional logic workflows, enable consistent enforcement and risk remediation when sensitive data is shared over Slack. Workflows are customizable in accordance with each company’s policy, with no coding required. DoControl offers a comprehensive library of workflow playbooks, providing pre-defined templates for different use cases across a range of threat models. Example Slack workflows include notify/prevent encryption keys sharing, auto-delete files in externally shared channels, notify on file sharing by specific users, etc. Context-Based Alerts for Real-Time Monitoring
DoControl alerts security teams via email or Slack, based on the company's security policy, when sensitive data is shared. Alerts can also be streamed into a customer’s existing SIEM/Incident Management tools. DoControl enriches SaaS events with security and business context from EDP, IDP and HRIS, generating accurate alerts based on context, e.g. about to be terminated employee uploads encryption keys to public Slack channels. End-User Engagement  for Operational Efficiency
DoControl’s bot for Slack' proactively engages with end-users on behalf of Security and IT teams to identify and mitigate outdated or inappropriate sharing activities across public channels. DoControl allows for streamlined sharing approvals through an intuitive conversational UI, inherently making it easier for business users to understand the security issues involved. Engaging and empowering business users reduces the organization's exposure over time, educating the business towards a security mindset.   Visit our help center to learn more about DoControl's Slack offering.

*Employee conversations are not monitored in any way.

DoControl will be able to view:

DoControl will be able to do:

Download security and compliance information

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General
Developer
DoControl
Company headquarters location
United States
Terms of service
https://www.docontrol.io/security
Privacy & data governance
Data retention policy
Customer data is stored for as long as the engagement or contract is active, or for the period of time defined in each customer’s master services agreement. Customers can submit a data deletion request for all or some of the data stored and processed within the Production environment and used for delivering DoControl’s services. In case the customer decided to leave and close his account, DoControl will accept requests for restore/download all customer data within a 35 days retention. Requests for data deletion should be filed by the following channels: 1. support@docontrol.io 2. Intercom An approval should be obtained from customers in case confidential data is intended to be retained beyond its retention period. Such information will be tagged accordingly by DoControl. https://www.docontrol.io/privacy
Data archiving and removal policy
All data has backups for 35 days. Customer data is stored for as long as the engagement or contract is active, or for the period of time defined in each customer’s master services agreement.
Data storage policy
All storages is encrypted at rest using AWS KMS and backup for 35 days.
Data center location(s)
United States
Data hosting details
AWS
Data hosting company
aws
App/service has sub-processors
no
App/service uses large language models (LLM)
yes
LLM model(s) used
We use an internally hosted LLM for research purposes. It’s not trained or stores any data.
LLM retention settings
No data is saved
LLM data tenancy policy
N/A
LLM data residency policy
N/A
Certifications & compliance
SOC attestation
https://www.docontrol.io/security
ISO/IEC-27001 certification
https://www.docontrol.io/security
CSA Star level
https://cloudsecurityalliance.org/star/registry/docontrol/
Data deletion request procedure
upon request, when the customer decided to leave with a retention of 35 days
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2022-03-01
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Google connect
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
security@docontrol.io
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no
  • Using Slack
  • Product
  • Enterprise
  • Pricing
  • Support
  • Slack Guides
  • Slack Marketplace
  • API
  • Slack
  • Jobs
  • Customers
  • Developers
  • Events
  • Blog
  • Legal
  • Privacy
  • Security
  • Terms of Service
  • Policies
  • Handy Links
  • Download desktop app
  • Download mobile app
  • Brand Guidelines
  • Slack at Work
  • Status
  • Contact Us