Perk
Manage travel and expense requests right from Slack. This app sends notifications from Perk directly to Slack, so it's easy for approvers to keep on top of what needs their attention. Approvers will only get notifications if their email address is the same on Perk and Slack. The app uses large language models (AI) to generate some responses. AI-generated responses and outputs may not always be accurate, so double-check important details.
Perk will be able to view:
Perk will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Perk
Company headquarters location
Spain
Terms of service
Privacy & data governance
Data retention policy
We comply with the Spanish legal data retention policies which comply with the European GDPR policies. Data is retained for the lifetime of the user and is deleted after the user unsubscribes with the exception of the data required by law.
Data archiving and removal policy
Data is retained for the lifetime of the user and is deleted after the user unsubscribes or at their request with the exception of the data required by law.
Data storage policy
Data is encrypted at rest and in transit using known recommended standard. Legacy standards are explicitly blocked. Our application is fully logged. We operate access control based on role-based access control and principle of least privilege
Data center location(s)
Ireland
Data hosting details
Cloud hosted
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic Claude models, hosted via Amazon Bedrock in EU-only regions
LLM retention settings
Conversation data is retained for 30 days and then automatically deleted; it is never used to train or fine-tune any model. Full details: https://trustcenter.perk.com
LLM data tenancy policy
The assistant runs on Amazon Bedrock, deployed entirely within Perk's own AWS account — conversation and prompt data is processed within that account boundary and is never shared, commingled with other customers' data, or used by AWS or the model provider
LLM data residency policy
All model inference is routed exclusively through AWS Bedrock's EU cross-region inference profiles, restricting processing to EU AWS regions; no prompt or conversation data leaves the EU under normal operation. Full details: https://trustcenter.perk.com
Certifications & compliance
GDPR commitment
Data deletion request procedure
1. All personal data erase requests must be directed to the Security Team. personaldata@perk.com
2. The personally identifiable data of the given person will be deleted by the Security Team using an automated tool. This includes:
1. Non-essential user profile data, including passport number, date of birth, phone... Everything but the name and email of the user.
2. Same user details in booked services registered by our system.
3. Data tracking associated to the given user (this includes Segment, FullStory).
3. The following data won't be erased:
1. Name and email of user, for legal reasons.
2. Application logs. Those are subject to a retention period of max. 2 months and are used for debugging reasons.
3. Database backups. Those are subject of a retention period of 2 months for business continuity purposes.
4. Financial information. We are required to save this data for 6 years due to legal reasons.
5. Any data already sent to third parties for processing, like booking or payment providers.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2026-09-01
Executive summary is available to potential customers upon request
no
Supports Single Sign On (SSO) with the following providers
Okta, Onelogin, Gsuite, Azure
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
securityteam@perk.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no