Postman
Postman is an API collaboration platform that simplifies each step of the API lifecycle and streamlines teamwork so you can create better APIs, faster. With 40M+ developers across 500K+ companies, including 98% of the Fortune 500, teams trust Postman.When you’re troubleshooting and building APIs, it can be tough to share relevant context with your team and also stay in the loop about changes as they happen. With Postman’s app for Slack, you can:- Keep your team on top of changes in Postman, with channel notifications that give helpful context, including what changed and a changelog link
- Take quick Postman actions without leaving Slack, such as adding a comment or watching or forking a collection.
- Get a 200 response faster with support from your team by sharing response links in Slack or Teams, which immediately shows if the response was successful, and if not what kind of error occurred.
- Subscribe to updates from API publishers via Slack to stay aware of the latest.
- Request access to Postman resources via Slack. If a teammate shares an internal Postman workspace that you don’t have access to, you can request access directly without leaving Slack. Then Postman admins can approve or deny the request directly within Slack.
- Take quick Postman actions without leaving Slack, such as adding a comment or watching or forking a collection.
- Get a 200 response faster with support from your team by sharing response links in Slack or Teams, which immediately shows if the response was successful, and if not what kind of error occurred.
- Subscribe to updates from API publishers via Slack to stay aware of the latest.
- Request access to Postman resources via Slack. If a teammate shares an internal Postman workspace that you don’t have access to, you can request access directly without leaving Slack. Then Postman admins can approve or deny the request directly within Slack.
Postman will be able to view:
Postman will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Postman
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Users OAuth scope is captured for sending notification and doing link unfurls on Slack. Data is retained as long as user has postman account.
https://www.postman.com/trust/security/
See also: https://www.postman.com/legal/sensitive-data-removal-policy/
Data archiving and removal policy
When user deletes their postman account the corresponding OAuth scope for the user is also removed from our system.
https://www.postman.com/legal/sensitive-data-removal-policy/
Data storage policy
As part of the OAuth scope no other user data is stored at Postman.
https://www.postman.com/trust/compliance/
Data hosting details
AWS Cloud
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Postman AI uses industry-leading large language models from major providers including AWS, Azure OpenAI, Google Cloud, and OpenAI. Supported model families may include GPT, Claude, Gemini, and similar foundation models.
LLM retention settings
Third-party LLM providers retain only limited operational metadata required for security, abuse prevention, and service monitoring. Postman may use prompts, inputs, outputs, and related feedback to improve its services, except where prohibited.
LLM data tenancy policy
Postman AI operates within Postman-managed infrastructure hosted on AWS using a multi-tenant architecture.
Customer data stored by Postman is encrypted at rest using industry-standard security controls, including AES-256 encryption.
LLM data residency policy
Postman AI data is stored in Postman-managed infrastructure hosted in the United States.
Certifications & compliance
SOC attestation
GDPR commitment
Data deletion request procedure
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Okta, Ping, Azure, Duo, OneLogin, custom SAML
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@postman.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
no
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no