ShakaFlow

Description Features Permissions Security & Compliance

ShakaFlow reads the tools your team already works in and finds the work that is quietly stuck, before you have to chase it.:mag_right: What it catches
Work whose status and activity disagree, such as a task nobody has touched in a week or a pull request approved days ago and never merged.:speech_balloon: Who hears about it
The owner gets a private heads-up first, with the source linked. Only what stays stuck reaches the manager, in one digest with the evidence and a suggested next step. A team with nothing unusual gets no message.:zap: Act on it in Slack
Buttons in the digest ask the owner, or move, close or re-scope the item in your tracker. Ask a follow-up in the thread and ShakaFlow answers from the same context.:hammer_and_wrench: Setup
Connect Shortcut, Jira or Linear, optionally link GitHub or GitLab, then pick a team and who gets its digest. Bring your own Anthropic or OpenAI key.:robot_face: AI disclaimer
ShakaFlow uses large language models. Digests and replies can be inaccurate or incomplete. It changes tracker items only when you approve an action. Verify anything important before you act on it.:credit_card: Slack plan
The ShakaFlow assistant panel needs a paid Slack plan. Everything else works on free plans.

ShakaFlow will be able to view:

ShakaFlow will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

We keep workspace data for as long as ShakaFlow is installed. When you uninstall it, we revoke its access right away and permanently delete the workspace's data 7 calendar days later. If you reinstall before then, the deletion is cancelled and your history is kept. Server logs (IP address, user agent) are kept for up to 30 days. Error reports (Honeybadger) are kept for 30 days. Encrypted database backups expire on their own rotation schedule. Full policy: https://shakaflow.com/privacy-policy#data-retention

Data archiving and removal policy

Data is deleted automatically 7 calendar days after uninstall, unless you reinstall first. Once deleted, it cannot be restored. A workspace admin can also email support@shakaflow.com to have all data permanently deleted at any time. We complete this within 7 business days and confirm it in writing. We handle GDPR and CCPA requests within 30 days. See https://shakaflow.com/privacy-policy#data-retention

Data storage policy

PostgreSQL databases hosted on Control Plane. All OAuth tokens, API tokens, AI provider keys encrypted at rest via ActiveRecord Encryption. TLS 1.2+ in transit. MFA-protected admin access. §6.

App/service has sub-processors

yes

Guidelines for sub-processors

https://shakaflow.com/privacy-policy

App/service uses large language models (LLM)

yes

LLM model(s) used

Anthropic (Claude) and OpenAI (GPT) models. Customers bring their own API key (BYOK), choose a default model, and can set a different model for each team.

LLM retention settings

Prompts are built on demand. We store assistant conversations, generated digests and findings, and remembered facts for history. All are deleted 7 days after uninstall or on request. Provider retention follows the customer's own provider account terms.

LLM data tenancy policy

Each organization is isolated: it uses its own encrypted Anthropic or OpenAI key and prompts only include its own data. Nothing is shared between them. We do not train models on customer data, and provider agreements forbid providers from doing so.

LLM data residency policy

Hosted on Control Plane (app and PostgreSQL). Prompts pass through ShakaFlow infrastructure to the customer's chosen provider (Anthropic or OpenAI), whose residency terms apply. Data may be processed in the US or EU, under SCCs where required.

Certifications & compliance

Security