Browse Apps
Sign In To InstallLearn More

ComplianceCow Connector for Slack

Sign In To InstallLearn More
Description PermissionsSecurity & Compliance
Manage enterprise security risk and compliance through Slack.Security GRC is a team sport. ComplianceCow is a SaaS platform that allows you to collaborate security controls across your different teams through Slack.Think of us as Security GRC meets Policy Engine delivered over Slack!We have too much to say about us. We have done our best to keep things simple. If you don't have time to read through our user guide, simply try us out. Tell us what you like about us and what we can do better. From the bot, say feedback.What can you do with ComplianceCow on Slack?
 - Deploy standard or custom security assessments and templates.
      - You can use our existing templates for PCI-DSS, FedRamp, NIST and many more.
      - You can download, customize and build your own security assessment templates.
      - You can configure default checklists, notes, weights and priorities.
      - Assign controls and checklists to one or more users. We have an interesting concept of a multi-party assignment. Check it out!
 - Manage risk data and control evidences in a single pane of glass.
      - Collect risk data and evidences. We separate the evidence data from the metadata (for example, sort order). This allows us to do some pretty cool things such as linking and associating multiple evidence records.
      - Assign evidences to one or more users.
      - Version control risk data.
 - Create issues with Jira and ServiceNow and provide a 360° view.
 - Nested, weighted average score of your security controls.
 - Standard and custom reports. For example, you can report on your PCI-DSS in the ROC format out of the box.All of this is great. What makes us even more cool are the following:
 - Policy engine to automate security controls for cloud and Kubernetes applications
      - If you don't like our automation engine, you can deploy your own scripts to collect security data or control evidence.
 - Data library/plugin, Partner APIs and cowctl CLI
      - Integrate ComplianceCow into your CI/CD pipeline.
      - Build your own security metrics on jupyter notebook using ComplianceCow.
      - Integrate ComplianceCow with your other enterprise and OSS tools.

ComplianceCow Connector for Slack will be able to view:

ComplianceCow Connector for Slack will be able to do:

Download security and compliance information

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General
Developer
ContiNube
Company headquarters location
United States
Terms of service
https://compliancecow.com/trust/termsandconditions
Privacy & data governance
Data retention policy
We retain data for 90 days for every customer, in accordance with the agreement we have with the customer.
Data archiving and removal policy
Our archival policy aligns with our data retention policy of 90 days. We also provide customers the capability to self-remove their data on demand.
Data storage policy
All customer sensitive credentials are stored in encrypted key vault. Also, all data are encrypted at rest.
Data center location(s)
United States
Data hosting details
We run our services on Azure Kubernetes Services
Data hosting company
Azure
App/service has sub-processors
no
App/service uses large language models (LLM)
no
Certifications & compliance
Data deletion request procedure
Upon notification from the customer or in accordance with the data retention/archival policy, we run automated scripts to delete all forms of data for a given customer domain. The customer can also request deletion on demand at support@continube.com
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
no
Contact for security issues
support@continube.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
OAuth services from Google & Microsoft
Uses token rotation
no
  • Using Slack
  • Product
  • Enterprise
  • Pricing
  • Support
  • Slack Guides
  • Slack Marketplace
  • API
  • Slack
  • Jobs
  • Customers
  • Developers
  • Events
  • Blog
  • Legal
  • Privacy
  • Security
  • Terms of Service
  • Policies
  • Handy Links
  • Download desktop app
  • Download mobile app
  • Brand Guidelines
  • Slack at Work
  • Status
  • Contact Us