Orchestra
Orchestra's app for Slack proactively notifies users of data pipeline failures, ensuring swift response and minimising downtime. Keep your operations seamlessly orchestrated with real-time alerts.
Orchestra will be able to view:
Orchestra will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Orchestra Technologies Limited
Company headquarters location
United Kingdom
Terms of service
Privacy & data governance
Data retention policy
Orchestra retains Personal Data about you as necessary to provide our services or perform our business or commercial purposes related to data collection. When determining retention periods for specific data categories, we consider factors such as the source of the data, the purpose of collection, and legal obligations. In some instances, we may retain Personal Data for longer periods, particularly if required by legal obligations, dispute resolution, fee collection, or as permitted or mandated by applicable laws, rules, or regulations. Additionally, we may retain information in a de‑identified or aggregated form that does not personally identify you. If you have questions regarding data security or retention, please contact us at support@getorchestra.io. For data shared through an Orchestra organization, the third‑party administrator retains shared Personal Data in accordance with their data retention policies.
Data archiving and removal policy
Orchestra retains Personal Data about you as necessary to provide our services or perform our business or commercial purposes related to data collection. When determining retention periods for specific data categories, we consider factors such as the source of the data, the purpose of collection, and legal obligations. In some instances, we may retain Personal Data for longer periods, particularly if required by legal obligations, dispute resolution, fee collection, or as permitted or mandated by applicable laws, rules, or regulations. Additionally, we may retain information in a de‑identified or aggregated form that does not personally identify you. If you have questions regarding data security or retention, please contact us at support@getorchestra.io. For data shared through an Orchestra organization, the third‑party administrator retains shared Personal Data in accordance with their data retention policies.
Data storage policy
Files are securely stored in private AWS S3 buckets. All files are encrypted both at rest and in transit. Access is controlled via authenticated endpoints within Orchestra. Files are streamed through the platform and are not directly accessible. Database data is hosted on AWS Aurora and DynamoDB. It is encrypted at rest and during transit, with access restricted to specifically authorized AWS resources. The database is network isolated, and backups are fully encrypted.
Data center location(s)
United Kingdom
App/service has sub-processors
no
App/service uses large language models (LLM)
no
Certifications & compliance
SOC attestation
ISO/IEC-27001 certification
Data deletion request procedure
When a request to delete user data is made it enters our system and is flagged. A support worked is then assigned the task of deleting that data. They make requests to the developers of our different internal systems to delete that specific users data. These requests can take up to 14 days to complete. Once all data is deleted the user is notified as such.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Okta, Google, Microsoft
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
support@getorchestra.io
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no