Aleph
Aleph helps finance teams work with their data in real time.Eliminate manual exports across multiple sources with 150+ no-code data connectors that ingest and transform business data into a single source of truth. Then leverage bi-directional spreadsheet integrations and web-based dashboards to automate financial reporting and planning.Aleph frees finance teams from time-consuming, inefficient processes so they have more time to focus on strategy and impact.With the Aleph app for Slack, you can configure Slack alerts for data discrepancies and abnormalities as they arise, and chat with your financial data through Aleph's AI agent directly in Slack.Please note: Aleph agent responses are generated using large language models (AI) and may occasionally be inaccurate or incomplete. Always verify important figures in Aleph.A paid Slack plan is required to access the AI agent in the app container. Slack alerts and all other features of the app work on free Slack plans.
Aleph will be able to view:
Aleph will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Aleph Labs Inc
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Aleph shall retain data as long as the company has a need for its use, or to meet regulatory or
contractual requirements. Once data is no longer needed, it shall be securely disposed of or
archived. Data owners, in consultation with legal counsel, may determine retention periods for
their data.
Data archiving and removal policy
Data classified as restricted or confidential shall be securely deleted when no longer needed.
Aleph shall assess the data and disposal practices of third-party vendors in accordance with the
Third-Party Management Policy. Only third-parties who meet Aleph requirements for secure
data disposal shall be used for storing and processing restricted or confidential data.
When in doubt, information should be considered confidential information for disposal
purposes Aleph shall ensure that all restricted and confidential data is securely deleted from company devices prior to, or at the time of disposal.
Data storage policy
Aleph classifies data and information systems in accordance with legal requirements, sensitivity, and business criticality in order to ensure that information is given the appropriate level of protection. Data owners are responsible for identifying any additional requirements for specific data or exceptions to standard handling requirements.
Information systems and applications shall be classified according to the highest classification of data that they store or process.
To help Aleph and its employees easily understand requirements associated with different kinds of information, the company has created three classes of data.
Confidential
Highly sensitive data requiring the highest levels of protection; access is restricted to specific
employees or departments, and these records can only be passed to others with approval from
the data owner, or a company executive. Examples include:
● Customer Data
● Personally identifiable information (PII)
● Company financial and banking data
● Salary, compensation and payroll information
● Strategic plans
● Incident reports
● Risk assessment reports
● Technical vulnerability reports
● Authentication credentials
● Secrets and private keys
● Source code
● Litigation data
Restricted
Aleph proprietary information requiring thorough protection; access is restricted to employees
with a “need-to-know” based on business requirements. This data can only be distributed
outside the company with approval. This is default for all company information unless stated
otherwise. Examples include:
● Internal policies
● Legal documents
● Meeting minutes and internal presentations
● Contracts
● Internal reports
● Slack messages
● Email
Public
Documents intended for public consumption which can be freely distributed outside Aleph.
Examples include:
● Marketing materials
● Product descriptions
● Release notes
● External facing policies
Data center location(s)
United States
Data hosting details
Using cloud hosting services
Data hosting company
Google Cloud Platform
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Models from OpenAI, Anthropic, and Google (Gemini)
LLM retention settings
No data is retained by the LLM providers under ZDR terms. Application-level retention is limited to the minimum necessary for service operation and follows defined data retention policies
LLM data tenancy policy
Customer data is logically segregated per tenant and processed on a per-request basis. No cross-tenant data access is permitted
LLM data residency policy
Data is processed in supported regions based on provider availability and tenant configuration.
Certifications & compliance
Data deletion request procedure
Data deletion requests can be made through support@getaleph.com
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2023-08-07
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
We support single sign-on (SSO) with Google, Microsoft, and any identity provider with SAML support (like Okta)
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
no
Contact for security issues
security@getaleph.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
See our sub-processor list here: https://www.getaleph.com/subprocessors
Uses token rotation
no