Clover Security
Clover brings product security into the flow of work, so developers get the security answers and reviews they need without leaving the tools they already use. Our Slack integration connects Clover to your workspace, so guidance grounded in your own policies, standards, and product context is always one message away.
You can also chat with Clover, our security guidance assistant, right from Slack. Instant, contextual answers are just a message away.Clover x Slack
Not sure where to store credentials? Need a security review before you merge? Want to know which standard applies to a new feature? Mention @Clover in any channel or direct message and get an answer grounded in your organization's security policies and product context. Plus, get timely prompts from Clover so no security-relevant change ships unchecked.Get instant security answers
Stop digging through wikis, tickets, and old threads. Ask @Clover any security question in Slack and receive a clear, policy-grounded answer, along with the standards and context it drew from.
Kick off reviews from a link
Paste a pull request, spec, or ticket URL and Clover opens a security review, then posts findings back in the same thread. Every review stays linked to the conversation where the work is happening.Get flagged at the right moment
When Clover detects security-relevant work, it prompts the right person to Review, Don't review, or Snooze, right when it matters, so risks are caught early instead of at the end.See what needs your attention
Tag @Clover to see what it can do, run a review on a document, answer a framework question, or follow up on a previous review, all without leaving Slack.Pricing
Clover for Slack is included with every Clover license at no extra charge. A paid Slack plan is required. Talk to sales for Clover pricing.Clover uses LLMs to generate answers, which can sometimes make mistakes. Please verify important information.
You can also chat with Clover, our security guidance assistant, right from Slack. Instant, contextual answers are just a message away.Clover x Slack
Not sure where to store credentials? Need a security review before you merge? Want to know which standard applies to a new feature? Mention @Clover in any channel or direct message and get an answer grounded in your organization's security policies and product context. Plus, get timely prompts from Clover so no security-relevant change ships unchecked.Get instant security answers
Stop digging through wikis, tickets, and old threads. Ask @Clover any security question in Slack and receive a clear, policy-grounded answer, along with the standards and context it drew from.
Kick off reviews from a link
Paste a pull request, spec, or ticket URL and Clover opens a security review, then posts findings back in the same thread. Every review stays linked to the conversation where the work is happening.Get flagged at the right moment
When Clover detects security-relevant work, it prompts the right person to Review, Don't review, or Snooze, right when it matters, so risks are caught early instead of at the end.See what needs your attention
Tag @Clover to see what it can do, run a review on a document, answer a framework question, or follow up on a previous review, all without leaving Slack.Pricing
Clover for Slack is included with every Clover license at no extra charge. A paid Slack plan is required. Talk to sales for Clover pricing.Clover uses LLMs to generate answers, which can sometimes make mistakes. Please verify important information.
Clover Security will be able to view:
Clover Security will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Clover Security
Company headquarters location
United States
Terms of service
https://clover.security/terms-of-use
Privacy & data governance
Data retention policy
Customer data is retained for 30 days following termination or as stipulated in the customer contract. For access to the full Data Retention Policy please address: https://trust.clover.security/?itemUid=0e471a1a-a331-41c4-a646-ddccd7d48968
Data archiving and removal policy
Clover retains customer data for the duration of the customer agreement and for up to 30 days following termination, unless otherwise specified by contract or required by law. After the applicable retention period, customer data is securely deleted in accordance with Clover’s data retention and destruction procedures. Electronic data is expunged or cleared, and a certificate of data destruction can be provided upon request. Disposal may be suspended where required due to litigation, regulatory investigations, or other legal obligations.
Data storage policy
Clover stores customer data securely within its AWS-hosted production environment in the United States. Data at rest is encrypted using AES-256 with AWS Key Management Service (KMS), and data in transit is protected using TLS 1.2 or higher. Access to stored customer data is restricted through role-based access controls (RBAC), MFA, and least-privilege principles, with customer production data kept isolated from development and testing environments.
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Clover uses OpenAI, Anthropic, and Google exclusively under enterprise agreements that ensure customer data is not used to train, fine-tune, or improve their models.
LLM retention settings
Clover uses zero data retention for LLM processing. Customer data is not retained by LLM providers or used to train their models.
LLM data tenancy policy
Clover operates a multi-tenant SaaS architecture with logical isolation between customers. Customer data submitted to LLM providers is processed only in the context of the originating customer and is not shared across tenants.
LLM data residency policy
Customer data processed by Clover’s LLM providers may be processed in regions supported by those providers, in accordance with applicable contractual and data protection requirements.
Certifications & compliance
Data deletion request procedure
Our procedure for handling requests for data deletion ensures that customer data is deleted 30 days after termination of service unless otherwise specified in the customer contract. Additionally, upon request, we can delete customer data within a reasonable timeframe, typically within 7 to 14 days, to accommodate customer needs while ensuring secure and thorough deletion.
Contact support@clover.security to request deletion of data.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Google, Okta, Azure, Onelogin, PingIdentity, Jumpcloud and any SAML 2.0 compliant IDPs
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
incidents@clover.security
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
yes
Uses token rotation
no