Pave
Fueled by real-time compensation data, predictive machine learning, and AI-infused workflows, Pave is the only end-to-end compensation intelligence platform built exclusively for the total rewards community.As a workflows customer, you can enable your standard in-app and email notifications on Slack:
- Stay in the loop with planning windows and comments on your merit cycles during Compensation Planning :memo:- Notify your employees when they receive a new reward letter :incoming_envelope:- Find out when your candidates are viewing their Visual Offer Letters :eyes:
- Stay in the loop with planning windows and comments on your merit cycles during Compensation Planning :memo:- Notify your employees when they receive a new reward letter :incoming_envelope:- Find out when your candidates are viewing their Visual Offer Letters :eyes:
Pave will be able to view:
Pave will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Pave
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
The Pave Slack app stores one piece of data from Slack: the bot access token issued when a customer admin connects their Slack workspace. Pave does not store Slack user IDs, workspace IDs, channel data, or message content from Slack. Pave also keeps a record of each notification it sends to Slack (for example, "a candidate viewed their offer letter"), which is content generated by Pave. Pave retains the token and these notification records as long as needed to provide Pave's products and as required by law, and deletes them on the customer's request. Daily database backups are retained for 30 days and then deleted automatically.
Data archiving and removal policy
When a customer's agreement ends, Pave returns or deletes the customer's data, at the customer's choice. Pave deletes data using Google Cloud deletion functions and removes its access to the deleted data within 30 days. Copies in database backups are purged automatically when the 30-day backup retention period ends. To remove the Slack connection at any time, the customer can uninstall the Pave app from their Slack workspace, which revokes the token on Slack's side, and email support@pave.com to have Pave delete the stored token.
Data storage policy
Pave runs on Google Cloud Platform, and customer data is stored in Google data centers in the United States. The Slack bot token is encrypted with Google Cloud KMS (AES-256) before it is written to Pave's database, and it is decrypted only when a notification is sent. All data in Pave's databases and cloud storage is encrypted at rest with AES-256, and data in transit is encrypted with TLS 1.2 or higher. Slack notifications are delivered through Courier, a notification delivery provider, which receives the token, the recipient's email address, and the notification content in order to deliver each message. Courier is listed as a Pave subprocessor at https://trust.pave.com.
Data center location(s)
United States
Data hosting details
Cloud hosted on GCP
Data hosting company
GCP
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
no
Certifications & compliance
Data deletion request procedure
Customers request deletion of their data, including their Slack connection, by emailing support@pave.com. Requests must come from the customer, and Pave may ask for additional identity verification. Pave removes its access to deleted data within 30 days, and copies in backups are purged within the 30-day backup retention period. If an individual user contacts Pave directly, Pave refers the request to their employer (the Pave customer) and helps the customer respond. A customer can also stop all Slack notifications immediately by uninstalling the Pave app from their Slack workspace.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Google, Okta
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@pave.com
Has a vulnerability disclosure program
no
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no