Exabot

Description Permissions Security & Compliance

Agentic AI SOC platformExaforce is an agentic AI SOC platform that transforms how security teams detect, triage, investigate, and respond to threats. By leveraging AI agents, called Exabots, Exaforce delivers high-accuracy detections, streamlines alert triage, reduces false positives, accelerates threat hunting, and orchestrates response, helping SOC teams cut response times and stay ahead of emerging cyber threats.What you can do with Exaforce in SlackWith the Exaforce integration for Slack, security teams can:
• Receive real-time alerts on potential threats and suspicious activity
• Confirm suspicious behavior fast with interactive messages to users and managers.
• Stay in sync with critical security updates, all without leaving SlackHow Exaforce Works
Exaforce integrates with IaaS, SaaS, identity, and endpoint data sources to ingest alerts, detect threats, and streamline triage and investigation. When an alert is triggered, Exaforce enriches it with configuration, code, identity, and threat intelligence context, then runs an AI-driven investigation to recommend an outcome. If additional validation is required, Exabots engage users and managers directly in Slack to confirm activity and intent. Throughout the process, SOC teams receive real-time updates in Slack, giving them full visibility into the investigation and the Exabot’s actions.Disclaimer: Exabots leverage AI and can make mistakes. Outputs should be validated before making decisions.Find us at exaforce.com to learn more.

Exabot will be able to view:

Exabot will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

Exaforce will retain customer data in accordance with Exaforce's Data Management Policy that supports compliance and regulations like SOC2, ISO27001, GDPR, USDP, HIPAA, and PCI DSS. Exaforce retains Customer Personal Data only for as long as necessary to provide services under the Agreement, comply with Customer instructions, and meet applicable legal or regulatory requirements. Data is stored securely and subject to strict access controls, with retention periods aligned to the principle of data minimization. Where required, Exaforce may retain data for longer periods if mandated by law, but will not use it for purposes outside the scope of the Data Processing Addendum (DPA). Upon expiration or termination of the Agreement, Exaforce will promptly delete or return all Customer Personal Data in accordance with Section 4.7 of the DPA, unless retention is legally required. Backups and logs are purged on regular cycles (typically 30–90 days for backups, one to three years for logs), while archived or anonymized data may be retained for compliance or forensic purposes under strict security measures. Subprocessors are contractually bound to apply the same standards. Exaforce reviews its retention practices regularly to ensure compliance with Data Protection Laws and the DPA. All data destruction processes are securely executed and documented, and any exceptions (e.g., customer-specific retention requirements) are formally agreed upon in writing. For more information, visit https://www.exaforce.com/policies/data-processing-addendum

Data archiving and removal policy

Exaforce will remove customer data in accordance with Exaforce's Data Management Policy that supports compliance and regulations like SOC2, ISO27001, GDPR, USDP, HIPPA, and PCI DSS. Exaforce shall securely destroy or return and not retain, all Customer Personal Data Processed subject to this DPA in its possession promptly after the expiry or termination of the Agreement, except where retention of Customer Personal Data is required by any law, regulation, or government or regulatory body, in which case the protections of this DPA shall continue to apply to such retained Customer Personal Data for the period of time during which it is retained. For more information, visit https://www.exaforce.com/policies/data-processing-addendum

Data storage policy

Exaforce will store customer data in accordance with Exaforce's Data Management Policy that supports compliance and regulations like SOC2, ISO27001, GDPR, USDP, HIPAA, and PCI DSS. Exaforce stores Customer Personal Data exclusively in secure, access-controlled environments that meet industry and regulatory standards. All data is hosted on trusted cloud infrastructure providers (such as AWS) with strong physical, technical, and administrative safeguards. Data is encrypted both in transit (TLS 1.2+) and at rest (AES-256 or equivalent), ensuring protection against unauthorized access or disclosure. Customer Personal Data is logically separated within Exaforce systems to prevent cross-customer access, and access rights are restricted to authorized personnel on a least-privilege basis. Subprocessors providing storage or infrastructure services are contractually bound to maintain equivalent security, confidentiality, and compliance obligations as set forth in the Data Processing Addendum (DPA). Exaforce maintains resiliency and continuity through redundant storage, regular backups, and disaster recovery processes, while ensuring that backup and recovery copies are subject to the same security and access controls as production data. Storage practices are reviewed periodically to maintain compliance with Data Protection Laws and industry best practices. For more information, visit https://www.exaforce.com/policies/data-processing-addendum

Data hosting company

AWS

App/service has sub-processors

yes

Guidelines for sub-processors

https://www.exaforce.com/policies/data-processing-addendum

App/service uses large language models (LLM)

yes

LLM model(s) used

Exaforce uses a proprietary AI model

LLM retention settings

Data submitted through the Slack App is retained for at most 12 months from the date of submission, after which it is automatically purged in accordance with Exaforce's data lifecycle policy.

LLM data tenancy policy

Data submitted through the Slack App is processed exclusively within your Exaforce tenant and is never shared across tenants. All processing occurs within the region of your Exaforce deployment.

LLM data residency policy

All data transmitted to Exaforce via the Slack App remains within your tenant's designated region. Exaforce does not transfer or replicate data outside the region of your deployment.

Certifications & compliance

Security