Sandstone Legal
The Sandstone App for Slack brings the full power of your legal team’s AI workflows directly into Slack. Designed for fast-moving companies and in-house legal teams, Sandstone turns your Slack workspace into a legal command center — handling intake, triage, document drafting, and contract redlining in real-time.With Sandstone in your Slack workspace, employees can simply @mention the app or send a message like “I need an NDA with a vendor”, and Sandstone will instantly respond with the right questions, generate the document based on your company’s legal playbook, and loop in legal only when needed.This app uses AI to generate responses, which may be inaccurate or incomplete. All AI-generated documents, answers, and recommendations must be reviewed by a qualified legal professional before use or reliance.Note: The AI Apps & Agents container in Slack requires a paid Slack plan to function.
Sandstone Legal will be able to view:
Sandstone Legal will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Glaze AI, Inc. (dba Greyball)
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Sandstone will retain Customer Data only for as long as necessary to provide services and fulfill legal or compliance obligations. Customer Data is automatically purged from transient logs within 180 days unless otherwise requested or contractually agreed.
Data archiving and removal policy
Sandstone will remove or archive Customer Data in accordance with customer instructions, applicable laws, and internal retention schedules. Customers may request deletion at any time, and Sandstone will comply within 30 days.
Data storage policy
Sandstone stores Customer Data in secure, encrypted environments using industry-standard encryption protocols both at rest and in transit. Access is restricted to authorized personnel on a least-privilege basis.
Data center location(s)
United States
Data hosting details
Cloud hosted
Data hosting company
Google (GCP)
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic, OpenAI, Google (Gemini)
LLM retention settings
By default, Sandstone does not retain LLM prompt or completion data. With each model provider, Sandstone opts out of provider-side logging and ensures that no customer data is used to train or fine-tune LLM models (via two-way data protection agreements).
LLM data tenancy policy
Sandstone LLM integrations operate in multi-tenant environments with strong data isolation controls to prevent cross-customer data exposure. All prompts and outputs are scoped to individual customer sessions with no shared context or memory across tenant
LLM data residency policy
Sandstone LLM interactions are routed through model providers operating data centers in the United States or other compliant jurisdictions, subject to customer configuration and provider guarantees.
Certifications & compliance
SOC attestation
Data deletion request procedure
Sandstone handles data deletion requests in accordance with applicable privacy laws and contractual commitments. Customers may submit a deletion request by emailing team@greyball.ai with the subject line “Data Deletion Request”. Upon verification of the requestor's identity and authorization, Sandstone will initiate the data deletion process and confirm completion within 30 days. If the data is stored with third-party sub-processors, Sandstone will coordinate deletion across all applicable systems.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2025-11-03
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Google, Microsoft
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
team@sandstone.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no