Harmony
Harmony is an AI-native ITSM and ESM platform that lives in Slack. Employees ask for what they need in a DM or channel, and AI agents get it done: app access, MFA resets, a new laptop, a PTO policy answer, or a full onboarding across your HRIS, identity provider and device tools. Anything that needs a human becomes a ticket with full context, worked without leaving Slack.:speech_balloon: Ask, don't file
No forms, no portal. "I need access to Salesforce" or "how many WFH days do I have?" is the whole ticket.:zap: Resolved, not deflected
Agents verify the requester and complete the request across Okta, Entra ID, Google Workspace, Jamf, Intune, Workday, Iru, Jira and 100+ integrations.:white_check_mark: Approvals in one click
Managers, app owners and budget holders approve or deny from a Slack message.:ticket: Tickets that carry context
Escalations land in the right desk (IT, HR, Finance, Facilities, Security) with the conversation and a suggested resolution attached. Turn any channel message into a ticket with an emoji.:books: Knowledge that writes itself
Answers are generated from resolved requests and your docs, surfaced in-thread with the source. Internal and employee-facing knowledge stay separate.:lock: Built for sensitive requests
SOC 2 Type II, HIPAA, ISO 27001. Scoped permissions per desk and requester, full audit log, HR data never visible to IT. More info at https://harmony.io/security:chart_with_upwards_trend: Results
Customers auto-resolve up to 90% of employee requests. Cyera resolves 89% automatically and replaced Jira in two days.:rocket: Getting started
Requires a Harmony workspace. Book a demo at https://harmony.io/demo, connect Slack in minutes, and the first agents (access, password and MFA resets, onboarding) work out of the box.Support: support@harmony.io · Docs: https://docs.harmony.io · Status: https://status.harmony.io* Harmony uses large language models (LLMs) to generate responses, summaries, and other outputs. These outputs may be inaccurate, incomplete, or misleading. Please verify information before acting on it.
No forms, no portal. "I need access to Salesforce" or "how many WFH days do I have?" is the whole ticket.:zap: Resolved, not deflected
Agents verify the requester and complete the request across Okta, Entra ID, Google Workspace, Jamf, Intune, Workday, Iru, Jira and 100+ integrations.:white_check_mark: Approvals in one click
Managers, app owners and budget holders approve or deny from a Slack message.:ticket: Tickets that carry context
Escalations land in the right desk (IT, HR, Finance, Facilities, Security) with the conversation and a suggested resolution attached. Turn any channel message into a ticket with an emoji.:books: Knowledge that writes itself
Answers are generated from resolved requests and your docs, surfaced in-thread with the source. Internal and employee-facing knowledge stay separate.:lock: Built for sensitive requests
SOC 2 Type II, HIPAA, ISO 27001. Scoped permissions per desk and requester, full audit log, HR data never visible to IT. More info at https://harmony.io/security:chart_with_upwards_trend: Results
Customers auto-resolve up to 90% of employee requests. Cyera resolves 89% automatically and replaced Jira in two days.:rocket: Getting started
Requires a Harmony workspace. Book a demo at https://harmony.io/demo, connect Slack in minutes, and the first agents (access, password and MFA resets, onboarding) work out of the box.Support: support@harmony.io · Docs: https://docs.harmony.io · Status: https://status.harmony.io* Harmony uses large language models (LLMs) to generate responses, summaries, and other outputs. These outputs may be inaccurate, incomplete, or misleading. Please verify information before acting on it.
Harmony will be able to view:
Harmony will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Privacy & data governance
Data retention policy
Harmony's retention policy is managed according to customer's preferences - either we do not delete data at all, or based on time frame per customer's configuration, or per specific user request with respect to GDPR policies.
Data archiving and removal policy
Harmony will remove data only per user's request with respect to GDPR policies
Data storage policy
Harmony stores customer data within the region requested by a customer, with respect to GDPR policies
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic's Claude, OpenAI's ChatGPT, AWS Nova
LLM retention settings
Harmony's LLM do not store any data, only API based
LLM data tenancy policy
Haromny's LLM operates in a multi tenancy manner. However, each tenant data is accessed and managed separately, and models are operating within a tenant's region only.
LLM data residency policy
Harmony's LLM do not store any data, only API based
Certifications & compliance
SOC attestation
CSA Star level
GDPR commitment
Data deletion request procedure
When someone requests to delete his/her data, it is done by submitting a request to privacy@harmony.io.
The request is being processed by our support & engineering team and must be completed as late as 30 days since the request was created.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2025-07-31
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Google WS, Entra ID
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
privacy@harmony.io
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
AWS, Descope
Uses token rotation
no