Browse Apps
Sign In To InstallLearn More

Pipedream

Sign In To InstallLearn More
Description PermissionsSecurity & Compliance
Pipedream is an integration platform, with over 1 million customers across 100k companies. Our customers use Pipedream to build automations between 3,000+ integrated applications today. Build any workflow on any trigger.Pipedream enables you to react to events from your Slack workspace like new messages or reactions, and take action on them, either using Pipedream or any other application. You can also use Pipedream to send messages, reply to threads, or manage your Slack workspace. The Pipedream app for Slack enables you to automate any process that uses APIs.AI features may produce inaccurate or unexpected responses.

Pipedream will be able to view:

Pipedream will be able to do:

Download security and compliance information

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General
Developer
Pipedream, Inc.
Company headquarters location
United States
Terms of service
https://pipedream.com/terms
Privacy & data governance
Data retention policy
Customer data is retained for as long as the account is in active status. During this time, the customer can retrieve or delete their data via the Pipedream UI at https://pipedream.com.
Data archiving and removal policy
If a user chooses to delete their Pipedream workspace or account, Pipedream will delete all personal data held on the customer in our systems and in any third-party vendors, except where information is required to be retained for security analysis or by law.
Data storage policy
All Pipedream employees adhere to the following processes to reduce the risk of compromising Production Data: - Implement and/or review controls designed to protect Production Data from improper alteration or destruction. - Ensure that confidential data is stored in a manner that supports user access logs and automated monitoring for potential security incidents. - Ensure Pipedream Customer Production Data is segmented and only accessible to Customer authorized to access data. - All Production Data at rest is stored on encrypted volumes using encryption keys managed by Pipedream. - Encryption keys are protected from unauthorized access. Encryption key material is protected with access controls such that the key material is only accessible by privileged accounts.
Data center location(s)
United States
Data hosting details
Pipedream is hosted on the Amazon Web Services (AWS) platform. The physical hardware powering Pipedream, and the data stored by our platform, is hosted in data centers controlled and secured by AWS. You can read more about AWS’s security practices and compliance certifications here.
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
https://pipedream.com/docs/subprocessors
App/service uses large language models (LLM)
yes
LLM model(s) used
OpenAI, Anthropic
LLM retention settings
LLM-related data is retained for as long as the customer account is active. Customers can retrieve or delete their data at any time via the Pipedream UI.
LLM data tenancy policy
Our app uses OpenAI and Anthropic LLMs, which operate in cloud-hosted environments managed by those providers. Customer data sent to the LLM is transmitted securely via API and handled in line with the providers’ security and compliance practices.
LLM data residency policy
All LLM-related data handled by our app is stored on Amazon Web Services (AWS) infrastructure in the United States. Data is not stored outside this region.
Certifications & compliance
SOC attestation
https://app.drata.com/security-report/b45c2f79-1968-496b-8a10-321115b55845/27f61ebf-57e1-4917-9536-780faed1f236
Data deletion request procedure
If you would like to request erasure of data we process on the basis of consent, or otherwise object to our processing of User Personal Information, please email privacy@pipedream.com.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2024-12-31
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Google, SAML, etc
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@pipedream.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
https://pipedream.com/docs/
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
https://pipedream.com/docs/
Requires third party authorization/connections
no
Uses token rotation
no
  • Using Slack
  • Product
  • Enterprise
  • Pricing
  • Support
  • Slack Guides
  • Slack Marketplace
  • API
  • Slack
  • Jobs
  • Customers
  • Developers
  • Events
  • Blog
  • Legal
  • Privacy
  • Security
  • Terms of Service
  • Policies
  • Handy Links
  • Download desktop app
  • Download mobile app
  • Brand Guidelines
  • Slack at Work
  • Status
  • Contact Us