Candis
Candis is an AI-powered accounting platform that helps finance teams automate invoice processing, expense management, and financial workflows.Keeping track of accounting tasks across multiple tools can slow down finance teams. The Candis app for Slack solves this by bringing your accounting workflows directly into your workspace, so your team can stay on top of things without switching context.With Candis in Slack, you can:
- Ask questions about invoices, expenses, and transactions
- Get reminded about pending invoices and transactions that need your attention
- Get notified about missing receipts and pending approvals
- Take actions on your Candis account through natural conversation
- Stay updated on your accounting workflows without leaving SlackCandis is a paid service. For pricing details, visit https://www.candis.io/en/price:warning: Candis uses a Large Language Model (Anthropic Claude Sonnet) to process and respond to your messages. As with any AI-powered tool, responses may occasionally be inaccurate. Always verify important information within the Candis platform.
- Ask questions about invoices, expenses, and transactions
- Get reminded about pending invoices and transactions that need your attention
- Get notified about missing receipts and pending approvals
- Take actions on your Candis account through natural conversation
- Stay updated on your accounting workflows without leaving SlackCandis is a paid service. For pricing details, visit https://www.candis.io/en/price:warning: Candis uses a Large Language Model (Anthropic Claude Sonnet) to process and respond to your messages. As with any AI-powered tool, responses may occasionally be inaccurate. Always verify important information within the Candis platform.
Candis will be able to view:
Candis will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Privacy & data governance
Data retention policy
Candis stores customer data in accordance with contractual obligations and GDPR requirements. After contract termination, customers have six weeks to retrieve their data. After this period, Candis permanently deletes all stored content and documents. Extended storage can be arranged monthly upon request.
Data archiving and removal policy
Candis permanently deletes all stored customer content and documents after the customer-specified storage period ends or after six weeks from contract termination if no extension is requested. Deletion is done securely and completely as per GDPR Article 17 standards.
Data storage policy
Candis stores customer data on secure, server-based cloud infrastructure in Germany. Data is hosted with multiple data protection measures in compliance with GDPR standards. Candis uses external service providers for data processing, all bound by data processing agreements. Encryption and access controls protect data from unauthorized access.
Data center location(s)
Germany
App/service has sub-processors
no
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic Claude Sonnet (via AWS Bedrock)
LLM retention settings
AWS Bedrock does not retain customer input or output data. No conversation data is stored by the LLM provider. Candis does not use customer data for model training or fine-tuning.
LLM data tenancy policy
Candis uses AWS Bedrock which processes data in isolated, single-tenant environments. No customer data is shared across tenants or used for model training.
LLM data residency policy
LLM inference runs on AWS Bedrock in the EU (Frankfurt) region. Customer data does not leave the EU during LLM processing.
Certifications & compliance
GDPR commitment
Data deletion request procedure
Candis handles data deletion requests in accordance with GDPR Article 17 (Right to be Forgotten). When a customer or their users request data deletion, Candis permanently removes all related personal data from its systems within reasonable timeframes, typically within 30 days. Customers can request data deletion through their account settings or by contacting our support team at datenschutz@candis.io. The deletion process is documented and confirmed to the requestor. We retain no backup copies after deletion except where legally required.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
We offer Google Social Login, and we can configure any IDP that supports SAML or OIDC.
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@candis.io
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
yes
Uses token rotation
no