Waldo.fyi
Get real-time research and strategy updates directly in your Slack workspace with Waldo. This app sends notifications from your Waldo account, helping teams stay informed on insights, alerts, and activity without leaving Slack.Waldo uses large language models (including Anthropic Claude, OpenAI GPT, Google Gemini, and xAI Grok) to analyze data and generate research summaries and insights. As with any AI-generated content, responses may occasionally be inaccurate, incomplete, or out of date. Users should verify important information before making business decisions based on Waldo's output.A valid Waldo subscription is required to use this integration.
Waldo.fyi will be able to view:
Waldo.fyi will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Curiosities, Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Curiosities Inc. retains Slack workspace data (OAuth tokens, channel configurations, and workspace metadata) only as long as necessary to provide the Waldo notification service. When users disconnect the Slack integration, all related OAuth tokens and configuration data are immediately and permanently deleted from our systems. Upon customer account termination, any remaining data is deleted within 60 days through automated deletion processes per our Data Management Policy. Data retention periods are reviewed annually to ensure compliance with business needs and regulatory requirements.
Data archiving and removal policy
Slack workspace data classified as confidential (OAuth tokens, access credentials) is securely deleted when no longer needed for service functionality. Customers can disconnect the Slack integration at any time through the Waldo application settings, which triggers immediate removal of OAuth tokens and configuration data. Upon request, Curiosities Inc. will delete all Slack-related data within 30 days unless retention is required by law or legitimate business interest. All data deletion follows secure erasure procedures in accordance with our Data Management Policy, ensuring data is irrecoverably removed from production systems.
Data storage policy
All Slack workspace data is stored in encrypted PostgreSQL databases hosted on AWS infrastructure in the United States. OAuth tokens and authentication credentials are encrypted at rest and in transit over public networks in accordance with our Cryptography Policy. Access to Slack integration data is restricted to authorized personnel with documented approval and follows principle of least privilege. Production data is never used in non-production environments. Regular security audits and access reviews ensure compliance with data protection standards. Third-party vendor security practices are assessed in accordance with our Third-Party Management Policy.
Data center location(s)
United States
Data hosting details
Cloud hosted on AWS infrastructure. PostgreSQL database hosted on AWS RDS, Serverless functions on AWS Lambda, static assets on AWS S3.
Data hosting company
Amazon Web Services (AWS)
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic Claude (Claude Opus, Sonnet, and Haiku families), OpenAI GPT (GPT-4o, GPT-4, GPT-5 families), Google Gemini, and xAI Grok
LLM retention settings
Waldo does not persist LLM inputs or outputs beyond what is needed to deliver results to the user. LLM providers process data transiently under their commercial API terms — Anthropic, OpenAI, and Google's API data policies state that API inputs and out
LLM data tenancy policy
Waldo accesses LLM providers (Anthropic, OpenAI, Google, xAI) via their commercial APIs. Each provider processes data in their own infrastructure. Waldo does not operate self-hosted or dedicated-tenant LLM instances. Customer data is sent to providers.
LLM data residency policy
Waldo's application infrastructure is hosted in the United States. Customer data sent to LLM providers is processed in the provider's data centers, primarily in the United States. Waldo does not currently offer region-specific data residency guarantees.
Certifications & compliance
SOC attestation
GDPR commitment
Data deletion request procedure
Users can disconnect the Slack integration at any time through application settings, triggering immediate deletion of OAuth tokens and configuration data. Upon account termination or formal request, all Slack workspace data is permanently deleted within 60 days following secure deletion procedures per our Data Management Policy.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2025-06-26
Executive summary is available to potential customers upon request
no
Supports Single Sign On (SSO) with the following providers
Okta, Azure AD (Microsoft)
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
no
Contact for security issues
support@waldo.fyi
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
no
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Third party services used by this app
Amazon Web Services (cloud infrastructure), Anthropic Claude API (AI capabilities), OpenAI API, PostgreSQL database, Slack Web API (messaging integration)
Uses token rotation
no