Ack
Ack makes compliance simple and auditable, right inside Slack.For HR, Legal & Compliance Teams:
• Create a campaigns with
• Target specific users or user groups
• Schedule sends or dispatch immediately
• Track acknowledgement status in real-time
• Export audit-ready CSV reportsFor Employees:
• Receive clear DM requests with policy details
• Acknowledge with a single click
• View all pending campaigns all within SlackBuilt for Audits:
• Immutable acknowledgement logs with timestamps
• Exportable reportsStop chasing email replies. Start collecting where your team already works.
• Create a campaigns with
/ack• Target specific users or user groups
• Schedule sends or dispatch immediately
• Track acknowledgement status in real-time
• Export audit-ready CSV reportsFor Employees:
• Receive clear DM requests with policy details
• Acknowledge with a single click
• View all pending campaigns all within SlackBuilt for Audits:
• Immutable acknowledgement logs with timestamps
• Exportable reportsStop chasing email replies. Start collecting where your team already works.
Ack will be able to view:
Ack will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Privacy & data governance
Data retention policy
All data is stored on Google Cloud Platform. Application data (workspace installation, campaigns, and acknowledgement records) is held in a managed PostgreSQL database. Generated CSV compliance reports are stored in Google Cloud Storage. All data is encrypted in transit (TLS) and encrypted at rest using Google Cloud's default encryption. The only personal identifiers stored are Slack user IDs; we do not store names, email addresses, or the content of policy documents (only a link to them). Slack OAuth access tokens are stored to operate the app and are erased when the app is uninstalled. Access to the production database and storage is restricted to the app operator.
Data archiving and removal policy
Installation and campaign data is retained for as long as the app remains installed in the workspace. Acknowledgement and audit-event records are retained as a compliance audit trail for the life of the installation, since providing durable proof of acknowledgement is the app's core purpose. Generated CSV export files are temporary: their download links expire after 1 hour and the files are automatically deleted from storage within 1 day.
Data storage policy
Within the app, campaigns can be "archived", which hides them from the active view while retaining their records. When the app is uninstalled from a workspace, the stored Slack access tokens are erased; the installation record is retained only as a soft-deleted audit entry. A workspace owner may request full deletion of their workspace's data at any time by contacting support@getack.co, after which all associated records are permanently deleted.
Data hosting details
Cloud hosted
App/service has sub-processors
no
App/service uses large language models (LLM)
no
Certifications & compliance
Data deletion request procedure
When someone requests data deletion via support@getack.com, we will delete all data records, this action cannot be undone and once complete, we will respond to the same email when completed.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
no
Contact for security issues
support@getack.co
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no