Otto
An AI teammate that connects to your company's tools and does the work. Ask in Slack, get actual deliverables - reports, analysis, meeting prep, research, coordination across teams. Works with whatever tools your admin configures. Not a chatbot that suggests - a teammate that executes.Note: AI-generated responses, summaries, and other outputs may be inaccurate. Always review and verify results before relying on them.
Otto will be able to view:
Otto will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Workato
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Default retention 30 days; variable from 1 hour up to 90 days depending on plan
Data archiving and removal policy
Per ToS: Workato destroys Accounts and associated Account/Transaction/Account Holder Data within 90 days after termination.
Data storage policy
AES-256 encryption at rest; data stored in AWS regional data centers (US/EU/Singapore/Australia/Israel/Japan/Korea), isolated per account/region; optional customer-managed keys via AWS KMS.
Data center location(s)
Australia, Germany, Israel, Japan, Singapore, Republic of Korea, United States
Data hosting details
Cloud-hosted on Amazon Web Services (AWS); regional data centers in US, EU (Frankfurt), Singapore, Australia, Israel, Japan, and South Korea; also offers Virtual Private Workato (dedicated AWS VPC) for enterprise customers.
Data hosting company
Amazon Web Services (AWS)
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic Claude (claude-sonnet-5 primary, claude-sonnet-4-6, claude-haiku-4-5 as fallback/classifier model); Google Gemini (gemini-3-pro-image, gemini-3.1-flash-tts-preview, Veo 3.1 video); ElevenLabs (eleven_multilingual_v2 text-to-speech).
LLM retention settings
Zero retention
LLM data tenancy policy
Direct calls to each vendor's multi-tenant public API: Anthropic (api.anthropic.com), Google Gemini, ElevenLabs (api.elevenlabs.io). No dedicated/single-tenant deployment, no Bedrock/Vertex. Real API keys live only in an internal proxy, never the sandbox.
LLM data residency policy
United States, Israel, United Kingdom, Germany, Singapore, South Korea, India, Japan, or Australia, depending on customer's data center selection and choice of enabled features.
Certifications & compliance
SOC attestation
COPPA compliance
ISO/IEC-27001 certification
GDPR commitment
Data deletion request procedure
Per ToS: accounts and associated data destroyed within 90 days of termination. Privacy Policy also directs users to contact privacy@workato.com to request removal/deletion/correction of personal information.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2026-01-01
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Google, GitHub, Office365
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@workato.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
yes
Third party services used by this app
Anthropic, OpenAI, Eleven Labs, Google Gemini, Stripe, AWS
Uses token rotation
no