Rippling AI
Rippling is the all-in-one platform for HR, IT, and Finance — payroll, benefits, devices, apps, and more, all built on one employee record.The problem: Getting an answer from Rippling usually means logging in, searching, or asking someone else. That breaks focus and slows people down.• Rippling AI in Slack* brings those answers to the place where employees already spend their time: Slack. Mention @Rippling AI in a channel, DM it directly, or add it to a group DM to:
• Ask questions using your live Rippling data — like what the current recruiting pipeline looks like, or who on your team hasn't submitted a timesheet
• Kick off actions like making a payroll adjustment or updating your 1:1 doc in a group DM with your manager
• Get help with common HR and IT requests, like benefits questions or access requestsHow it works: Rippling AI answers using your own Rippling permissions — the same access you already have when you log into Rippling directly. If you don't have access to something in Rippling, Rippling AI won't share it with you in Slack either.Please note: Responses in shared channels are visible to everyone in that channel. For sensitive topics, we recommend messaging Rippling AI directly. As with any AI-powered tool, responses may occasionally be inaccurate or incomplete — please verify anything important before acting on it. A paid plan with Slack is required.
• Ask questions using your live Rippling data — like what the current recruiting pipeline looks like, or who on your team hasn't submitted a timesheet
• Kick off actions like making a payroll adjustment or updating your 1:1 doc in a group DM with your manager
• Get help with common HR and IT requests, like benefits questions or access requestsHow it works: Rippling AI answers using your own Rippling permissions — the same access you already have when you log into Rippling directly. If you don't have access to something in Rippling, Rippling AI won't share it with you in Slack either.Please note: Responses in shared channels are visible to everyone in that channel. For sensitive topics, we recommend messaging Rippling AI directly. As with any AI-powered tool, responses may occasionally be inaccurate or incomplete — please verify anything important before acting on it. A paid plan with Slack is required.
Rippling AI will be able to view:
Rippling AI will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Rippling
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Rippling primarily acts as a data processor for the customer personal data we receive, collect, process, and store on behalf of our customers in the course of providing our products/services, governed by Rippling’s Data Processing Addendum: app.rippling.com/legal/dpa (DPA). We retain Rippling customer data for as long as it is required in order to fulfill the relevant purposes described in the DPA, or for other essential purposes such as complying with our legal obligations, and in accordance with our data retention policies.
Data archiving and removal policy
Rippling primarily acts as a data processor for the customer personal data we receive, collect, process, and store on behalf of our customers in the course of providing our products/services, governed by Rippling’s DPA. We retain Rippling customer data for as long as it is required in order to fulfill the relevant purposes described in the DPA, or for other essential purposes such as complying with our legal obligations, and in accordance with our data retention policies. Upon customer’s request on termination, we will delete any customer data from our systems (unless further preservation is required or otherwise prohibited by law).
Data storage policy
Rippling primarily acts as a data processor for the customer personal data we receive, collect, process, and store on behalf of our customers in the course of providing our products/services, governed by Rippling’s DPA. We store Rippling customer data for as long as it is required in order to fulfill the relevant purposes described in the DPA, or for other essential purposes such as complying with our legal obligations, and in accordance with our data retention policies. All customer data is stored in accordance with our security practices, as described in our Security Whitepaper (rippling.com/trust/security), including encryption in transit and at rest, account security, and regular pen testing.
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
We use foundation AI models primarily from OpenAI and Anthropic, either through a direct integration or through an intermediary third-party AI service provider. All AI service providers with access to customer personal data are our sub-processors.
LLM retention settings
Where feasible, Rippling enforces zero or limited data retention with AI providers to prevent post-processing storage. AI vendors accessing personal data act as sub-processors under our DPA. View the list at https://trust.rippling.com/.
LLM data tenancy policy
Rippling AI uses multi-tenant architecture with logical per-customer isolation. Requests to LLM providers (e.g., OpenAI, Anthropic via AWS Bedrock) run in isolated API sessions with no cross-customer data sharing. Data isn't used to train provider models.
LLM data residency policy
All AI providers process data primarily within the US (e.g., OpenAI's API is US-based). Anthropic via AWS Bedrock may use cross-region inference for latency, potentially routing outside the US.
Certifications & compliance
Data deletion request procedure
We carefully review all data subject requests we receive, including data deletion requests, to determine whether it relates to data for which Rippling acts as its own data controller, or as a data processor to our customers. If the request pertains to our data processor role, as outlined in our DPA (https://app.rippling.com/legal/dpa), we notify the relevant customer of the request, redirect the data subject to the customer as the data controller, and provide reasonable assistance to the customer in responding to such requests. All data subject requests can be addressed to privacy@rippling.com.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2026-04-24
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Microsoft Entra & Active Directory, Google Workspace, OneLogin, JumpCloud
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@rippling.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no