Torii Access Request Agent
Torii Access Request Agent turns access requests into a conversation. Tell the agent which app you need: by name, category, or even a vague description - and it files the request to the right approver in your company's Torii catalog. No forms, no waiting on IT to triage a ticket, no context-switching out of Slack.
What you can do
• DM the agent: "I need access to Figma" — it identifies the app, checks your eligibility, and submits the request.
• @mention it in a channel to request access.
• Review the full history of your past and pending requests.
Powered by AI
The agent uses a large language model to understand natural-language requests, match them to apps in your catalog, and route them through your existing approval rules. Like all AI tools, it can occasionally produce inaccurate responses — always confirm the app and request details before approving.
Requirements
A paid Slack plan is required to use AI agents in the Slack app container. A Torii account is required; sign up at toriihq.com or talk to your IT team.Privacy & security
Torii processes Slack messages in real time and stores only the metadata needed to complete a request. Slack data is never used to train AI models. See our privacy policy for detail.
What you can do
• DM the agent: "I need access to Figma" — it identifies the app, checks your eligibility, and submits the request.
• @mention it in a channel to request access.
• Review the full history of your past and pending requests.
Powered by AI
The agent uses a large language model to understand natural-language requests, match them to apps in your catalog, and route them through your existing approval rules. Like all AI tools, it can occasionally produce inaccurate responses — always confirm the app and request details before approving.
Requirements
A paid Slack plan is required to use AI agents in the Slack app container. A Torii account is required; sign up at toriihq.com or talk to your IT team.Privacy & security
Torii processes Slack messages in real time and stores only the metadata needed to complete a request. Slack data is never used to train AI models. See our privacy policy for detail.
Torii Access Request Agent will be able to view:
Torii Access Request Agent will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Torii Software, Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
According to Article 5.1e) of the Regulation (EU) 2016/679 General Data Protection Regulation ("GDPR"), personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. This is called the storage limitation principle.
Data archiving and removal policy
Data is deleted when it is no longer necessary for the purposes for which the personal data are processed.
Data storage policy
We and our authorized Service Providers maintain, store and process personal data in the United States of America, Israel, Canada and other locations, as reasonably necessary for the proper performance and delivery of our Services, or as may be required by law.
While privacy laws may vary between jurisdictions, Torii is committed to protect personal data in accordance with this Privacy Notice and customary industry standards, and such appropriate lawful mechanisms and contractual terms requiring adequate data protection, regardless of any lesser legal requirements that may apply in the jurisdiction to which such data is transferred.
Torii is headquartered in Israel, a jurisdiction which is considered by the European Commission, the Swiss Federal Data Protection and Information Commissioner (FDPIC), and the UK Secretary of State to be offering an adequate level of protection for the personal data of residents. We transfer personal data from the European Economic Area (EEA), Switzerland, or the UK to Israel on this basis. For data transfers from the EEA, Switzerland, or the UK to countries which are not considered to be offering an adequate level of data protection, we and the relevant data exporters and importers have entered into Standard Contractual Clauses (SCCs) as approved by the European Commission, FDPIC and UK Information Commissioner’s Office (ICO).
For more information please visit - https://www.toriihq.com/privacy-notice
Data center location(s)
United States
Data hosting details
Data is stored encrypted at rest & transit on Amazon Web Services infrastructure
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
OpenAI GPT-5.4-mini
LLM retention settings
OpenAI's standard API retention: inputs/outputs retained up to ~30 days for abuse monitoring, then deleted (except where legally required). Zero Data Retention (ZDR) is available for approved customers.
https://platform.openai.com/docs/guides/your-data
LLM data tenancy policy
OpenAI's API is multi-tenant with logical per-organization isolation. Data submitted via the API is not used to train OpenAI's models (OpenAI API default since 2023).
https://openai.com/enterprise-privacy
LLM data residency policy
By default OpenAI processes API requests in the US. Regional data residency (US/EU/etc.) is available on eligible OpenAI tiers - cite OpenAI's data residency page.
https://openai.com/enterprise-privacy/
https://platform.openai.com/docs/guides/your-data
Certifications & compliance
SOC attestation
Data deletion request procedure
When someone requests to delete their personal data, data will be delete within 7 days and deleted from backups after the backup retention time (14 days).
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2025-07-01
Executive summary is available to potential customers upon request
yes
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
security@toriihq.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no