Runlayer
Runlayer lets your team's agents work in Slack easily and securely.Once connected, an agent can read and send messages, follow threads and channel history, search the workspace, work with Canvases, and look up users. Actions use the connecting person's Slack identity and permissions.Runlayer can also provision Slack apps for your agents, giving each its own presence and enabling natural teammate collaboration.Runlayer pairs this access with centralized control. Admins decide what each agent can reach and who can use it. Runtime scanning catches risky tool behavior before it reaches Slack, and agent actions are recorded in Runlayer's audit trail.
Runlayer will be able to view:
Runlayer will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Anysource, Inc. dba Runlayer
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Runlayer retains Customer Data for the duration of the customer's subscription and only as long as reasonably necessary to provide, secure, and support the Services, consistent with our Privacy Policy and Data Processing Addendum. Customer Data is processed solely on the customer's documented instructions and is not used for analytics, product improvement, model training, or any cross-customer or secondary purpose unless first converted to de-identified data.
Data archiving and removal policy
Upon expiration or termination of the Agreement, Runlayer will, at the customer's written request, delete or return Customer Data. Runlayer may retain limited copies solely as required for backup or legal-compliance purposes, securely isolated and deleted in accordance with Runlayer's retention schedule. Customers may request deletion of their data as set out in the DPA.
Data storage policy
Customer Data is stored in Runlayer's cloud infrastructure with encryption in transit and at rest, role-based access controls and multi-factor authentication, network monitoring and intrusion detection, and the additional administrative, technical, and physical safeguards described in our DPA (Annex II). Runlayer is SOC 2 Type II compliant. Each customer is served from a dedicated, isolated single-tenant or self-hosted deployment.
Data center location(s)
United States
Data hosting details
Cloud hosted on AWS, single-tenant or self-hosted: each customer runs in a dedicated, isolated deployment.
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
no
Certifications & compliance
SOC attestation
Data deletion request procedure
When a customer or data subject requests deletion of personal data, Runlayer deletes — or, at the customer's election, returns — the relevant Customer Data in accordance with our Data Processing Addendum. During the term, customers can request deletion through their administrator or by contacting privacy@runlayer.com; upon termination, Runlayer deletes or returns Customer Data on written request. Any limited copies retained for backup or legal-compliance purposes are securely isolated and deleted in line with Runlayer's retention schedule. Because Runlayer runs a single-tenant (or customer-self-hosted) architecture, deletion is scoped to the customer's dedicated deployment.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2026-05-22
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Enterprise SSO via WorkOS — any SAML 2.0 or OIDC identity provider, including Okta, Microsoft Entra ID (Azure AD), Google Workspace, OneLogin, and Ping Identity. SCIM 2.0 provisioning and group sync are also supported.
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@runlayer.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
yes
Uses token rotation
yes