Approval Path & Slack Integration

Approval Path

Description Permissions Security & Compliance

Approval Path brings structured, multi-step approval workflows from Jira and Confluence directly into Slack, so your team can review and act on approval requests without leaving the conversation. Administrators define reusable approval paths made up of one or more steps, run them sequentially or in parallel, and assign each step to a specific user, group, email, vote, or content field. The app works the same way across both products: in Jira, approvals run in the context of an issue, while in Confluence, they run on a page. When a step needs attention, Approval Path delivers a notification to the right people in Slack.The integration solves a common problem: approval requests that sit unnoticed in Jira or Confluence and stall important work. By pushing notifications into Slack, where teams already spend their day, Approval Path reduces turnaround time, removes constant context switching between tools, and makes ownership of the next step clear. Each request carries the relevant context and the action required, whether that is an approval, a consent, or a simple notification.Customers use Approval Path with Slack for change management and release approvals, document and content review, policy sign-offs, purchase and expense requests, access requests, and any Jira or Confluence based process that needs one or more levels of authorization. Recipients can approve, reject, or abstain, optionally with a comment, and delegate a step to a colleague when they are away. Automatic and manual reminders keep approvals moving, while a full audit log records who decided what and when for compliance.To get started, an administrator connects the Jira or Confluence instance to Slack once and maps approval notifications to users or channels. From then on, every approval request flows automatically into Slack, with email fallback ensuring recipients who are not reachable in Slack still receive their notifications.

Approval Path will be able to view:

Approval Path will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

We retain application data for as long as it is needed to provide the app. Data controlled by your organization is retained for as long as your organization (the controller) requires it, that is, while the app is installed and in use. Some data can be deleted by you at any time within the app, some is deleted automatically, and some is retained for longer periods where business or legal requirements apply (for example, to ensure availability of the service, prevent fraud or abuse, facilitate dispute resolution, comply with applicable law, or enforce our license agreement, and where you have contacted our support). When data is deleted, it is safely and completely removed from our servers or retained only in anonymized form. Encrypted database snapshots are kept for backup purposes and rotated as part of our backup retention process. Specific retention periods: Backend logs: 30 days Database backups: 60 days

Data archiving and removal policy

You can remove individual records (such as approvals and definitions or Slack configuration) directly in the app at any time. Data controlled by your organization is removed when the controller no longer requires it, and is purged from our servers on uninstallation or termination of the license, after which it is safely and completely deleted or retained only in anonymized form. For backups, we take database snapshots, encrypt them (gpg with a cv25519 key) and store them off platform; archived snapshots are rotated and deleted on our retention schedule. Individuals may request access to, correction of, or erasure of their personal data under GDPR and CCPA by contacting support@warsawdynamics.com. We do not sell personal data, and some records may be retained where required or permitted by law.

Data storage policy

Application data is stored on our own servers, with logical isolation per Atlassian instance so one customer's data is not accessible to another. Data is protected with appropriate technical and organizational measures against loss, misuse and unauthorized access, processed using industry standard techniques, and access is restricted to personnel who need it. Our security team continuously monitors security systems, event logs and alerts. Database backups are encrypted (gpg with a cv25519 key) before being sent to off site object storage (Wasabi). The app processes Jira and Confluence content only within the scope granted at install time, and email delivery uses Mailgun by default, with optional Gmail API, Outlook API or a custom SMTP server if the customer configures one.

Data center location(s)

Poland

Data hosting details

The app backend runs on our own servers hosted by OVH in Warsaw, Poland (within the EU). Hosting, application logic and the primary database are managed by Warsaw Dynamics on this infrastructure. Encrypted database snapshots are stored off site on Wasabi for backup and disaster recovery. The app itself is distributed through the Atlassian Marketplace and is Cloud Fortified, and Warsaw Dynamics is an Atlassian Platinum Marketplace Partner meeting Atlassian's enhanced security and compliance requirements. Data transfers are protected with appropriate safeguards, including the European Commission's Standard Contractual Clauses where data is transferred outside the EEA.

Data hosting company

OVH (OVHcloud), data center in Warsaw, Poland

App/service has sub-processors

yes

Guidelines for sub-processors

https://docs.warsawdynamics.com/content/811304/warsaw-dynamics-resources/1255604227

App/service uses large language models (LLM)

Certifications & compliance

Data deletion request procedure

Most data processed by our apps is controlled by the customer's organization, which acts as the data controller, while Warsaw Dynamics acts as the data processor. Our deletion procedure reflects this: Self service deletion. Customers can delete most of their data directly within the app at any time (for example by removing approvals, definitions and related configuration). This data is removed from our servers as part of normal operation. Deletion on uninstall or termination. When the app is uninstalled, or the license is terminated, the data we hold on behalf of the organization is removed from our active systems and is either safely and completely deleted or retained only in anonymized form. Encrypted database backups (gpg encrypted snapshots stored off site) are rotated and purged on our backup retention schedule, after which the data no longer exists in backups. Requests from individuals. Individuals can exercise their right to erasure under GDPR and CCPA by emailing support@warsawdynamics.com. We accept these requests only through this channel and not by other means such as fax or social media. We may require verification of the requester's identity before acting. Where Warsaw Dynamics is the controller (for example for marketing data, or where someone contacted us outside of an organization), we action the request directly. Where we are the processor on behalf of an organization, we direct the request to that organization, since they control the data, and we assist them in fulfilling it. Limits. Deletion may not be complete or immediate where the law requires or permits us to retain certain data, for example to comply with legal obligations, prevent fraud or abuse, resolve disputes, or enforce our license agreement. In those cases we retain only the minimum necessary and delete it once the obligation ends. We do not sell personal data. Timeframe. We review and respond to deletion requests within a reasonable time frame and in line with applicable data protection law.

HIPAA compliant

While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.

Security