Factory Connector
Factory Connector connects your Slack account to Droid, Factory’s AI agent for software development and other work. From Factory’s CLI, desktop app, or web app, ask Droid to find relevant messages and threads, summarize conversations, look up channels and teammates, and reference shared files while working on a task.You can also ask Droid to act in Slack, such as posting an update or thread reply, managing a channel, adding a reaction, or updating your status. Actions run on behalf of the person who connected Slack, within that person’s Slack permissions, and follow Factory’s autonomy and approval settings. This connector is used from Factory; it is not a Slack bot that automatically responds to channel mentions or direct messages.To connect, sign in to Factory, select the organization where you want to use Slack, open Settings > Connectors, find Slack, select Connect, and complete Slack’s authorization flow. Return to Factory and ask Droid, for example, “Summarize the recent discussion in #engineering” or “Find the Slack thread about this issue.” A Factory service subscription is required. Disconnect at any time in Settings > Connectors to stop future connector access for that organization.Each connection belongs to the authorizing Factory user and organization; it is not shared with other users. The connector cannot give you access to content or actions that your Slack account cannot access. Review retrieved content before sharing it with others.AI accuracy notice: Droid uses large language models and may generate inaccurate or incomplete responses, summaries, or other outputs. Verify important information against the original Slack messages and review proposed actions before relying on them.
Factory Connector will be able to view:
Factory Connector will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
The San Francisco AI Factory
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Factory retains personal information only as long as needed to provide the service, fulfill the purposes for which it was collected, resolve disputes, and meet legal obligations. Standard account information is retained for the active life of the account. Enterprise administrators configure session retention and storage under their agreement. Under the Data Processing Agreement, customer personal data is processed for the agreement term and returned or deleted within 60 days after completion, termination, or expiration, subject to standard retention in encrypted backup archives and legally required or authorized retention. Information no longer needed is deleted, anonymized, or aggregated. Slack content included in prompts, tool results, or session history follows the applicable account and session retention settings.
Data archiving and removal policy
Users can disconnect Slack in Factory Settings > Connectors to remove their connection for the active organization and stop future access through it. Disconnecting is not a request to erase existing session history or the source messages in Slack. When retained personal information is no longer needed, Factory deletes, anonymizes, or aggregates it. Under the Data Processing Agreement, Factory returns or deletes customer personal data within 60 days after completion, termination, or expiration, subject to standard retention in encrypted backup archives and applicable legal exceptions. If return or destruction is impracticable or prohibited by law, Factory blocks further processing except necessary hosting or legally required processing and continues protecting the retained data.
Data storage policy
Factory processes data primarily in the United States using its infrastructure and authorized service providers. Stored data may include account details, integration identifiers and credentials, and user content such as prompts, retrieved Slack context, session history, and generated outputs, as needed to provide the service. Slack connections are scoped to the authorizing Factory user and active organization, not shared organization credentials. Enterprise workspace data is processed on customer instructions under the applicable agreement and DPA; administrators determine retention and storage settings. Model requests are sent to the configured model provider or gateway. Customer-hosted components remain subject to the customer deployment and routing configuration. International transfers use applicable safeguards, including Standard Contractual Clauses. Factory maintains technical, administrative, and physical safeguards against unauthorized access, loss, alteration, and disclosure.
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
User/org-selected models: OpenAI GPT, Anthropic Claude, Google Gemini, xAI Grok, and supported open models; BYOK/custom endpoints are also supported. The enabled model catalog varies by organization and is published at https://docs.factory.com/models.
LLM retention settings
Retention depends on the selected endpoint. Enterprise zero-data-retention endpoints are available. Anthropic Mythos-class models require admin opt-in and retain data for 30 days for trust and safety. BYOK/custom endpoints follow their provider policy.
LLM data tenancy policy
Each Slack connection is isolated to one Factory user and organization. LLM processing uses the configured provider or gateway. Customer-hosted models remain under customer control; enterprise processing follows the customer DPA and model settings.
LLM data residency policy
Factory primarily processes data in the United States. LLM processing location depends on the selected provider, endpoint, and routing configuration. Enterprise residency commitments follow the customer agreement; there is no universal model region.
Certifications & compliance
SOC attestation
COPPA compliance
Data deletion request procedure
For standard accounts, users request deletion by emailing privacy@factory.com. Enterprise or employer-managed users contact their workspace administrator, because the organization is the data controller and Factory cannot modify enterprise records without its authorization. Factory directs enterprise data-subject requests to the customer, notifies the customer where permitted, and assists with authorized deletion requests under the DPA and applicable law. Legally permitted retention exceptions are communicated to the customer, and retained data is not used beyond the permitted exception. Following completion, termination, or expiration of the agreement, customer personal data is returned or deleted within 60 days, subject to standard retention in encrypted backup archives and applicable legal exceptions. Disconnecting Slack removes the connection for that organization but does not delete original Slack messages or automatically erase prior session history.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
security@factory.ai
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no