Fountain Cue
Cue is Fountain's AI assistant for hiring and frontline workforce operations. Connecting Slack lets Cue work alongside your team right where you communicate: search channels and conversations, read and summarize threads, draft and send messages, share files, create and update canvases, and look up teammates - all from a Cue conversation, and only with the permissions you grant.Each person connects their own Slack account from Cue's Skills & Connectors page and can disconnect at any time. Cue acts on your workspace only when you ask it to, and every action uses your individual Slack permissions - Cue can never see or do more than you can.Cue is powered by AI and can make mistakes. Review important summaries, messages, and actions before relying on them or sending them on your behalf.A Fountain subscription is required to use Cue.
Fountain Cue will be able to view:
Fountain Cue will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Fountain (OnboardIQ, Inc.)
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Fountain retains a user's Slack OAuth token, encrypted at the application level (AES-256-GCM), only while that user's Slack connection is active. Slack content a user explicitly asks Cue to read or search may be retained as part of that user's own Cue conversation history, which is retained in accordance with Fountain's Terms of Service and customer agreements. See https://trust.fountain.com for Fountain's data retention practices.
Data archiving and removal policy
When a user disconnects Slack from Cue's Skills & Connectors page, Fountain revokes the token with Slack (auth.revoke) and permanently deletes the stored token record. Customers and end users can request removal of personal data via Fountain's privacy portal (https://privacy.fountain.com) in accordance with Fountain's privacy policy and data processing agreements.
Data storage policy
Customer data is stored on Amazon Web Services in the United States, encrypted in transit (TLS 1.2+) and at rest. Slack OAuth tokens are additionally encrypted at the application level with AES-256-GCM before storage. Fountain is SOC 2 compliant; see https://trust.fountain.com.
Data center location(s)
United States
Data hosting details
Cloud hosted on Amazon Web Services (AWS), primarily in the United States (us-east-1).
Data hosting company
Amazon Web Services (AWS)
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic Claude models, accessed via the Anthropic API
LLM retention settings
Anthropic does not train on API inputs or outputs, and retains them only per its commercial terms. Cue conversation history is retained per Fountain's customer agreements; Slack tokens are deleted on disconnect.
LLM data tenancy policy
Slack data reaches the model only within the requesting user's own Cue conversation, under Fountain's DPA with Anthropic; Anthropic does not train on it. Customer data is isolated per tenant.
LLM data residency policy
LLM inference runs through the Anthropic API, hosted in the United States. Conversation data at rest resides in Fountain's AWS environment in the United States; the LLM is not used as a data store.
Certifications & compliance
SOC attestation
GDPR commitment
Data deletion request procedure
Data subjects and customers can submit deletion requests through Fountain's privacy portal at https://privacy.fountain.com (Make a Privacy Request) or by contacting privacy@fountain.com. Requests are verified and fulfilled in accordance with Fountain's privacy policy, customer data processing agreements, and applicable law. Slack-specific data: disconnecting the Slack integration revokes and permanently deletes the user's stored OAuth token.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
SAML 2.0 single sign-on via customer identity providers (e.g. Okta)
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@fountain.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
Amazon Web Services (hosting), Anthropic API (LLM inference), and Slack's hosted MCP server (mcp.slack.com) for executing Slack tools. Full sub-processor list: https://privacy.fountain.com/policies/en/?name=subprocessors
Uses token rotation
no