NanoClaw
NanoClaw is the secure, open-source personal agent framework, and this app is how your NanoClaw agents come to Slack.Connect a workspace once, and NanoClaw provisions each agent you build as its own Slack bot: its own name, generated avatar, and identity, running on your infrastructure over Socket Mode. NanoCo never stores your agents’ tokens. They live only on your machine.Your agents show up as native Slack agents: DMs with titled conversation threads, live status, and suggested prompts. Ask an agent for teammates and it provisions them, and the team works with you in shared rooms with a canvas they keep current: tasks, decisions, and deliverables. Access follows your presence: where you are in the conversation, anyone there can task your agent.This app’s Home tab shows every agent provisioned in this workspace and lets you revoke any of them, or disconnect the workspace entirely, in one click.Agents are safe by architecture, not by instruction: sandboxed, zero standing credentials, sensitive actions routed through human approval.
NanoClaw agents are powered by large language models, and their responses can be inaccurate or incomplete. Review agent output before relying on it, particularly for decisions, code, or anything you would act on directly.
NanoClaw agents are powered by large language models, and their responses can be inaccurate or incomplete. Review agent output before relying on it, particularly for decisions, code, or anything you would act on directly.
NanoClaw will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Privacy & data governance
Data retention policy
Retention periods depend on the type and purpose of the data. Data that is no longer required is deleted at the earliest reasonable time, subject to applicable legal and operational requirements. Please refer to NanoCo’s Privacy Policy for further details (https://nanoco.ai/privacy).
Data archiving and removal policy
Data is archived only where required for legal, contractual, or operational purposes and is securely deleted once it is no longer needed, in accordance with NanoCo’s retention requirements. Please review our privacy policy for more details - https://nanoco.ai/privacy
Data storage policy
Data is stored only in approved, access-controlled systems and, for customer deployments, remains within the customer’s own infrastructure. Appropriate encryption and security controls are applied based on the data type and environment.
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthorpic, OpenAI
LLM retention settings
No LLM data is retained by NanoCo; we store no prompts or responses and run no LLM proxy. Data stays on the customer's machine until they delete the agent or its data. Retention by the model provider follows that provider's policy. (Anthropic, OpenAI)
LLM data tenancy policy
Each customer’s LLM environment and data remain isolated within its own infrastructure, with no data sharing or commingling between customers.
LLM data residency policy
The LLM runs within the customer’s own infrastructure, so data residency is fully controlled by the customer.
Certifications & compliance
Data deletion request procedure
We have an internal policy in place for handling related requests. Please review our privacy policy for more details - https://nanoco.ai/privacy.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2026-07-16
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
We support all SSO flows (Okta, Entra, etc.)
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
yes
Contact for security issues
security@nanoco.ai
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no