Vimeo
Vimeo is an all-in-one video platform that enables organizations to seamlessly create, edit, manage, and distribute high-quality videos. We ingest videos from external systems, or provide the tools to capture both live events and short async recordings that get automatically stored, transcribed, and translated in a secure Library. By bringing the power of video to Slack, teams can easily collaborate on shared video projects and stay in-the-loop on any new video uploads, comments or changes right from the Slack channels you’re already working in.
Permissions
Vimeo will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Privacy & data governance
Data retention policy
We retain your data for as long as you have an account. When you close an account, we will delete your data. We may retain logs of automatically collected information (for internal analytics and security purposes); your email address; your tax information; communications with you; and your transactional information (for auditing, tax, and financial purposes). When we no longer have a business reason for retaining your data, we will delete or anonymize it.
We retain deleted videos on our servers for a short period in case you wish to reverse deletion. Once we delete a video, we may not be able to recover it. If you have previously made a video public, the video or its thumbnail may be discoverable in a search engine's cache for a time. We have no control over search engines; however, we will, upon request, send a request for deletion to major search engines.
If we receive legal process pertaining to your account, we will retain your data for as long as we in good faith believe is necessary to comply with the legal process. Similarly, if we believe that your account has been involved in wrongdoing, we may preserve your data to defend or assert our rights.
Data archiving and removal policy
We retain your data for as long as you have an account. When you close an account, we will delete your data. We may retain logs of automatically collected information (for internal analytics and security purposes); your email address; your tax information; communications with you; and your transactional information (for auditing, tax, and financial purposes). When we no longer have a business reason for retaining your data, we will delete or anonymize it.
We retain deleted videos on our servers for a short period in case you wish to reverse deletion. Once we delete a video, we may not be able to recover it. If you have previously made a video public, the video or its thumbnail may be discoverable in a search engine's cache for a time. We have no control over search engines; however, we will, upon request, send a request for deletion to major search engines.
If we receive legal process pertaining to your account, we will retain your data for as long as we in good faith believe is necessary to comply with the legal process. Similarly, if we believe that your account has been involved in wrongdoing, we may preserve your data to defend or assert our rights.
Data storage policy
All data except video data within Vimeo’s production database is encrypted. Video data is encrypted where technologically feasible. All encryption keys are stored in a secure server with very limited access. Vimeo has implemented safeguards to protect all Vimeo user data from creation to deletion.
All video and other data transmitted to Vimeo from users is encrypted using strong encryption protocols. Vimeo supports the latest recommended secure channels to encrypt all traffic in transit equivalent to TLS 1.2 protocols and/or AES 256 encryption.
Data hosting details
Cloud hosted
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
SOC attestation
ISO/IEC-27001 certification
Data deletion request procedure
Users can delete the data themselves or contact their administrators for deletion. Alternatively, a request can be initiated through a Customer Support ticket.
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
SAML, OAuth, SCIM
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@vimeo.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no