AI Vendor Directory · AI in productivity suites
Does Slack AI train on your data?
Depends — varies by plan or setting. Vendor-stated default: no for generative AI/LLMs; yes by default for non-generative ML global models (all tiers). For generative AI: "Slack will not use Customer Data to train generative AI models unless Customer provides affirmative opt-in consent"; Slack AI uses third-party LLMs hosted inside Slack's trust boundary that "are not updated by and don't in other ways retain Customer Data." Separately, Slack's non-generative ML models (channel/emoji recommendations, search ranking, autocomplete) DO analyze customer data by default; to opt out, an Org/Workspace Owner must email feedback@slack.com with the workspace URL and subject line "Slack Global model opt-out request."
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Slack AI?
AI summaries, search answers and recaps built into Slack paid plans, running against workspace message history. SMBs typically use it to catch up on channels and search institutional knowledge.
Key facts
- Vendor: Slack (Salesforce) — https://slack.com/features/ai
- Trains on customer data by default: no for generative AI/LLMs; yes by default for non-generative ML global models (all tiers)
- Source for the training answer: https://slack.com/trust/data-management/privacy-principles
- Data residency: US; EU (Germany); UK; CA; AU; JP; CH; AE; BR
- Last verified: 2026-07-29
What certifications does Slack AI hold?
- ISO 27001
- ISO 27017
- ISO 27018
- ISO 27701
- ISO 42001
- SOC 2 Type II
- SOC 3
- FedRAMP Moderate (GovSlack: FedRAMP High)
- HIPAA-configurable
Security, DPA, and subprocessor links
- Security / trust page: https://slack.com/trust/compliance
- Data processing agreement (DPA): https://slack.com/terms-of-service/data-processing
What is your EU AI Act role when you build on Slack AI?
Your organization is a deployer under the EU AI Act; Slack/Salesforce is the provider. The classic-ML default-on training is the main vendor-risk flag to record; EU AI Act transparency exposure from internal summarization is low.
What to record in your AI registry
- Provider: Slack (Salesforce)
- Model type: third party api
- Data typically flowing to the vendor: chat messages, channel content, shared files
Sources
- https://slack.com/trust/data-management/privacy-principles
- https://slack.com/trust/compliance
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Slack AI train AI models on your data?
Depends — varies by plan or setting. Vendor-stated default: no for generative AI/LLMs; yes by default for non-generative ML global models (all tiers). For generative AI: "Slack will not use Customer Data to train generative AI models unless Customer provides affirmative opt-in consent"; Slack AI uses third-party LLMs hosted inside Slack's trust boundary that "are not updated by and don't in other ways retain Customer Data." Separately, Slack's non-generative ML models (channel/emoji recommendations, search ranking, autocomplete) DO analyze customer data by default; to opt out, an Org/Workspace Owner must email feedback@slack.com with the workspace URL and subject line "Slack Global model opt-out request."
What certifications does Slack AI hold?
Per the vendor's published pages as of 2026-07-29: ISO 27001; ISO 27017; ISO 27018; ISO 27701; ISO 42001; SOC 2 Type II; SOC 3; FedRAMP Moderate (GovSlack: FedRAMP High); HIPAA-configurable.
Where does Slack AI store your data?
Vendor-listed data residency options as of 2026-07-29: US; EU (Germany); UK; CA; AU; JP; CH; AE; BR.
What is your EU AI Act role when you build on Slack AI?
Your organization is a deployer under the EU AI Act; Slack/Salesforce is the provider. The classic-ML default-on training is the main vendor-risk flag to record; EU AI Act transparency exposure from internal summarization is low.
