Who holds which certification

64 vendors · 63 certifications

Slack compliance, certifications and attestations

Business apps · 19 certifications held · 2 from public registries · read Nov 4, 2026

SOC reports2
SOC 2

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

HeldVendor page

read Oct 28, 2026
SOC 3

A public summary of a SOC 2 examination, readable without an NDA.

HeldVendor page

read Oct 28, 2026
ISO standards4
ISO/IEC 27001

A certified information security management system.

HeldVendor page

read Oct 28, 2026
ISO/IEC 27017

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

read Oct 28, 2026
ISO/IEC 27018

Protection of personal data in public clouds acting as processors.

HeldVendor page

read Oct 28, 2026
ISO/IEC 27701

A certified privacy information management system extending ISO 27001.

HeldVendor page

read Oct 28, 2026
AI governance1
ISO/IEC 42001

A certified AI management system: how a company governs the AI it builds or uses.

HeldVendor page

read Oct 28, 2026
US government2
FedRAMP

Authorization to sell a cloud service to US federal agencies.

HighFedRAMP MarketplaceGovSlack; Slack

read Nov 4, 2026
DoD Impact Level

A provisional authorization for Department of Defense data at an impact level.

IL4Vendor page

read Oct 28, 2026
Finance1
SEC 17a-4 / FINRA 4511

WORM record retention assessed against SEC Rule 17a-4(f) and FINRA 4511.

HeldVendor page

read Oct 28, 2026
Health1
HIPAA (BAA)

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

read Oct 28, 2026
Privacy and cloud2
Data Privacy Framework

Self-certification under the EU-US Data Privacy Framework, with UK and Swiss extensions where noted.

HeldData Privacy Framework ListEU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Salesforce

read Nov 4, 2026
APEC CBPR / PRP

Certification under the Cross-Border Privacy Rules or Privacy Recognition for Processors.

HeldVendor page

read Oct 28, 2026
Regional programs5
BSI C5 (Germany)

An attestation against Germany's Cloud Computing Compliance Criteria Catalogue.

HeldVendor page

read Oct 28, 2026
ENS (Spain)

Certification under Spain's Esquema Nacional de Seguridad.

HeldVendor page

read Oct 28, 2026
IRAP (Australia)

An assessment by an ASD-endorsed assessor for Australian government data.

HeldVendor page

read Oct 28, 2026
ISMAP (Japan)

Registration on Japan's government cloud security list.

HeldVendor page

read Oct 28, 2026
TISAX

An assessment shared through the German automotive industry's exchange.

HeldVendor page

read Oct 28, 2026
Education1
FERPA

Support for student education records under FERPA.

HeldVendor page

read Oct 28, 2026

History

About Slack

Work messaging and GovSlack.

Status
Defunct
Founded
2009
Website
slack.com

No public evidence found for

SOC reports
SOC 1
ISO standards
ISO 9001ISO 22301ISO 20000ISO 27799
AI governance
STAR AI
US government
GovRAMPTX-RAMPCMMC800-171800-53FIPS 140ITARCJISIRS 1075508/VPAT
Finance
PCI DSSPCI 3DSSWIFTGLBASOXFFIECMAS TRMAPRAOSFIFISCDORA
Health
HITRUSTHDSNHS DSPTPHIPA
Life sciences (GxP)
GxPPart 11Annex 11CSV
Privacy and cloud
EU CoCCSA STAR
Regional programs
Cyber Ess.G-CloudSecNumMTCSK-ISMS
Education
HECVATCOPPA

Compare with SAP, ServiceNow, Workday, Dropbox, Figma

Company profile
Across GlyphblogsbreachesincidentsleadersnewslettersPaydaysproblemssocialsstandardsterms