Skip to content

Slack compliance, certifications and attestations

Business apps · 19 certifications held · 2 from public registries · read Sep 24, 2026

CertificationEvidence
SOC reports
SOC 2
Held

Vendor page

Sep 24, 2026
SOC 3
Held

Vendor page

Sep 24, 2026
ISO standards
ISO/IEC 27001
Held

Vendor page

Sep 24, 2026
ISO/IEC 27017
Held

Vendor page

Sep 24, 2026
ISO/IEC 27018
Held

Vendor page

Sep 24, 2026
ISO/IEC 27701
Held

Vendor page

Sep 24, 2026
AI governance
ISO/IEC 42001
Held

Vendor page

Sep 24, 2026
US government
FedRAMP
High

Slack; GovSlack

FedRAMP Marketplace

Sep 23, 2026
DoD Impact Level
IL4

Vendor page

Sep 24, 2026
Finance
SEC 17a-4 / FINRA 4511
Held

Vendor page

Sep 24, 2026
Health
HIPAA (BAA)
Held

Vendor page

Sep 24, 2026
Privacy and cloud
Data Privacy Framework
Held

EU-US, UK extension, Swiss-US; non-HR data and HR data. Covered entity of Salesforce

Data Privacy Framework List

Sep 23, 2026
APEC CBPR / PRP
Held

Vendor page

Sep 24, 2026
Regional programs
BSI C5 (Germany)
Held

Vendor page

Sep 24, 2026
ENS (Spain)
Held

Vendor page

Sep 24, 2026
IRAP (Australia)
Held

Vendor page

Sep 24, 2026
ISMAP (Japan)
Held

Vendor page

Sep 24, 2026
TISAX
Held

Vendor page

Sep 24, 2026
Education
FERPA
Held

Vendor page

Sep 24, 2026

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

DateChange
Upgraded FedRAMP High

GovSlack

Ready FedRAMP High

GovSlack

Added FedRAMP Moderate

Slack

In process FedRAMP Moderate

Slack

Added Data Privacy Framework

Covered entity of Salesforce

About Slack

Work messaging and GovSlack.

Website
slack.com

No public evidence found for

SOC reports
SOC 1
ISO standards
ISO 9001, ISO 22301, ISO 20000, ISO 27799
AI governance
STAR AI
US government
GovRAMP, TX-RAMP, CMMC, 800-171, 800-53, FIPS 140, ITAR, CJIS, IRS 1075, 508/VPAT
Finance
PCI DSS, PCI 3DS, SWIFT, GLBA, SOX, FFIEC, MAS TRM, APRA, OSFI, FISC, DORA
Health
HITRUST, HDS, NHS DSPT, PHIPA
Life sciences (GxP)
GxP, Part 11, Annex 11, CSV
Privacy and cloud
EU CoC, CSA STAR
Regional programs
Cyber Ess., G-Cloud, SecNum, MTCS, K-ISMS
Education
HECVAT, COPPA

Compare with SAP, ServiceNow, Workday, Dropbox, Figma

Company profile
Across fru.devblogsincidentsleadersPaydays

Certification changes by email

Wednesdays: vendors that gained or lost a certification, only in weeks with a change.

Double opt-in. Unsubscribe any time.