Exterro Gov Application for Slack
Optimize Your E-Discovery Process for Data Stored in SlackProactively analyze, collect, preserve and review data stored within Slack for records management and legal compliance.The integration between Exterro and Slack significantly reduces the risk of data spoliation while also decreasing the time and cost it takes to get to the facts of every matter in a fully defensible process. This solution enables targeted collection of data stored in Slack, decreasing costs associated with over-collection.Proactive data collection and processing The integration enables customers to concurrently collect and process data stored in Slack into the Exterro Review module without delays, handoffs, and complex promotion/staging procedures common in other platforms.With Slack and Exterro partnership, companies can easily:• Perform targeted collections from a specific Slack channel as well as collect from all channels to which a user is associated
• Collect private conversations between two users rather than collect all the private conversations within the user account
• Collect from both public and private channels
• Include or exclude the multi-party direct message based on litigation requirements
• Collect historic data that includes edited and deleted messages
• Collect all attachments and links that are available in chat. All attachments, links, images, etc. are automatically grouped and identify parent-child relationships, significantly easing the review process
• Collect searchable reactions (emojis) from conversations.
• Collect from third party Slack user accounts
• Collect from shared channels (cross collaboration) where users belong to separate organizations and their own Workspace but also work together in a single channel
• Maintain conversation threading of collected data
• Collect private conversations between two users rather than collect all the private conversations within the user account
• Collect from both public and private channels
• Include or exclude the multi-party direct message based on litigation requirements
• Collect historic data that includes edited and deleted messages
• Collect all attachments and links that are available in chat. All attachments, links, images, etc. are automatically grouped and identify parent-child relationships, significantly easing the review process
• Collect searchable reactions (emojis) from conversations.
• Collect from third party Slack user accounts
• Collect from shared channels (cross collaboration) where users belong to separate organizations and their own Workspace but also work together in a single channel
• Maintain conversation threading of collected data
Permissions
Exterro Gov Application for Slack will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Exterro Inc
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
It is Exterro's position that all data belongs to the customer and will not have access to Customer data. Customers will be responsible for deleting data per their retention schedule.
Data archiving and removal policy
It is Exterro's position that all data belongs to the customer. Exterro makes no claim to customer data. On termination we will return a copy of the data, then will destroy all copies of it contained in our systems. The database is deleted, and backups recycled to eliminate any stored copies. See below for sample MSSA language: 1.1. Effect of Termination. Upon expiration or other termination of the Subscription Service for any reason, Customer shall stop using, and Exterro shall stop providing, the terminated Subscription Service. 1.2. Return of Customer Data. Following the end of the Subscription Term, where Customer has not renewed, Customer shall have forty-five (45) days to request a copy of the Customer Data from Exterro; and, if requested, Exterro shall use commercially reasonable efforts to provide a copy of that data within fifteen (15) days in a mutually agreed upon, commercially standard format at no cost to Customer unless Exterro determines in its reasonable discretion that the data output is not routine, in which case the Parties shall mutually agree on a statement of work for professional services. After such forty-five (45) day period, Exterro shall have no obligation to maintain or provide any Customer Data and shall thereafter, unless legally prohibited, have the right to delete all Customer Data in its systems or otherwise in its possession or under its control and delete Customer’s instances of the Subscription Service.
Data storage policy
It is Exterro's position that all data belongs to the customer. Exterro makes no claim to customer data. On termination we will return a copy of the data, then will destroy all copies of it contained in our systems. The database is deleted, and backups recycled to eliminate any stored copies. See below for sample MSSA language: 1.1. Effect of Termination. Upon expiration or other termination of the Subscription Service for any reason, Customer shall stop using, and Exterro shall stop providing, the terminated Subscription Service. 1.2. Return of Customer Data. Following the end of the Subscription Term, where Customer has not renewed, Customer shall have forty-five (45) days to request a copy of the Customer Data from Exterro; and, if requested, Exterro shall use commercially reasonable efforts to provide a copy of that data within fifteen (15) days in a mutually agreed upon, commercially standard format at no cost to Customer unless Exterro determines in its reasonable discretion that the data output is not routine, in which case the Parties shall mutually agree on a statement of work for professional services. After such forty-five (45) day period, Exterro shall have no obligation to maintain or provide any Customer Data and shall thereafter, unless legally prohibited, have the right to delete all Customer Data in its systems or otherwise in its possession or under its control and delete Customer’s instances of the Subscription Service.
We store data in a US located Amazon Web Services location or Related any other cloud provider, as established in our contract with a customer.
App/service has sub-processors
no
Certifications & compliance
Data deletion request procedure
If a customer requests deletion, or a return of their data, we accommodate this as set forth in our contract. If an individual makes a request of us for data deletion, we refer them to the customer. We cannot delete data or otherwise interact with the customer’s data.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack App Directory, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2022-12-01
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
OKTA,Azure,Google, SAML
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
support@exterro.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
yes