Navan

Description Features Permissions Security & Compliance

Navan is an all-in-one platform that brings corporate travel booking and expense management into one place, available to registered corporate accounts.Employees can search and book flights, hotels, trains, and rental cars, file expenses in seconds, and get personalized recommendations from the Navan AI assistant based on their travel preferences and loyalty programs. (Heads up: AI-generated responses can sometimes be inaccurate, so double-check important details.)Admins can also use the Navan app for Slack to query company-level travel and expense data for deeper analysis and insights.Ask your company admin to enable the Navan app for Slack, then opt in to notifications the next time you make a booking.

Navan will be able to view:

Navan will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

We retain Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. If you are a Corporate Customer or a Corporate or Independent User, we retain your Personal Information as long as we are providing Services to you. We may retain Personal Information and certain records of your transactions to the extent necessary to comply with our legal and regulatory obligations. We may also retain Personal Information in light of our legal position such as in regard to applicable statute of limitations, litigation, or regulatory investigations.

Data archiving and removal policy

As a data processor, Navan retains customer data according to our customers instructions. The default deletion of customer data is 45 days after termination of the contract. At any time, customers may send us instructions to delete users sooner.

Data storage policy

Our data is stored in a well protected production environment where only authorized employees can access data on as-needed basis. We keep only necessary customer data that is required to conduct business transactions. All archived data is strongly encrypted and customer data is deleted by technical means, sufficient to render this data irretrievable by ordinary commercially available ways.

Data hosting details

AWS

Data hosting company

AWS

App/service has sub-processors

yes

Guidelines for sub-processors

https://app.navan.com/documents/Subprocessor_Policy.pdf

App/service uses large language models (LLM)

yes

LLM model(s) used

OpenAI, Gemini, and Navan fine-tuned models based on open-source models.

LLM retention settings

Navan retains prompts, responses, and limited metadata for 12 months, then deletes or obfuscates them. Provider caches may retain data for up to 24 hours. Navan manages provider controls; each customer manages Slack workspace retention.

LLM data tenancy policy

Navan uses shared multi-tenant infrastructure with logical isolation. Workspace-specific credentials, tenant-scoped identity and authorization, encryption, and least-privilege controls help prevent cross-customer access.

LLM data residency policy

Navan operates data centers in the US and EU. Customers may select the region where their data is stored at rest.

Certifications & compliance

Security