Postman
Postman is an API collaboration platform that simplifies each step of the API lifecycle and streamlines teamwork so you can create better APIs, faster. With 30M+ developers across 500K+ companies, including 98% of the Fortune 500, teams trust Postman.Keep teams updated on API changes, and help developers connect with collaborators to answer their urgent questions. Notifications are customizable and actionable, for efficient team collaboration that accelerates your API development cycle and improves how teams manage APIs.With this bi-directional Postman integration for Slack:- Links you paste from Postman include more context on what you are sharing. Preview responses, collections, and more.- Receive updates and perform actions on requests, collections, and environments in Slack, including Watch and Fork, when you subscribe a Slack channel to notifications from a connected Postman workspace.
Permissions
Postman will be able to view:
Postman will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Postman
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Users OAuth scope is captured for sending notification and doing link unfurls on Slack. Data is retained as long as user has postman account.
https://www.postman.com/trust/security/
See also: https://www.postman.com/legal/sensitive-data-removal-policy/
Data archiving and removal policy
When user deletes their postman account the corresponding OAuth scope for the user is also removed from our system.
https://www.postman.com/legal/sensitive-data-removal-policy/
Data storage policy
As part of the OAuth scope no other user data is stored at Postman.
https://www.postman.com/trust/compliance/
Data hosting details
AWS Cloud
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
no
Certifications & compliance
SOC attestation
GDPR commitment
Data deletion request procedure
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Okta, Ping, Azure, Duo, OneLogin, custom SAML
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@postman.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
no
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no