Postman
Postman is an API collaboration platform that simplifies each step of the API lifecycle and streamlines teamwork so you can create better APIs, faster. With 30M+ developers across 500K+ companies, including 98% of the Fortune 500, teams trust Postman.With this bi-directional Postman integration for Slack:
• Automatically preview requests, comments, Collections, Workspaces, environments, and more
• Receive updates and perform actions on Collections and Workspaces in Slack, including Watch and Fork
• Receive notifications for monitors
• Receive notifications for comments, mentions, and replies
• Receive notifications for pull request activities including edits, approvals, merges, and comments
• Receive notifications when sensitive tokens (i.e., API keys) are accidentally exposed in public domains through public Workspaces or documentation
• Automatically preview requests, comments, Collections, Workspaces, environments, and more
• Receive updates and perform actions on Collections and Workspaces in Slack, including Watch and Fork
• Receive notifications for monitors
• Receive notifications for comments, mentions, and replies
• Receive notifications for pull request activities including edits, approvals, merges, and comments
• Receive notifications when sensitive tokens (i.e., API keys) are accidentally exposed in public domains through public Workspaces or documentation
Permissions
Postman will be able to view:
Postman will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Postman Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Users OAuth scope is captured for sending notification and doing link unfurls on Slack. Data is retained as long as user has postman account.
https://www.postman.com/trust/security/
See also: https://www.postman.com/legal/sensitive-data-removal-policy/
Data archiving and removal policy
When user deletes their postman account the corresponding OAuth scope for the user is also removed from our system.
https://www.postman.com/legal/sensitive-data-removal-policy/
Data storage policy
As part of the OAuth scope no other user data is stored at Postman.
https://www.postman.com/trust/compliance/
Data hosting details
AWS Cloud
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
SOC attestation
GDPR commitment
Data deletion request procedure
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Okta, Ping, Azure, Duo, OneLogin, custom SAML
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@postman.com
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
no
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no