Onboard
Onboard's integration for Slack shares real-time status updates, daily and weekly onboarding summaries and enables your team to communicate with clients directly and mark tasks as complete -- all from inside your Slack instance!Onboard offers a range of plans to help guide your Onboarding process. See all available subscription plans at https://onboard.io/pricing.
Permissions
Onboard will be able to view:
Onboard will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Onboard Software, Inc.
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Customer data is retained for as long as the account is in active status. Data enters an
“expired” state when the account is voluntarily closed. Expired account data will be retained
for 180 days. After this period, the account and related data will be removed. Customers that
wish to voluntarily close their account should download their data manually or via the API
prior to closing their account.
If a customer account is involuntarily suspended, then there is a 30 day grace period during
which the account will be inaccessible but can be reopened if the customer meets their
payment obligations and resolves any terms of service violations.
If a customer wishes to manually backup their data in a suspended account, then they must
ensure that their account is brought back to good standing so that the user interface will be
available for their use. After 30 days, the suspended account will be closed and the data will
enter the “expired” state. It will be permanently removed 180 days thereafter (except when
required by law to retain).
For more information, visit our Trust Center https://trust.onboard.io/
Data archiving and removal policy
Stored data must be properly stored and handled while at rest. Considerations for storage and disposal of data at rest in conjunction with Onboard Asset Management Policy, Data Classification Policy and Data Retention Policy include:
Authorization to access or manage stored data
Proper identification of records and their retention period
Technology change and ability to access data throughout retention period
Acceptable timeframe and format to retrieve data
Appropriate methods of disposal
For more information, visit our Trust Center https://trust.onboard.io/
Data storage policy
Data Encrypted At-Rest
Our databases are encrypted with AES-256, block-level storage encryption.
Data Encrypted In-Transit
Onboard applications and services connect to databases securely by implementing encryption of data in transit using SSL connections.
Passwords Encrypted
Application passwords are always hashed and salted using bcrypt. Additionally, data encryption is offered at rest and in transit by using TLS with at least 128-bit AES encryption.
For more information, visit our Trust Center https://trust.onboard.io/
Data center location(s)
United States
Data hosting details
Cloud hosted
Data hosting company
AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
SOC attestation
COPPA compliance
GDPR commitment
Data deletion request procedure
When someone requests data deletion, a support ticket is created, and we follow our internal process and policy for data deletion to ensure data is properly deleted. Please contact privacy@onboard.io for any data deletion or privacy-related requests.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2023-11-22
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Google Workspace, and most enterpise providers (contact us to set up and for more information)
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@onboard.io
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
See https://trust.onboard.io/ for an updated list of sub-processors.
Uses token rotation
no