Canny
Canny is home for your user feedback. A Canny board is a place where your users can post & vote on ideas for a specific topic (eg. feature requests). Other popular topics include bug reports, blog topics, and FAQs.With our app for Slack, you can add votes, create posts, and get instant notifications when something happens in Canny. Installation is easy, read more.This app is available on Canny's free plan.
Permissions
Canny will be able to view:
Canny will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Privacy & data governance
Data retention policy
Canny will retain your Personal Data only for as long as is necessary for the purposes set out in our Privacy Policy (providing the service, etc. see full privacy policy here: https://canny.io/privacy). We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
If your company has executed a Data Privacy Agreement (DPA) with Canny, then terms in the may override terms above and those cited in our privacy policy.
Data archiving and removal policy
Canny aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.
Whenever made possible, you can update your Personal Data directly within your account settings section. If you are unable to change your Personal Data, please contact us to make the required changes.
If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.
In certain circumstances, you have the right:
- To access and receive a copy of the Personal Data we hold about you
- To rectify any Personal Data held about you that is inaccurate
- To request the deletion of Personal Data held about you
You have the right to data portability for the information you provide to Canny. You can request to obtain a copy of your Personal Data in a commonly used electronic format so that you can manage and move it.
Please note that we may ask you to verify your identity before responding to such requests.
Data storage policy
All data is stored in the United States (with MongoDB Atlas on AWS) and processed with Amazon Web Services (AWS).
The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
For more information find our privacy policy (https://canny.io/privacy) and help article about data privacy and storage (https://help.canny.io/en/articles/1876821-is-canny-gdpr-compliant).
Data center location(s)
United States
Data hosting details
Cloud hosted, using MongoDB Atlas in AWS's data center
Data hosting company
MongoDB on AWS
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
Data deletion request procedure
When someone requests for Canny to delete data, how the request is handled depends on who is requesting deletion.
If Canny is a data processor or data controller, and the requester is a Canny customer, Canny will comply with the request in a timely manner.
If Canny is a data processor and the requester is a data subject (end user), Canny will forward the request to the data controller (Canny customer) to review and confirm next steps.
Additionally, in all cases, the identification of requester will be verified before any additional steps are taken.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2022-11-03
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, OneLogin, Azure AD
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@canny.io
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
yes
Uses token rotation
no