Slack published a 2026 IRAP assessment letter.
In July 2026, Slack’s Security Policy began linking to a 2026 IRAP letter of assessment in place of the 2025 version.
Slack’s Privacy Policy says it may access, preserve or disclose certain information to comply with a valid legal request from a regulator, law enforcement or others.
We monitor nine of Slack’s public documents, including its Privacy Policy, User Terms of Service, Security Practices and GDPR commitment.
What Slack’s documents say about client data.
Quoted from the current version of each document. The right-hand column shows how many of the 75 vendors we monitor have a matching clause.
Sharing data with third parties
Addressed“Slack processes Other Information when we comply with a legal obligation including, for example, to access, preserve or disclose certain information if there is a valid legal request from a regulator, law enforcement or others.”
What changed, and when.
Notable changes since monitoring began in May 2026, newest first. Each is written from our automated comparison of the before and after versions, then reviewed by a person.
Replaced its IRAP assessment letter with a 2026 version
The Security Policy now links to the 2026 IRAP Letter of Assessment instead of the 2025 letter.
+ 7 other updates detected, such as formatting, page layout and wording changes.
- Sep 20, 2026: Security Overview
- Sep 19, 2026: Security Policy
- Sep 6, 2026: Security Overview
- Sep 2, 2026: Security Overview
- Aug 12, 2026: Privacy Policy
- Jul 1, 2026: Accessibility Policy
9 Slack documents.
Sub-documents are other Slack documents that its policies link to, such as addenda and product terms. We list the ones identified so far; there may be others.
Slack terms: common questions.
When did Slack last change its security documents?
On July 1, 2026, Slack’s Security Policy replaced its 2025 IRAP letter of assessment with a 2026 version.
Does Slack disclose data to law enforcement?
Its Privacy Policy says Slack may access, preserve or disclose certain information to comply with a legal obligation, such as a valid legal request from a regulator or law enforcement.