Moveworks

Description Permissions Security & Compliance

The Moveworks integration for Slack helps employees find answers, automate everyday workflows, and boost productivity using natural language. It provides a single interface to get support, look up data, and enable effective self-service across business applications.Moveworks connects natively in Slack, which makes it easy to search across all Slack messages and files – no complex setup required!With the Moveworks, employees can:Search Slack messages and files:
◦ Find relevant messages, conversations, and files across Slack
◦ Respect Slack’s native permissions so users only see content they’re authorized to access
◦ Quickly locate the right information without manually scrolling through channels or DMsMaintain secure access to information:
◦ Enforce Slack’s built-in permission model
◦ Ensure content visibility aligns with channel and user access rulesBoost employee productivity:
◦ Reduce time spent searching through conversations
◦ Stay focused by accessing important Slack information fasterTo start, simply click ‘Add to Slack’ on the left sidebar.Join the 350+ companies using Moveworks to empower over 5 million employees around the world. Moveworks is ISO, SOC 2, CSA Star, GDPR, and CCPA compliant, and has achieved FedRAMP ready status. Learn more about security at Moveworks.To share feedback, suggestions, or recommendations, contact us.About MoveworksMoveworks helps organizations improve how employees access information and get work done by enabling secure, enterprise-grade search and self-service experiences across workplace tools. Learn more about us.Disclaimer:Output generated by large language models and by extension the Moveworks integration for Slack, may be incomplete, inaccurate, or misleading. Users should exercise their own judgment when making decisions based on generated outputs. Use of the Moveworks app is subject to our PrivacyPolicy and Terms& Conditions. The Moveworks real-time search functionality is currently available on Slack Business+ and Enterprise+ plans.

Moveworks will be able to view:

Moveworks will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

Per Moveworks policy, Moveworks only retains customer data and backup copies for no longer than is necessary to provide services. Upon request we can delete customers or specific user data on an individual basis in compliance with various privacy laws and regulations (GDPR/CCPA/etc.). Customers can request data deletion and Moveworks will delete the data in agreed upon timelines. Moveworks will provide supporting evidence to demonstrate compliance with the NIST 800-88 media sanitization standard. In any other case, Moveworks retains the right to delete the data after two (2) years. For additional technical information about security and privacy at Moveworks, get a personalized demo or reach out to your Account Executive or Customer Success Manager to get access to our Whistic profile where you can find further details and certification reports.

Data archiving and removal policy

Any instance of any customer data is securely deleted from our system per the Moveworks Data Deletion and Retention Policy via the NIST 800-88 standard. If a request to modify or delete data is received from an employee of a Moveworks customer, Moveworks (the data processor) contacts the Moveworks administrator of the customer (the data controller) for further instructions. The controller is responsible for determining the appropriate action in accordance with applicable privacy laws. For additional technical information about security and privacy at Moveworks, get a personalized demo or reach out to your Account Executive or Customer Success Manager to get access to our Whistic profile where you can find further details and certification reports.

Data storage policy

All Data is encrypted at rest - (AES-GCM 256) All Data is encrypted in transit - (TLS 1.2) All keys and credentials are encrypted and managed by AWS KMS (Rotated at least annually) For additional technical information about security and privacy at Moveworks, get a personalized demo or reach out to your Account Executive or Customer Success Manager to get access to our Whistic profile where you can find further details and certification reports.

Data center location(s)

United States, Germany, Ireland, Canada, Australia

Data hosting details

Moveworks platform and data is hosted in AWS.

Data hosting company

AWS

App/service has sub-processors

yes

Guidelines for sub-processors

https://help.moveworks.com/docs/moveworks-sub-processors

App/service uses large language models (LLM)

yes

LLM model(s) used

Moveworks uses LLMs like GPT-4 Turbo, GPT-4, MoveLM (fine-tuned CodeLlama 13B), GPT-3.5 Turbo, and Flan-T5 (3B). Models are evaluated with internal benchmarks before production. For details, contact your Account Executive or Customer Success Manager

LLM retention settings

Moveworks uses LLMs like GPT-4 and GPT-4-Turbo from Microsoft and OpenAI, ensuring data retention through enterprise agreements. These agreements guarantee that Moveworks customer data is not retained or used for model training by either of them.

LLM data tenancy policy

Global generative models are trained using public datasets or Moveworks’ proprietary synthetic data, while discriminative models are trained using proprietary annotated Moveworks data. Customer-specific models are trained on data based on customer needs.

LLM data residency policy

Moveworks' proprietary models are hosted by Moveworks in its production environment, while Third-party models from sub processors such as Microsoft and OpenAI are leveraged with additional security and privacy guarantees under enterprise agreements.

Certifications & compliance

Security