Sonrai
The Sonrai Cloud Permissions Firewall slashes the permissions attack surface by protecting access to sensitive permissions, unused services and cloud regions, and quarantining dormant identities.Access needs are granted seamlessly through a Permissions-on-Demand workflow that integrates with the best ChatOps tools out there — Slack included.When an identity tries to use a restricted permission or quarantined identity, an automated message is routed via Slack to predetermined owners. The message details the account, identity, service, permission, and timeframe, allowing the owner to either approve or deny the request.Secure valuable cloud permissions and access all from the convenience of the chat tool you love, Slack.
Permissions
Sonrai will be able to view:
Sonrai will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Sonrai Security Inc.
Company headquarters location
United States
Privacy & data governance
Data retention policy
The Slack App retains almost no data. However, to use the Slack App, you also need to use the Sonrai platform, which has the following data retention policy:
Collection of Personal Information:
1. Information You Provide: When you use our Platform, we collect personal information you provide, such as your first and last name, username, password, location, and other similar information requested during registration.
2. Information from Third Parties: When you connect to our Platform through a third-party service (e.g., Auth0), we may collect information that you have directed the third-party service to share with us, such as your registration and profile information, or information you authorize via your privacy settings on the third-party platform.
Data archiving and removal policy
Customers can request the removal of their data by submitting a ticket through our service desk portal at https://sonraisecurity.atlassian.net/servicedesk/customer/portals. We will process these requests in accordance with our data retention policy and any applicable legal requirements.
Data storage policy
We store your information securely using industry-standard encryption methods and access controls to protect against unauthorized access, alteration, disclosure, or data destruction. Our data storage practices comply with applicable data protection regulations.
App/service has sub-processors
no
App/service uses large language models (LLM)
no
Certifications & compliance
Data deletion request procedure
Sonrai users can contact "support@sonraisecurity.com" for any data deletion request they have.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
SAML, OpenID Connect, Active Directory/LDAP generic protocols, Google Workspace, Microsoft Azure AD, ADFS, Ping Federate
Supports Security Assertion Markup Language (SAML)
no
Has a dedicated security team
no
Contact for security issues
support@sonraisecurity.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
yes
Uses token rotation
no