Wiz
The Wiz bi-directional app for Slack enables teams to streamline security communication by sending real-time, actionable security alerts directly to Slack channels and managing their Issues and Threats on their Slack workspace.Note: The Wiz app requires a paid Slack plan. The app uses LLMs, which may generate inaccurate responses
Permissions
Wiz will be able to view:
Wiz will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Wiz
Company headquarters location
United States
Terms of service
Privacy & data governance
Data retention policy
Different types of data are retained for different amounts of time in accordance with Wiz’s data retention policy. For the most up to date policy information, always refer to the Wiz documentation: https://docs.wiz.io/wiz-docs/docs/data-retention
Data archiving and removal policy
If a paid subscription ends or is terminated, Wiz retains customer data stored in the Wiz database in a limited-function account for 90 days to enable the subscriber to extract the data. After the 90-day retention period ends, Wiz disables the account and deletes the customer data. Once deleted, data may reside in Wiz's backups for up to 180 days.
Data storage policy
Wiz’s backend environment is hosted in AWS. All data stored at Wiz is AES-encrypted, following industry standards, in motion and at rest.
Data hosting details
Wiz provides customers with the option to host their Wiz tenant in various jurisdictions. Wiz currently offers data hosting in, among others, the US, EU, UK, Canada, Australia, India, UAE and Israel.
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Amazon Bedrock and Azure OpenAI
LLM retention settings
Data is stored for 90 days
LLM data tenancy policy
Wiz AI features are powered by private instances of GenAI-as-a service providers that run in Wiz's backend,
LLM data residency policy
The data is stored and managed as part of Wiz BE
Certifications & compliance
Data deletion request procedure
We have a documented internal procedure to handle right of erasure requests. Data subjects can exercise their rights by contacting us through the Wiz Privacy Center: https://wiz.privacy.saymine.io/wiz
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Okta
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@wiz.io
Has a vulnerability disclosure program
no
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no