Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.

Does Slack AI train on your data? (Business plans)

Salesforce (Slack) · Collaboration · Last verified

Trains by default

Trains on business data unless you opt out.

Short answer: Yes, opt-out

Generative AI: no (Slack will not use Customer Data to train generative AI models without opt-in). But Slack's non-generative 'global' ML models (e.g. channel/search recommendations) use Customer Data unless you contact Slack to opt out.

Why this matters: Data used for training can't be pulled back out of a trained model, so opting out only protects what comes after. Why training matters →

7/7 assurances found·9 of 9 fields confirmed from vendor pages

Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for Slack AI, each linked to Salesforce (Slack)'s own page.

Summary of Salesforce (Slack)'s public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with Salesforce (Slack) before relying on it.

Trains on your data by default

Yes, opt-out

Generative AI: no (Slack will not use Customer Data to train generative AI models without opt-in). But Slack's non-generative 'global' ML models (e.g. channel/search recommendations) use Customer Data unless you contact Slack to opt out.

Source:

Data retention

Ephemeral for summaries/answers

LLMs do not retain data after the request; summaries and search answers are ephemeral.

SOC 2 Type II

Yes

SOC 2 (Type II).

Source:

ISO/IEC 27001

Yes

ISO/IEC 27001 certificate.

Source:

ISO/IEC 42001

Yes

ISO/IEC 42001 certificate.

Source:

DPA available

Yes

Slack Data Processing Agreement.

Source:

BAA / HIPAA

Yes

Slack can be configured for HIPAA compliance.

Source:

Data residency options

Yes

Data Residency offering listed on compliance page.

Source:

Zero-retention option

Yes

LLMs hosted in Slack's cloud infrastructure do not retain Customer Data after a request.

Source:

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.

Compare with

See all Collaboration tools · Why AI training on your data matters · How we source and verify this