Slack · Slack Sub-Processors (Salesforce) · View original document ↗

Feature-Triggered Sub-processor Activation and Cross-Regional Data Flows

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Slack Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

This provision establishes that enabling specific product features, including Einstein and Agentforce capabilities, triggers the activation of additional infrastructure providers and sub-processors beyond those used for the base service, with Customer Data processed by those additional entities and locations as a consequence of feature enablement.

This analysis describes what Slack's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision creates a direct operational link between feature configuration decisions and sub-processor inventory: enabling Einstein NLP, generative AI, speech, or analytics features introduces additional sub-processors including AWS, Microsoft Azure, OpenAI, Deepgram, LiveKit, and Eleven Labs across multiple jurisdictions, requiring that organizations maintain a dynamic sub-processor map that reflects their current feature configuration.

Consumer impact (what this means for users)

Under this clause, the set of sub-processors processing Customer Data is not static but expands as additional features are enabled within covered services. The document states that if these features are enabled, Customer Data will be processed by the additional infrastructures, making feature activation decisions a direct determinant of the applicable sub-processor chain.

Cross-platform context

See how other platforms handle Feature-Triggered Sub-processor Activation and Cross-Regional Data Flows and similar clauses.

Compare across platforms →

Monitoring

Slack has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Some Services run primarily on one infrastructure, but have some features that run partly or entirely on different infrastructures. For example, for many Customers, most Sales Cloud features run on the Salesforce's first-party infrastructure, but Sales Cloud also includes Einstein1 Features that run on the Einstein Platform infrastructure. Similarly, the Marketing Cloud Engagement Services are based primarily on the Marketing Cloud Engagement infrastructure, but some features of Marketing Cloud run partially on Einstein Platform or Marketing Cloud Einstein infrastructure. If these features are enabled, Customer Data will be processed by these additional infrastructures.

— Excerpt from Slack's Slack Sub-Processors (Salesforce)

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision implicates GDPR Article 28 sub-processing authorization obligations and Article 30 records of processing activities requirements, as the sub-processor chain is variable based on feature configuration rather than fixed at contract execution. Controllers must maintain accurate records of all processors and sub-processors, which requires tracking feature enablement across the Salesforce environment. Relevant enforcement authorities include EU supervisory authorities and equivalent bodies in jurisdictions where customers operate. (2) GOVERNANCE EXPOSURE: Medium to High for organizations with complex Salesforce environments where multiple Einstein, Agentforce, or AI-powered features are enabled across different business units. The dynamic nature of the sub-processor chain means that standard point-in-time sub-processor audits may not reflect the actual processing landscape if features are enabled or disabled between audit cycles. (3) JURISDICTION FLAGS: EU and EEA organizations face the most direct exposure given GDPR Article 28 requirements. Organizations in South Korea, Brazil, and other jurisdictions with sub-processor authorization obligations under national data protection law face similar considerations. Organizations in regulated sectors, particularly financial services and healthcare, should evaluate whether feature-triggered sub-processor activation aligns with sector-specific data processing restrictions. (4) CONTRACT AND VENDOR IMPLICATIONS: Procurement and legal teams should assess whether their DPA with Salesforce grants blanket authorization for the sub-processor chain disclosed in the full infrastructure table or requires specific authorization for each sub-processor, and whether that authorization mechanism accounts for feature-triggered additions. Vendor assessment processes should include a review of feature configuration states as a sub-processor inventory determinant. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should implement a process for reviewing sub-processor implications before enabling new Einstein or Agentforce features, update records of processing activities to reflect feature-triggered sub-processor additions, and confirm that transfer impact assessments cover the sub-processors activated by the organization's current feature configuration.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 3 platforms — free Get Monitor

Free: track 3 platforms + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over data handling practices affecting US businesses, relevant where feature-triggered sub-processor activation may affect representations made about the scope of data processing.
    File a complaint →

Provision details

Document information
Document
Slack Sub-Processors (Salesforce)
Entity
Slack
Document last updated
July 6, 2026
Tracking information
First tracked
July 6, 2026
Last verified
July 6, 2026
Record ID
CA-P-013438
Document ID
CA-D-00931
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
c9a4265bad5be0ead8d6b94ae1851641116635e9c04e0405cd39f87622f9770f
Analysis generated
July 6, 2026 23:13 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Slack
Document: Slack Sub-Processors (Salesforce)
Record ID: CA-P-013438
Captured: 2026-07-06 23:13:04 UTC
SHA-256: c9a4265bad5be0ea…
URL: https://conductatlas.com/platform/slack/slack-sub-processors-salesforce/feature-triggered-sub-processor-activation-and-cross-regional-data-flows/
Accessed: July 7, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Get Compliance

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Slack's Feature-Triggered Sub-processor Activation and Cross-Regional Data Flows clause do?

This provision creates a direct operational link between feature configuration decisions and sub-processor inventory: enabling Einstein NLP, generative AI, speech, or analytics features introduces additional sub-processors including AWS, Microsoft Azure, OpenAI, Deepgram, LiveKit, and Eleven Labs across multiple jurisdictions, requiring that organizations maintain a dynamic sub-processor map that reflects their current feature configuration.

How does this clause affect you?

Under this clause, the set of sub-processors processing Customer Data is not static but expands as additional features are enabled within covered services. The document states that if these features are enabled, Customer Data will be processed by the additional infrastructures, making feature activation decisions a direct determinant of the applicable sub-processor chain.

Is ConductAtlas affiliated with Slack?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Slack.