Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes the terms governing use of Slack's messaging and collaboration platform and is entered into between Slack and the customer organization, not individual end users. The agreement designates the customer organization as the party responsible for all legal obligations, data governance, and user management within the workspace. Workspace administrators designated by the customer organization are authorized to access, export, monitor, and delete all workspace data, including employee messages and files.
This document is Slack's Main Services Agreement (MSA), governing the relationship between Slack Technologies LLC (or its affiliates) and the customer entity that subscribes to Slack's services, established on a B2B contractual basis where the customer organization bears primary legal responsibility for its authorized users' conduct. The agreement states that customers grant Slack a worldwide, non-exclusive license to use, reproduce, modify, and distribute customer data solely to provide and improve the services, while Slack asserts ownership of all service-related intellectual property and reserves the right to modify, suspend, or discontinue services with or without notice under certain conditions. Notably, the agreement positions the contracting party as the organizational customer rather than individual end users, meaning individual employees (authorized users) are governed through their employer's acceptance of these terms rather than any direct consumer relationship; the limitation of liability clause caps Slack's aggregate liability at amounts paid in the prior 12 months, and mutual indemnification obligations are structured in ways that place significant compliance responsibility on the customer organization. The agreement engages GDPR and related EU/EEA data protection frameworks through its Data Processing Addendum by reference, CCPA obligations for California-based customers, and standard commercial contract frameworks under California law; enforcement dependencies are jurisdiction-specific and organizations operating in regulated industries such as healthcare or financial services may face additional compliance obligations that the MSA alone does not resolve. Enterprise procurement teams should evaluate whether supplemental data processing agreements, BAAs, or sector-specific addenda are required before deployment.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trialMonitoring
Slack has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle AI Training Data Use and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.