Sana
The Sana LMS app sends notifications about assigned content and assigned content deadlines to its user.For pricing, the Sana LMS core experience starts at €7,200 annually and includes support for this Slack application.
Permissions
Sana will be able to view:
Sana will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Sana Labs
Company headquarters location
Sweden
Terms of service
Privacy & data governance
Data retention policy
We retain your personal data only for as long as necessary for the purposes for which we
originally collected the data in accordance with this Privacy Notice. When we no longer need to save your data, we will remove it from our systems, databases, and backups.
Privacy Notice depends on the context and cannot in all cases be specified, in that case, we will provide information about the factors deciding the retention time. In all instances, we comply with GDPR and for more information, please refer to our Privacy Notice which is available at our website.
Data archiving and removal policy
All Subscriber data deleted by Sana Labs will be securely deleted using an industry-accepted practice designed to prevent data from being recovered using standard disk and file recovery utilities (e.g., secure overwriting, degaussing of magnetic media in an electromagnetic flux field of 5000+ GER, shredding, or mechanical disintegration). With respect to Subscriber data encrypted, Sana Labs may delete data by permanently and securely deleting all copies of the encryption keys
Data storage policy
We store all our data in cloud-based services either in the EU/EEA or in the US, protected to SCC. We also have the ability to use geo-fencing to ensure only EU/EEA storage and processing of data. We use encryption (At rest it is encrypted with AES-128 and AES-256, and data in transit is encrypted with TLS 1.2.) at all times. We also ensure that we run daily backups. Data backup is one of the pillars of Sana Labs's IT continuity plan. Trained personnel manage and follow up on backup execution to ensure the integrity, confidentiality, and accuracy of the backup data. Backups are taken daily. Personal data is kept in backups for the first 30 days of the backup time, after which all personal data is scrubbed from the backup, and the scrubbed backup is stored indefinitely or until we are instructed to delete the data by the relevant party, unless prohibited by regulation.
Data center location(s)
Belgium
Data hosting details
We host data on GCP.
Data hosting company
Google
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
no
Certifications & compliance
ISO/IEC-27001 certification
GDPR commitment
Data deletion request procedure
In the event you would like to exercise your right for the erasure of your personal data, please use the form on this location (https://gdpr.eu/wp-content/uploads/2019/01/RIGHT-TO-ERASURE-REQUEST-FORM.pdf) and send an email with the subject line “Erasure of Personal Data Request” and the completed form attached to legal@sanalabs.com. We will confirm receipt of the completed form and take reasonable steps to ensure you are the data subject. Upon verification, we will complete the erasure without undue delay.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2022-03-01
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
Okta, Google, Azure
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
support@sanalabs.com
Has a vulnerability disclosure program
no
Has a bug bounty program
no
Requires third party authorization/connections
no
Uses token rotation
no