Slack Teams & Slack Enterprise
eDiscovery and Preservation for Slack
Collect and manage your Slack data with the #1 defensible eDiscovery collection and preservation solution. Preserve dynamic content, including edited and deleted messages, for eDiscovery and data loss prevention.
Slack has transformed the way companies and teams connect and share information. As Slack’s suite of tools minimizes the number of internal emails exchanged, the need for a searchable and preserved workspace solution becomes a priority for legal and IT leaders.
Data in Slack is highly dynamic and ever growing, and by integrating with its API, Onna ensures you collect and preserve all available data and metadata, including deleted and edited messages, in a defensible and scalable way. Audit logs of all collections and processing activity are included for defensibility.
All collected data, including images, audio and video files, is processed, indexed, and OCR’d instantaneously, rendering a fully searchable environment of your Slack data. Relevant data can be exported and uploaded to your existing eDiscovery workflows and review platforms for a seamless experience.
Joseph Pochron, President, Forensic Technology & Consulting at TransPerfect Legal Services
“Onna is the best option for the collection, processing, and review of Slack data”
Check out how TransPerfect uses Onna for their Slack eDiscovery collections.
Main Features
API Based Collections
By connecting with Slack’s Discovery API, Onna collects all available data and metadata, including deleted and edited messages, as well as file attachments.
Data Preservation and Legal Hold
Preserve and hold Slack data from individual users or groups of custodians within Onna. In addition to Slack, Onna offers preservation across all its integrations.
eDiscovery Exports
Export relevant Slack data in a custom load file ready to be uploaded onto a review platform for further assessment. Exports include the natives and metadata.
How to Collect from Slack with Onna
Slack for Teams Integration Features
What is collected?
All files available through Slack’s public API are synced, including, but not limited to:
- Messages posted on channels, direct messages (dms) and multiperson instant messages (mpim)
- Files posted on channels, dms and mpims
- Posts created in your files section, channels, dms and mpims
- Snippets created in your files section, channels, dms and mpims
- Files created in your files section, channels, dms and mpims
Our Slack integration can collect from one user account. You will need credentials for each account you want to collect from.
What are your sync modes?
We currently support two syncing modes – one-time sync and auto and archive.
- One-time sync collects data during a certain time range or up until the date the source was added. This is great for one-time eDiscovery collections.
- Auto and archive means that Onna will perform a full sync first and will continuously add any new files generated at the data source. The sync type does not delete files deleted or edited from Slack, ensuring you always maintain a preserved and archived copy of your Slack data.
Enterprise Grid Integration Features
To enable a Slack Enterprise Grid collection, you will need a Slack Enterprise Owner or Admin account.
What is collected?
Onna’s Slack Discovery integration can collect from entire workspace(s). To enable this type of collection, the Discovery API will need to be enabled and the person adding the integration must be an Organization Owner within their Slack environment.
All files available through the Discovery API are synced, including, but not limited to:
- All available workspaces. An organization on Slack Enterprise Grid can have multiple workspaces that can be accessed through this API
- All channels, both private and public
- Messages posted on channels, direct messages (dms) and multiperson instant messages (mpim)
- Edited and deleted messages (only available if ‘Keep Everything’ is selected as a setting in Slack Enterprise)
- Files posted on channels, dms and mpims
- Posts created in the files section, channels, dms and mpims
- Snippets created in the files section, channels, dms and mpims
- Files created in the files section, channels, dms and mpims
Onna’s sync modes
We currently support two syncing modes – one-time sync and auto and archive.
- One-time sync collects data during a certain time range or up until the date the source was added. This is great for one-time eDiscovery collections.
- Auto and archive means that Onna will perform a full sync first and will continuously add any new files generated at the data source. The sync type does not delete files deleted or edited from Slack, ensuring you always maintain a preserved and archived copy of your Slack data.
Organizations that love Onna
Join innovative leaders bringing a more connected workspace to their productivity and collaboration tools
Resource Center
Slack Data Sheet
Read how Onna’s integration with Slack works and how you can begin preserving and managing Slack data for eDiscovery.
eBook: Emerging Apps
Download our ebook on mastering eDiscovery and preservation across emerging apps, like Slack, Quip, Confluence, Jira, and Zendesk.
How to: Slack Collections
Check out our step-by-step guide on running granular or enterprise wide eDiscovery collections from Slack Enterprise using Onna.
User-Based Collections in Slack
Read how Onna’s User-Based collection with Slack works and how you can build your legal hold and preservation strategy to collect only the data you need.
Frequently Asked Questions
Need more help? Check out our full FAQ Library
Does Onna offer a free trial?
Yes! Onna offers a free 30 day limited trial. This includes 100 MB of processed data, which is defined as the data uploaded and indexed in Onna. To start a free trial or a subscription, click here.
How does Onna work?
Onna connects directly with each source’s API to extract all available metadata and data. After the connection is made, data begins syncing and undergoes a layer of processing and OCRing, rendering a searchable and indexed repository of your data. You can begin searching immediately within Onna or export the relevant files onto a review platform.
How is Slack data rendered in Onna?
Slack messages are rendered in HTML format. Other files, such as attachments, are rendered in their native format.
Does Onna collect attachments?
Yes, attachments and files posted on channels or messages are collected and maintain the parent-child relationship.
How is the JSON export different than exporting from Onna?
Each JSON object consists of one message, along with the metadata for that message. You would have to parse the file and assign control numbers for each individual message on every channel and message (private or public), then sort and view each message from each conversation individually, which means you will have to go through extra processing to load this export into your review platform. Onna lets you export data directly in a dat, txt or csv file that can be seamlessly uploaded onto a doc review platform.
Can I collect edited and deleted messages from Slack?
Yes, but you must have the Discovery API and logging function enabled.
