eDiscovery and Preservation for Slack
With over eight million active daily users and 65% of the Fortune 100 companies, Slack is redefining the way employees collaborate and work with each other.
Onna is the most robust and comprehensive eDiscovery tool to collect and preserve data from Slack. By integrating with Slack’s Discovery API and Enterprise Grid, Onna extracts all related data and metadata from entire Slack workspaces, specific user accounts, private/public channels, and private multiparty chats.
Using Onna with Slack
Collect, process, preserve and search across your Slack data in real-time.
Data in Slack is highly dynamic and ever growing, and by integrating with its API, Onna ensures you collect and preserve all available data and metadata, including deleted and edited messages, in a defensible and scalable way. Audit logs of all collections and processing activity are included for defensibility.
All collected data, including images, audio and video files, is processed, indexed, and OCR’d instantaneously, rendering a fully searchable environment of your Slack data. Relevant data can be exported and uploaded to your existing eDiscovery workflows and review platforms for a seamless experience.
Joseph Pochron, President, Forensic Technology & Consulting at TransPerfect Legal Services
“Onna is the best option for the collection, processing, and review of Slack data”
Check out how TransPerfect uses Onna for their Slack eDiscovery collections.
Main Features
API Based Collections
By connecting with Slack’s Discovery API, Onna collects all available data and metadata, including deleted and edited messages, as well as file attachments.
Data Preservation and Legal Hold
Preserve and hold Slack data from individual users or groups of custodians within Onna. In addition to Slack, Onna offers preservation across all its integrations.
eDiscovery Exports
Export relevant Slack data in a custom load file ready to be uploaded onto a review platform for further assessment. Exports include the natives and metadata.
How to Collect from Slack with Onna
Check out our app on the Slack Marketplace
Slack for Teams Integration Features
What is collected?
All files available through Slack’s public API are synced, including, but not limited to:
- Messages posted on channels, direct messages (dms) and multiperson instant messages (mpim)
- Files posted on channels, dms and mpims
- Posts created in your files section, channels, dms and mpims
- Snippets created in your files section, channels, dms and mpims
- Files created in your files section, channels, dms and mpims
Our Slack integration can collect from one user account. You will need credentials for each account you want to collect from.
What are your sync modes?
We currently support two syncing modes – one-time sync and archive.
- One-time sync collects data during a certain time range or up until the date the source was added. This is great for one-time eDiscovery collections.
- Archive means that Onna will perform a full sync first and will continuously add any new files generated at the data source. The sync type does not delete files deleted or edited from Slack, ensuring you always maintain a preserved and archived copy of your Slack data.
Check out our app on the Slack Marketplace
Enterprise Grid Integration Features
To enable a Slack Enterprise Grid collection, you will need a Slack Enterprise Owner or Admin account.
What is collected?
Onna’s Slack Discovery integration can collect from entire workspace(s). To enable this type of collection, the Discovery API will need to be enabled and the person adding the integration must be an Organization Owner within their Slack environment.
All files available through the Discovery API are synced, including, but not limited to:
- All available workspaces. An organization on Slack Enterprise Grid can have multiple workspaces that can be accessed through this API
- All channels, both private and public
- Messages posted on channels, direct messages (dms) and multiperson instant messages (mpim)
- Edited and deleted messages (only available if ‘Keep Everything’ is selected as a setting in Slack Enterprise)
- Files posted on channels, dms and mpims
- Posts created in the files section, channels, dms and mpims
- Snippets created in the files section, channels, dms and mpims
- Files created in the files section, channels, dms and mpims
Onna’s sync modes
We currently support two syncing modes – one-time sync and archive.
- One-time sync collects data during a certain time range or up until the date the source was added. This is great for one-time eDiscovery collections.
- Archive means that Onna will perform a full sync first and will continuously add any new files generated at the data source. The sync type does not delete files deleted or edited from Slack, ensuring you always maintain a preserved and archived copy of your Slack data.
Some of our Customers
Join these cutting-edge companies using Onna to enhance their eDiscovery and knowledge management strategies
Frequently Asked Questions
How is Onna deployed?
Onna can be deployed as a SaaS product or in your private cloud. We also integrate with SAML & SSO services, like Okta, GSuite or Active Directory.
How is Slack data rendered in Onna?
Slack messages are rendered in HTML format. Other files, such as attachments, are rendered in their native format.
Does Onna collect attachments sent through Slack?
Yes, attachments and files posted on channels or messages are collected and maintain the parent-child relationship.
How does Onna work?
Onna connects directly with each source’s API to extract all available metadata and data. After the connection is made, data begins syncing and undergoes a layer of processing and OCRing, rendering a searchable and indexed repository of your data. You can begin searching immediately within Onna or export the relevant files onto a review platform.
How is the JSON export different than exporting from Onna?
Each JSON object consists of one message, along with the metadata for that message. You would have to parse the file and assign control numbers for each individual message on every channel and message (private or public), then sort and view each message from each conversation individually, which means you will have to go through extra processing to load this export into your review platform. Onna lets you export data directly in a dat, txt or csv file that can be seamlessly uploaded onto a doc review platform.
Can I collect deleted or edited messages from Slack?
Yes, but you must have the Discovery API and logging function enabled.