Zoho Mail
Zoho Mail is a secure, ad-free, encrypted email service for your business. Zoho Mail has a user-friendly interface that is packed with collaboration tools. It helps you streamline conversations both within and outside your organization. If you use Slack for team collaboration, you can now bring your emails directly into your channels with a simple configuration in Zoho Mail. You can view emails, discuss around them and even send emails from Slack using Slash commands.
Permissions
Zoho Mail will be able to view:
Zoho Mail will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Zoho Corporation
Company headquarters location
India
Terms of service
Privacy & data governance
Data retention policy
Data retention and disposal
We hold the data in your account as long as you choose to use Zoho Services. Once you terminate your Zoho user account, your data will get deleted from the active database during the next clean-up that occurs once every 6 months. The data deleted from the active database will be deleted from backups after 3 months. In case of your unpaid account being inactive for a continuous period of 120 days, we will terminate it after giving you prior notice and option to back-up your data.
A verified and authorized vendor carries out the disposal of unusable devices. Until such time, we categorize and store them in a secure location. Any information contained inside the devices is formatted before disposal. We degauss failed hard drives and then physically destroy them using a shredder. We crypto-erase and shred failed Solid State Devices (SSDs).
Refer detailed policy here - https://www.zoho.com/security.html#:~:text=Data%20retention%20and%20disposal
Data archiving and removal policy
Data retention and disposal
We hold the data in your account as long as you choose to use Zoho Services. Once you terminate your Zoho user account, your data will get deleted from the active database during the next clean-up that occurs once every 6 months. The data deleted from the active database will be deleted from backups after 3 months. In case of your unpaid account being inactive for a continuous period of 120 days, we will terminate it after giving you prior notice and option to back-up your data.
A verified and authorized vendor carries out the disposal of unusable devices. Until such time, we categorize and store them in a secure location. Any information contained inside the devices is formatted before disposal. We degauss failed hard drives and then physically destroy them using a shredder. We crypto-erase and shred failed Solid State Devices (SSDs).
Refer detailed policy here - https://www.zoho.com/security.html#:~:text=Data%20retention%20and%20disposal
Data storage policy
Backup
We run incremental backups everyday and weekly full backups of our databases using Zoho Admin Console (ZAC) for Zoho's DCs. Backup data in the DC is stored in the same location and encrypted using AES-256 bit algorithm. We store them in tar.gz format. All backed up data are retained for a period of three months. If a customer requests for data recovery within the retention period, we will restore their data and provide secure access to it. The timeline for data restoration depends on the size of the data and the complexity involved.
To ensure the safety of the backed-up data, we use a redundant array of independent disks (RAID) in the backup servers. All backups are scheduled and tracked regularly. In case of a failure, a re-run is initiated and is fixed immediately. The integrity and validation checks of the full backups are done automatically by the ZAC tool.
From your end, we strongly recommend scheduling regular backups of your data by exporting them from the respective Zoho services and storing it locally in your infrastructure.
Refer detailed policy here - https://www.zoho.com/security.html#:~:text=Backup
App/service has sub-processors
yes
Guidelines for sub-processors
Certifications & compliance
Data deletion request procedure
Details are available under Data retention and disposal of the service policy https://www.zoho.com/security.html#:~:text=Data%20retention%20and%20disposal
HIPAA compliant
yes
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Date of latest pen test
2021-01-28
Executive summary is available to potential customers upon request
yes
Supports Single Sign On (SSO) with the following providers
SAML based SSO
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
yes
Bug bounty program URL
Requires third party authorization/connections
no
Uses token rotation
no