# Can you license your company's Slack data to AI companies?

URL: https://sellmydatatoai.net/data-rights/slack
Reviewed: 2026-11-08
Covers: Slack Free, Pro, Business+ and Enterprise

Under the Slack Supplemental Terms, your company keeps ownership of its Customer Data, so Slack does not claim the messages you would license. The tighter limits sit elsewhere: the Slack API terms bar apps offered outside your organization from training large language models on API data, and the people in your channels have their own privacy rights. Confirm your position with your own counsel.

## Slack data rights at a glance

| Data available | Export method | Plan needed | AI-training restriction in the terms |
| --- | --- | --- | --- |
| Public channel messages and file links | Workspace export from admin settings | All plans (Free limited to 90 days of file links) | No: no AI clause in the export terms. Supplemental Terms: "Customer retains all ownership of its Customer Data" |
| Private channels and DMs | Workspace export after an approved application (Business+) or tools enabled by Support (Enterprise) | Business+ or Enterprise | No: no AI clause found in the Supplemental Terms or the export help page |
| Messages and files pulled through Slack APIs | An app using the Web API or Data Access API | Any plan, app approved by an admin | Yes: API Terms, Data Usage by Third Parties: no "use API Data to train a large language model" |
| Bulk message and file data | Discovery API through an approved partner | Enterprise | Yes: API Terms: the Discovery API "may only be used for security and compliance use cases" |

## Who owns your Slack data under Slack's terms?

Your company owns its Slack data under Slack's current contract. Slack customers sign the Salesforce [Main Services Agreement](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/salesforce_MSA.pdf), and the [Slack Supplemental Terms](https://slack.com/slack-supplemental-terms) (last updated February 27, 2026) say in the section "Slack Search, Learning and Artificial Intelligence" that "Customer retains all ownership of its Customer Data."

Section 6.3 of the Main Services Agreement (September 15, 2025 version) adds that "SFDC acquires no right, title or interest from Customer" beyond the license it needs to run the service. Ownership against Slack is one question. Whether you may license the content against the people who wrote it is another, which our guide on [whether you can legally sell company data](https://sellmydatatoai.net/guides/can-you-legally-sell-company-data-for-ai) covers.

Slack keeps some rights of its own. The same section of the Supplemental Terms says "SFDC retains all ownership in and to aggregated machine learning results," and Slack's [privacy principles](https://slack.com/trust/data-management/privacy-principles) say Slack "will not use Customer Data to train generative AI models" without opt-in consent, while it does use customer data for predictive features such as emoji and channel recommendations. The Register reported on May 20, 2024 that Slack rewrote that wording after customers objected to training by default.

## What can you export from Slack, and on which plan?

Slack's built-in export depends on your plan. According to Slack's help article [Export your workspace data](https://slack.com/help/articles/201658943-Export-your-workspace-data):

- Free and Pro: messages and file links from public channels. Free workspaces get file links from the last 90 days only
- Business+: adds private channels and direct messages, but an Owner must apply and the Workspace Primary Owner must approve
- Enterprise: adds exports by conversation type, member or workspace, run by Org Owners, Admins or members with the Export Admin role once Support enables the tools

The export lists files as links rather than packaging the files themselves. Collect attachments while the workspace is still active and paid, and plan that step before any subscription lapses.

## Do Slack's terms restrict AI training on Slack data?

Slack's terms restrict AI training on data pulled through its APIs by apps offered outside your organization. The [Slack API Terms of Service](https://slack.com/terms-of-service/api), effective October 10, 2025, say under "Data Usage by Third Parties" that such apps may not "use API Data to train a large language model" and may not "bulk export Slack message and file data" unless another agreement allows it.

The terms define API Data as "messages, files, metadata and other data obtained from Slack APIs." The Data Access API section also bars "persistent copies, archives, indexes, or long-term data stores" of other organizations' API Data, and the Discovery API "may only be used for security and compliance use cases."

These limits arrived in 2025. Hunton Andrews Kurth reported in July 2025 that Salesforce had changed the Slack API terms to prohibit bulk export and long-term storage of Slack data and its use in LLMs, and that some customers had to redesign internal AI programs as a result.

The API terms do not mention the native workspace export, and they only address large language models. That leaves an open question for a buyer who would train an LLM on an export your admins produced through the admin tools. Treat it as **unclear** and ask counsel to read the API terms, your order form and any negotiated Slack agreement together.

## Which Slack plan and admin rights do you need?

You need an Owner or Admin role, and for anything beyond public channels you need Business+ or Enterprise.

- Public channels: Workspace Owners and Admins on any plan
- Private channels and DMs on Business+: an Owner applies from the Export tab and the Workspace Primary Owner approves
- Enterprise: Org Owners contact Support to enable self-serve export, then Org Owners, Admins or Export Admins run it

If your company is closing or downgrading, export before the plan changes. A move to Free or Pro removes the private channel and DM export option.

## What personal data is in a Slack export?

A Slack export is mostly personal data. Every message carries a user ID, display name and timestamp, the users file lists names and email addresses, and message text often includes pay, health and performance details about colleagues.

### The US position

In the US, start with California. The CCPA defines a sale as making personal information available "for monetary or other valuable consideration" (Cal. Civ. Code § 1798.140(ad)(1)), and a license fee from an AI buyer fits that wording on its face. Employee and business-contact data have been in scope since January 1, 2023, when the temporary exemptions expired.

Data counts as deidentified under § 1798.140(m) only if you take reasonable measures so it "cannot be associated" with a person, publicly commit to keep it that way and contractually bind every recipient. Our [de-identification guide](https://sellmydatatoai.net/guides/de-identification-for-ai-training-data) explains how to meet that standard, and our [guide to the CCPA and state privacy laws](https://sellmydatatoai.net/guides/gdpr-and-selling-data-for-ai-training) covers the other states.

Other comprehensive state privacy laws, including those in Virginia, Colorado and Texas, define sales and exemptions in their own words, and several treat employee data differently from California. Map where the people in your export live before you rely on any one state's rules.

If the export could hold health information from a HIPAA covered entity or business associate, HHS recognizes two de-identification methods under 45 CFR 164.514(b): Expert Determination, and Safe Harbor, which removes 18 types of identifiers. Financial institutions under the Gramm-Leach-Bliley Act must explain customers' right to opt out of certain sharing with nonaffiliated third parties, according to the FTC.

Your own privacy promises still bind you. FTC staff wrote on February 13, 2024 that adopting more permissive data uses, such as AI training, through a "surreptitious, retroactive amendment" to terms or a privacy policy could be unfair or deceptive. Check the privacy notice, employee handbook and customer contracts in force when the data was collected.

Workplace messages raise a labor law point too. Daniel Goldberg of Frankfurt Kurnit Klein & Selz wrote in October 2026 that staff messages about pay and working conditions can be "protected concerted activity under Section 7 of the National Labor Relations Act," whether or not staff are unionized.

### If you hold UK or EU data

UK GDPR and EU GDPR treat names, email addresses and message content about identifiable people as personal data. Licensing it for AI training is a new purpose, so you need a lawful basis under Article 6 and a compatibility assessment under Article 6(4), which the ICO covers in its guidance on compatibility and the reuse of personal information. This page is general information, so confirm your position with your own counsel.

## What third-party content is in a Slack export?

Shared channels and guests bring in people who never signed your contracts. Slack Connect channels hold messages written by staff at other companies, guest accounts belong to contractors and clients, and pasted documents often carry other firms' confidential information under NDAs.

Remove or separately clear shared channels, guest messages, client files and anything under a confidentiality clause. Buyers of [workplace communications data](https://sellmydatatoai.net/buy-ai-training-data/workplace-communications-data) will ask how you handled each of these.

## How do you prepare a licensable Slack export?

Preparing a Slack export for a buyer starts with the extraction route and ends with a manifest. Work through these steps in order.

1. **Confirm your plan and export scope**: Check whether your plan covers private channels and DMs, and file the Business+ application or Enterprise request early.
2. **Collect the linked files**: Download attachments while the workspace is live, because the export lists them as links.
3. **Keep the API out of it until reviewed**: If any step uses a Slack app or API, have counsel review the Slack API Terms of Service (October 10, 2025) first.
4. **Remove third-party content**: Take out Slack Connect channels, guest accounts and client files unless the other party has agreed in writing, and keep privileged legal material out entirely.
5. **De-identify and test**: Replace names, user IDs and email addresses across the Slack export, then run a re-identification test on a random sample, as our [de-identification guide](https://sellmydatatoai.net/guides/de-identification-for-ai-training-data) describes.
6. **Write the manifest**: Record record counts, date ranges, systems, exclusions and the export method in a [data manifest](https://sellmydatatoai.net/guides/how-to-build-a-data-manifest) that matches what you deliver.
7. **Get counsel's sign-off**: Ask your own counsel to review the Slack terms, your order form and your privacy notices together before any buyer sees a sample.

If you want a view on whether your Slack data is licensable and what buyers might pay, start with a [data valuation](https://sellmydatatoai.net/data-valuation). We are a broker, not a law firm, so take independent legal advice before you sign any license.

## Frequently asked questions

### Can a Slack Pro workspace export private channels for AI licensing?

No. Slack's help center says Free and Pro exports cover public channels and their file links only. Private channels and direct messages need Business+, where an Owner applies and the Workspace Primary Owner approves, or Enterprise, where Support enables self-serve export tools. If the value of your archive sits in private channels, check the plan before you approach buyers, and ask your own counsel whether the people in those channels expected their messages to stay internal.

### Does the Slack API ban on LLM training apply to my own export?

It is unclear. The Slack API Terms, effective October 10, 2025, bar apps offered outside your organization from using API Data to train a large language model, and API Data means data obtained from Slack APIs. The native workspace export is run from admin settings, and the terms do not mention it. Whether a buyer's training on that export is caught depends on how the data was pulled and on your contract, so ask counsel to review it.

### Does Slack own or train on my company's messages?

Slack does not claim ownership. The Slack Supplemental Terms say "Customer retains all ownership of its Customer Data." Slack's privacy principles say it will not train generative AI models on Customer Data without opt-in consent, but it does use customer data for predictive features such as emoji and channel recommendations. Neither point stops you licensing your own export, but both belong in the notes you give a buyer.

### Can I export Slack data after my company closes?

Usually, while the workspace is still active and paid. Slack's export options follow your current plan, so a downgrade to Free or Pro removes private channel and DM exports. The Salesforce Main Services Agreement lets you request data within 30 days after termination. If a trustee or liquidator controls the company, they need authority to sign. Our guide to [selling data from a closed company](https://sellmydatatoai.net/guides/selling-data-from-a-closed-company) covers that situation.

## Sources

- [Slack Supplemental Terms](https://slack.com/slack-supplemental-terms), Slack, accessed November 2026
- [Slack API Terms of Service](https://slack.com/terms-of-service/api), Slack, accessed November 2026
- [Main Services Agreement](https://www.salesforce.com/en-us/wp-content/uploads/sites/4/documents/legal/salesforce_MSA.pdf), Salesforce, accessed November 2026
- [Export your workspace data](https://slack.com/help/articles/201658943-Export-your-workspace-data), Slack Help Center, accessed November 2026
- [Privacy principles: search, learning and artificial intelligence](https://slack.com/trust/data-management/privacy-principles), Slack, accessed November 2026
- [Salesforce Locks Down Slack Data: Time to Review Your Slack API Terms](https://www.hunton.com/insights/legal/salesforce-locks-down-slack-data-time-to-review-your-slack-api-terms), Hunton Andrews Kurth, accessed November 2026
- [Slack tweaks its principles in response to user outrage at AI slurping](https://www.theregister.com/2024/05/20/slack_ts_and_cs_update/), The Register, accessed November 2026
- [California Consumer Privacy Act of 2018, Civil Code section 1798.140](https://cppa.ca.gov/regulations/pdf/cppa_act.pdf), California Privacy Protection Agency, accessed November 2026
- [California Consumer Privacy Act employee and B2B exemptions expire January 1, 2023](https://www.morganlewis.com/pubs/2022/10/california-consumer-privacy-act-employee-and-b2b-exemptions-expire-january-1-2023), Morgan Lewis, accessed November 2026
- [AI (and other) Companies: Quietly Changing Your Terms of Service Could Be Unfair or Deceptive](https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2024/02/ai-other-companies-quietly-changing-your-terms-service-could-be-unfair-or-deceptive), Federal Trade Commission, accessed November 2026
- [Guidance Regarding Methods for De-identification of Protected Health Information](https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html), U.S. Department of Health and Human Services, accessed November 2026
- [Gramm-Leach-Bliley Act](https://www.ftc.gov/business-guidance/privacy-security/gramm-leach-bliley-act), Federal Trade Commission, accessed November 2026
- [Selling Company Data for AI Training: What to Know Before You Say Yes](https://technologylaw.fkks.com/post/102o455/selling-company-data-for-ai-training-what-to-know-before-you-say-yes), Frankfurt Kurnit Klein & Selz, accessed November 2026
- [Compatibility and the reuse of personal information](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/data-protection-principles/compatibility-and-the-reuse-of-personal-information/), Information Commissioner's Office, accessed November 2026
- [Regulation (EU) 2016/679 (General Data Protection Regulation)](https://eur-lex.europa.eu/eli/reg/2016/679/oj), EUR-Lex, accessed November 2026

---

Get a data valuation: https://sellmydatatoai.net/data-valuation