Type: Connector disposition
Subject: Gemini Enterprise (Slack app)
Decision requested: Approve the proposed disposition for Gemini Enterprise (Slack app) across its 3 assessed actions
Inherent / residual: High / Moderate
Control owner: Slack Workspace Admin + Google Cloud Admin (Gemini Enterprise)
Context: 3 assessed actions. No Claude runtime control on this path. Administrative actions proposed: Permit with restrictions x3. Class: Slack workspace application (third-party AI assistant). Control point: Google Cloud console (Gemini Enterprise app > Integration > Slack) + Slack app approval. Control owner: Slack Workspace Admin + Google Cloud Admin (Gemini Enterprise).
Risks: R-27 [Critical inherent / High residual] Aggregate outbound surface across the estate | R-28 [Critical inherent / High residual] Slack functions as a laundering layer around Claude tool permissions | R-31 [Critical inherent / High residual] Slack is the aggregation point for the enterprise data estate | R-32 [Critical inherent / High residual] Four AI assistants share the same Slack channels | R-38 [Critical inherent / Critical residual] Slack holds no business associate agreement with any Marketplace application provider
Open verification: V-37 [Critical] Whether the Gemini Enterprise Slack connector in this tenant uses FEDERATED SEARCH - queries sent to the Slack API at query time, no copy retained - or an ingestion configuration that copies Slack messages and files into a Google-side data store.
Ruling:
Amendment or condition: