Type: Connector disposition
Subject: Zoom (Slack app)
Decision requested: Approve the proposed disposition for Zoom (Slack app) across its 3 assessed actions
Inherent / residual: High / Low
Control owner: Slack Workspace Admin + Zoom Administrator
Context: 3 assessed actions. No Claude runtime control on this path. Administrative actions proposed: Permit x2, Do not enable x1. Proposed for Blocked: Transcripts and AI-generated summaries posted to channels. Class: Slack workspace application (third-party data path - no Claude involvement). Control point: Slack app approval (Slack admin) + source system configuration + vendor contract. Control owner: Slack Workspace Admin + Zoom Administrator.
Risks: R-27 [Critical inherent / High residual] Aggregate outbound surface across the estate | R-28 [Critical inherent / High residual] Slack functions as a laundering layer around Claude tool permissions | R-31 [Critical inherent / High residual] Slack is the aggregation point for the enterprise data estate | R-36 [High inherent / High residual] Second meeting-capture path compounding the recording-consent position | R-38 [Critical inherent / Critical residual] Slack holds no business associate agreement with any Marketplace application provider
No verification items specific to this connector.
Ruling:
Amendment or condition: