Get DLP Alerts and Prompt Notifications in Slack
Frequently asked questions
What events trigger a Slack alert?
Three categories by default: (1) DLP block events for critical-severity rules (credentials, SSN, PHI), (2) prompt-approval requests when a member submits a prompt for manager review, (3) the Monday-morning AI-usage digest. Each event type routes to a separately configurable channel so #security doesn't drown in low-severity noise.
Can I route different severity levels to different Slack channels?
Yes. The integration honors per-severity routing — critical to #security-alerts, warn-level to #ai-ops, redact-level either to a low-priority channel or off. You can also filter by team or rule pack so the HIPAA team only sees PHI events.
Will Slack notifications include the actual prompt content?
No. Slack messages include user, timestamp, AI tool, rule that triggered, and severity — never the raw prompt text. Following the prompt content requires clicking through to the TeamPrompt audit dashboard, which respects RBAC. This avoids leaking sensitive substrings back into Slack history.
How fast is the alert?
Sub-second from prompt block to Slack message. The integration uses Slack's incoming-webhook API on the same request that records the DLP event, so the message lands before the user has finished reading the in-browser block notice.