There's also a little thing called the Discovery API. That's not all you need to worry about, however. They would still not be able to read what you wrote in a DM last week. In other words, say your CEO got suspicious and turned this feature on today. If it's not enabled, then you're good for now as the feature does not log "messages from private channels and direct messages sent before the feature was enabled." If it is enabled, than anything you've ever sent over DM - included now deleted messages - can potentially be searched by your company's higher ups. Scroll to the bottom of the page, and you'll see if that feature is turned on. While signed into Slack in your browser, mosey on over to your team name here]./account/team. So, how can you tell if your company has Compliance Exports enabled? It's actually incredibly simple. What a message looks like in a Slack Compliance Export. Thankfully, there is a way to find out what Slack privacy settings your company has in place. It's not like you can have a casual, off the record lunch with your team when your closest coworker is thousands of miles away. While some will argue that you should never send a message you wouldn't want a manager to see, that level of caution is extremely difficult for many who work remotely or with coworkers spread across the world. Could your boss be reading those comments about his ugly tie - or, much more seriously, your plans to unionize? And so it's only natural to wonder just who, exactly, is privy to all the juicy tidbits you and your coworkers share over direct message. Slack, like office gossip, is a part of modern day work life. Read our follow up story for more details.
![slack download archive slack download archive](https://levels.io/content/images/2015/08/Screenshot-2015-08-26-02.14.54-1.png)
In fact, the situation could be even worse. However, that doesn't mean your DMs are necessarily safe. PDT: Slack is changing its policies around this, and doing away with Compliance Exports altogether.