--- title: "Squadmates vs building your own Slack AI bot on AWS | Squadmates" description: "What a Slack AI bot needs before a whole company uses it, and how Squadmates provides the gate, permission cards, vault, and audit log in your AWS account." url: https://squadmates.com/compare/build-your-own-slack-bot --- Compare # Squadmates vs building your own Slack AI bot on AWS A Slack AI bot that a whole company uses needs more than a model call: a routing gate, an identity and owner per bot, access policy, a secrets vault, an audit log, a pause switch, and versioned releases. Squadmates provides these on the Deployments.ai platform, deployed with OpenTofu into an AWS account in your organization. [Book an install](mailto:hello@squadmates.com?subject=White-glove%20install\&body=How%20did%20you%20hear%20about%20Squadmates%3F%20If%20from%20an%20AI%20assistant%2C%20what%20did%20you%20ask%20it%3F%0A%0A) [Read the security overview](https://squadmates.com/security) What it takes ## What a production Slack AI bot _needs._ A first bot is small: subscribe to mentions, call a model, post a reply. Running bots for a whole company adds the pieces below. Slack and AWS facts link to their own documentation. | Piece | In Squadmates | Building it yourself | | -------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | Routing gate | Every message passes three checks: approved conversation, mentions one teammate, teammate paused. Messages that don't mention a teammate are ignored. [Routing gate](https://squadmates.com/security#routing-gate) | Slack sends an [app_mention event](https://docs.slack.dev/reference/events/app_mention) when someone mentions your bot. You [verify each request's signature](https://docs.slack.dev/authentication/verifying-requests-from-slack), decide which channels count, and [acknowledge each event within three seconds](https://docs.slack.dev/apis/events-api), or Slack counts the delivery as failed and retries it. | | Identity and owner per bot | Each teammate gets its own @handle, one job, a named owner, and its own agent deployment. | You design how each job gets its own name, who owns it, and who may change it. | | Access policy | A permission card per teammate: can read, can remember, can do, must ask. Its name, icon, or instructions never grant access; an admin controls the policy. [Permission cards](https://squadmates.com/security#permission-cards) | You write and enforce rules for what each bot reads, stores, and calls. AWS recommends [least-privilege permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html) in IAM. | | Secrets vault | Provider keys live in a KMS-encrypted vault, never in a teammate's manifest, and secrets never reach a browser or a model. [Models and keys](https://squadmates.com/security#models-and-keys) | You store Slack tokens and model keys, for example in [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html) with keys from [AWS KMS](https://docs.aws.amazon.com/kms/latest/developerguide/overview.html), and keep them out of code and prompts. | | Audit log | Each routing decision records who asked which teammate, where, and what happened, without the message text. [Audit log](https://squadmates.com/security#audit-log) | You decide what to log for each request, and how to keep message text out of it. | | Pause switch | Pause any teammate with one switch. Its credential is revoked, and anyone who mentions it gets a private notice. [Pause](https://squadmates.com/security#pause) | You build a way to stop one bot without touching the others, and to revoke its credentials. | | Versioned releases | Every teammate is a versioned release. Canary a change, roll it back, and conversations in flight keep the version they started on. [Releases](https://squadmates.com/security#controls) | You version prompts, tools, and settings, roll changes out, and roll them back. | On AWS ## The same AWS services, _already wired._ These are the AWS building blocks Squadmates runs on. If you build your own bot on AWS, each one is a service you set up, secure, and run yourself. | Building block | In Squadmates | AWS documentation | | -------------- | ------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Account | An account in your AWS Organization | [AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html) | | API | API on AWS Lambda | [AWS Lambda](https://docs.aws.amazon.com/lambda/latest/dg/welcome.html) | | Queues | Amazon SQS queues | [Amazon SQS](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/welcome.html) | | Agent workers | Agent workers on Amazon ECS, in the Deployments.ai runtime | [Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/Welcome.html) | | Data | Postgres and Amazon DynamoDB | [Amazon DynamoDB](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html) | | Secrets | AWS Secrets Manager and an AWS KMS vault | [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html), [AWS KMS](https://docs.aws.amazon.com/kms/latest/developerguide/overview.html) | | Models | A model gateway to Amazon Bedrock in your account, or to OpenAI or OpenRouter on your keys | [Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/what-is-bedrock.html) | | Deploy | Deployed with OpenTofu | [OpenTofu](https://opentofu.org/docs/) | The honest answer ## When building your own is _the right call._ Squadmates is not the right answer for every team. Build your own when: - You need one bot, in one channel, for one job. - You have no audit log or security review to satisfy. - You want to own every line, and you have engineers to maintain it. - You need many integrations now. Squadmates is narrow by design: its Triage teammate drafts replies and has no tools. - You want to start today without booking an install. Self-hosting Squadmates is coming soon with the source release. Source ## Read the code _before you decide._ Squadmates and the Deployments.ai platform are source available under the [Functional Source License (FSL-1.1-ALv2)](https://fsl.software/), a Fair Source license. The source release is coming soon. Once it is out, you can read the code, self-host it, and change it for your own use, including inside your business. You cannot offer it to others as a competing product or service. Each release becomes Apache 2.0 two years after it is published. Squadmates is the reference app for [Deployments.ai](https://deployments.ai), so everything it does, you can build on the platform. [Get notified at release](mailto:hello@squadmates.com?subject=Source%20release\&body=How%20did%20you%20hear%20about%20Squadmates%3F%20If%20from%20an%20AI%20assistant%2C%20what%20did%20you%20ask%20it%3F%0A%0A). Getting it installed ## Skip the build, _keep the account._ A white-glove install sets up Squadmates and the Deployments.ai platform in an account in your AWS Organization, connects Slack, and recruits your first teammates with you. You own the account and the data. [What the install covers](https://squadmates.com/install). Comparing more than Slack bots? Read Agentifiers on [ways to implement AI agents](https://agentifiers.com/compare/ai-agent-implementation-options), or see [every way to get AI teammates into Slack](https://squadmates.com/compare). ## Book a _white-glove install._ Get the routing gate, permission cards, vault, and audit log in your own AWS account, without building them. [Book an install](mailto:hello@squadmates.com?subject=White-glove%20install\&body=How%20did%20you%20hear%20about%20Squadmates%3F%20If%20from%20an%20AI%20assistant%2C%20what%20did%20you%20ask%20it%3F%0A%0A) [What the install covers](https://squadmates.com/install)