"By default, Slack encrypts data at rest and data in transit for all of our customers." https://slack.com/trust/security
edit: Apparently Slack does indeed facilitate end-to-end encryption using a key management service, as described by the reply to my comment below.