Security
C Chat encrypts every message in transit with TLS and at rest with AES-256, using a dedicated key per organization. It is auditable, not end-to-end: owners and admins can audit team groups, while direct messages stay private.
Encryption
- In transit: TLS between your device and our servers.
- At rest: AES-256 with a dedicated key per organization.
- Contacts: SHA-256 hashing on the device; the server does not store the hashes.
Auditable, not end-to-end
End-to-end encryption prevents the business itself from overseeing its conversations. C Chat chooses the auditable model: the company keeps oversight of its groups for compliance, while direct messages between people stay private.
Who can see what
| Conversation | Read by | Can also access |
|---|---|---|
| Team groups | Group members | Team owners and admins (audit and export) |
| Direct messages between people | The two people | No one else: they are private |
| Security groups and chats (companies on CGuard Pro) | Participants | The security company (guards / office) |
| Reported messages | Participants | The C Chat platform, only to moderate, logged |
| Legal requirement | Participants | The C Chat platform, only what is required, logged |
Full detail in the Privacy Policy.
Frequently asked questions
Is C Chat end-to-end encrypted?
No. C Chat uses auditable encryption: TLS in transit and AES-256 at rest with a dedicated key per organization. That lets a business oversee its groups for compliance, which end-to-end encryption does not allow.
Can my boss read my direct messages?
No. Team owners and admins can audit and export the team’s group conversations, but direct messages between people are private.
When does C Chat access message content?
Only to moderate reported messages or to meet a legal requirement. Every access is logged.
What happens to my contacts’ phone numbers?
They are hashed with SHA-256 on your device before matching, and the server does not store those hashes.
Encryption
- Auditable encryption vs end-to-end encryption: which fits your business?Auditable encryption vs end-to-end encryption, explained fairly: who can decrypt, who keeps records, and when a business should choose each model for team chat.
- How C Chat encrypts your messagesHow C Chat encryption works: TLS protects every message in transit, AES-256 with a per-organization key protects it at rest, and access rules do the rest.
- Per-organization encryption keys explainedWhat per-organization encryption keys are, why C Chat encrypts each organization's stored data with its own AES-256 key, and what that design does not do.
- TLS in C Chat: how messages travel protectedHow TLS encryption in transit protects C Chat messages, photos and voice notes between your device and the servers on any network, and what it doesn't cover.
Who can see what
- Who can read my work messages in C Chat?Who can read your work messages in C Chat: group members, owners and admins for group audits, and nobody else for your DMs. A clear map of access and limits.
- Why direct messages stay private in C ChatAre work direct messages private in C Chat? Yes: team owners and admins can audit group chats, but one-to-one messages between people stay out of that audit.
- What team owners and admins can audit and exportCan your employer read your chats in C Chat? Owners and admins can audit and export team group conversations; direct messages between people stay private.
- Security company oversight of CGuard Pro groupsHow security company chat audit works with CGuard Pro: who sees site groups, what the office can review, and how off-duty and former guards lose access.
- Guest access security: what guests can and cannot seeGuest user security in C Chat: contractors, cleaning staff and clients join one group by invitation, see only that group and can be removed when the job ends.
- Instant access removal for former staffHow to revoke chat access for a former employee in C Chat: remove them from the team, keep the group history, and how CGuard Pro removes fired guards instantly.
Your data
- How contact matching protects phone numbersContact matching privacy in C Chat: numbers are hashed with SHA-256 on your device and the server does not store the hashes. What it protects, and what not.
- What happens to your data when you delete your C Chat accountDeleting your C Chat account: where to request it, how your profile, direct messages and team group messages relate to it, and what to do before you delete.
- Data retention in C ChatChat app data retention in C Chat: what is kept, what you control, why there are no retention settings, and how to build a policy around group exports.
- How photos, files and voice notes are protectedSecure attachments in C Chat: photos, videos, files up to 25 MB and voice notes travel over TLS, are stored with AES-256 per organization and follow access.
- C Chat and compliance: an honest overviewC Chat compliance, plainly: no certification badges, but auditable group records, exports, private DMs, AES-256 per-organization keys and logged access.
Platform safeguards
- How reported messages are moderatedHow reported messages are reviewed in C Chat: what happens when you report, who sees the content, why access is logged, and when to call emergency services.
- Legal requests and logged platform accessHow C Chat handles law enforcement and other legal requests: when the platform may access content, why access is logged, and how businesses answer theirs.
- Is passwordless login secure?Is passwordless login secure? How C Chat's SMS and email one-time codes compare with passwords, the real risks like SIM swaps, and how to protect yourself.
- Abuse prevention: blocking, reports and limitsMessaging abuse prevention in C Chat: blocking, reporting, team roles, guest and plan limits that keep work chat usable, plus rules for the 🚨 alert.
Bring your team to C Chat
Encrypted messaging for businesses and teams. Free for now — up to 50 members per team.