Glossary
Short, plain-language definitions of the security and messaging terms you will meet when choosing or running a business messenger, with notes on how each one relates to C Chat.
Encryption
- What is AES-256 encryption?AES-256 is a symmetric encryption standard that uses a 256-bit key. Learn how it works, what it protects in business chat and how C Chat uses it at rest.
- What is TLS (Transport Layer Security)?TLS is the protocol that encrypts data between your device and a server, the browser padlock. See how it works, what it doesn't cover and how C Chat uses it.
- What is end-to-end encryption?End-to-end encryption means only the sender's and recipients' devices can read a message. See how E2EE works, its business trade-offs and how C Chat differs.
- What is encryption at rest?Encryption at rest protects stored data, such as databases, files and backups, so a copy is unreadable without keys. See how it works and how C Chat uses it.
- What is encryption in transit?Encryption in transit protects data while it moves between devices and servers, usually with TLS. Learn what it covers, where it stops and how C Chat uses it.
- What is key management?Key management covers how encryption keys are created, stored, rotated, used and retired. Learn why it decides real security and how C Chat handles keys.
- What is a per-organization encryption key?A per-organization (per-tenant) encryption key protects one customer's data with its own key instead of a shared one. See why it matters and how C Chat uses it.
- What is SHA-256 hashing?SHA-256 is a cryptographic hash function that turns any input into a fixed 256-bit fingerprint. See how it works, its limits and how C Chat uses it.
- What is public-key cryptography?Public-key cryptography uses a pair of keys, one public and one private, to secure connections and verify identity. See how it works and its role in C Chat.
- What is forward secrecy?Forward secrecy means a stolen long-term key can't unlock past traffic. Learn how it works, where it applies in TLS and messaging, and what it means for C Chat.
Identity and access
- What is single sign-on (SSO)?What is SSO? Single sign-on lets staff use one corporate login across many apps. Learn how it works, its trade-offs and how C Chat handles sign-in instead.
- What is two-factor authentication (2FA)?What is two-factor authentication? 2FA asks for two kinds of proof before you log in. See how it works, which methods are strongest and where C Chat fits.
- What is a one-time passcode (OTP)?A one-time passcode is a short code valid for a single login. Learn how OTPs are generated, SMS vs email vs app codes, and how C Chat uses them to sign you in.
- What is passwordless authentication?Passwordless authentication lets you log in with a code, link, passkey or biometric instead of a password. How it works, its risks, and how C Chat signs you in.
- What is role-based access control (RBAC)?Role-based access control gives permissions to roles, not people. Learn how RBAC works, common mistakes, and how owners, admins and guests work in C Chat.
- What is the principle of least privilege?The principle of least privilege gives each person only the access their job needs, only while they need it. Team chat examples and how C Chat applies it.
- What is zero trust security?Zero trust security means never trusting a user or device by default and verifying every access. Learn its core principles and what they mean for team chat.
Compliance and data
- What is an audit log?An audit log is a time-stamped record of who did what in a system. Learn how audit logs work, why they matter for work chat and what C Chat records.
- What is data residency?Data residency is the physical or legal location where your data is stored. See how it differs from sovereignty, why buyers ask about it and what C Chat offers.
- What is data retention?Data retention is how long an organization keeps records before deleting them. See how retention policies work for chat, common mistakes and how C Chat fits.
- What is a legal hold?A legal hold is an instruction to preserve records relevant to litigation or an investigation. See how it works for work chat and what C Chat can and cannot do.
- What is eDiscovery?eDiscovery is the process of finding, preserving and producing electronic records for legal matters. Learn how chat fits in and what C Chat exports can cover.
- What is PII (personally identifiable information)?PII is any information that can identify a specific person, alone or combined. See examples in work chat, how to handle them and how C Chat limits exposure.
- What is GDPR?GDPR is the EU law that governs how organizations process personal data. Learn its principles, what it means for work messaging and how C Chat's model fits.
- What is a data controller vs a data processor?A data controller decides why and how personal data is processed; a processor acts on its instructions. See how the roles apply to work chat and to C Chat.
- What is data loss prevention (DLP)?Data loss prevention (DLP) covers tools and policies that stop sensitive data from leaving an organization. Learn how it applies to chat and what C Chat offers.
Threats
- What is phishing?What is phishing? A scam that impersonates a trusted sender to steal logins, money or data. Learn how it works, the main types and how to spot it in work chats.
- What is smishing?What is smishing? Phishing by text that pushes you to tap a link, call a number or share a code. See common lures, why texts work and how to protect staff.
- What is social engineering?What is social engineering? Manipulating people, not systems, into giving up access or money. Learn the main tactics, why they work and how teams defend.
- What is a SIM swap attack?What is SIM swapping? An attacker moves your phone number to their SIM to get your texts and codes. Learn the warning signs, prevention and the C Chat impact.
- What is account takeover?Account takeover is when a criminal gains control of a real user's account. How ATO happens, warning signs in team chat and the steps that limit damage.
- What is shadow IT?What is shadow IT? Apps and services staff use for work without IT approval. See why it happens, the risks of shadow messaging and how to bring it in-house.
- What is metadata in messaging?Messaging metadata is data about your messages: who, when, where and how often. What it reveals, why encryption doesn't hide it and how C Chat limits it.
Devices and IT
- What is MDM (mobile device management)?What is MDM? Mobile device management lets IT enroll, configure and wipe work phones. How it works, its limits on personal phones and where C Chat fits.
- What is BYOD (bring your own device)?What is BYOD? Bring your own device means staff use personal phones for work. Learn the benefits, the real risks for work chats and how C Chat fits a BYOD team.
- What is a guest user?Guest user meaning: an outside person given limited access to a workspace. Learn how guest access works, its risks, and how C Chat invites guests to one group.
Bring your team to C Chat
Encrypted messaging for businesses and teams. Free for now — up to 50 members per team.