Security

Legal requests and logged platform access

C Chat's platform accesses message content only in two situations, moderating a reported message or meeting a legal requirement, and every such access is logged. When a legal request concerns a business's own group records, the business can usually answer it directly, because team owners and admins can audit and export their group conversations themselves.

Updated:

Key takeaways

  • Legal requirements are one of only two reasons the platform accesses content; the other is moderation of reports.
  • Every platform access to content is logged.
  • Owners and admins can export their team's group conversations to respond to their own legal obligations.
  • Direct messages are not available to employers through audit or export.
  • C Chat is operated by CGuard Pro LLC, based in Texas, USA; confirm specifics with your counsel.

Two kinds of organizations read pages like this one. Businesses want to know what happens if authorities ask a provider for their data, and what to do if a request lands on their own desk. Individuals want to know whether their messages can leave the platform without their knowledge. Both deserve a plain answer, including the parts that are uncomfortable.

Short answer: limited, logged access

C Chat’s rule for platform access to content is narrow. The platform accesses messages only:

  1. To moderate a reported message, as explained in how reported messages are moderated.
  2. To meet a legal requirement.

In both cases, the access is logged. Outside those two situations, the platform does not access content.

Because C Chat uses auditable encryption rather than end-to-end encryption, the service is technically able to decrypt stored content. Being clear about that is more useful than implying otherwise. For the encryption side, see auditable vs end-to-end encryption.

Requests directed at C Chat

When a legal requirement applies, the platform may access the content concerned, and that access is logged. The specific handling of each request is governed by the privacy policy, the terms and applicable law. C Chat is operated by CGuard Pro LLC, based in Texas, USA. This page does not describe notification practices or response times; refer to those documents and to support@cguardpro.com for questions.

Requests directed at your business

Often a request does not need to involve the provider at all. If your company receives a subpoena, a discovery request or a regulator’s inquiry about work communications, owners and admins can:

  1. Identify the relevant groups and the date range in question.
  2. Audit the conversations to confirm what they contain.
  3. Export the groups required, as described in what team admins can audit and export.
  4. Preserve and produce the export under your counsel’s instructions.

The guide on legal hold and eDiscovery for business chat covers the process, and eDiscovery and legal hold are defined in the glossary.

Who can see what

ScenarioWho accesses contentLogged?
Business answers its own requestTeam owners and admins, group conversations onlyYour process
Legal requirement directed at the platformThe platform, for the content concernedYes
Reported messageThe platform, for moderationYes
Security company on CGuard Pro reviewing an incidentThe company, for site groups and guard-office security chatsYour process

For security companies, the oversight model is described in security company oversight. Every role is also summarized in who can read my messages.

What it means for owners, admins and members

Owners and admins should plan before a request arrives. Know who in the company may authorize an export, where exports are stored and who your counsel is. Keep work records in groups so you can produce them yourself, without depending on anyone else.

Members should know that group conversations may be produced by their employer in a legal matter, and that platform access to any content, including direct messages, is possible when the law requires it and is logged.

Compliance teams can document this model in vendor assessments. The compliance overview lists the related controls in one place.

Honest limits and caveats

  • Not end-to-end. C Chat cannot claim that it is technically unable to access content. Its protection is limited access plus logging.
  • No transparency report is described here. Do not assume one exists; ask if it matters to your assessment.
  • No legal hold feature. Preserve exports in your own systems.
  • Jurisdiction matters. Which laws apply depends on where you, your team and the provider are. This page is not legal advice; confirm with your counsel.

Getting started

If you are setting up C Chat for a regulated or dispute-prone business, decide your export procedure on day one. Create your team at getcchat.com/c, define who holds owner and admin roles, and write down how a legal request will be handled.

Frequently asked questions

Does C Chat give messages to law enforcement?

The platform accesses content only for moderation of reported messages or when there is a legal requirement, and that access is logged. How requests are handled is governed by the privacy policy, the terms and applicable law.

Can my company hand over our chats if it receives a subpoena?

For group conversations, yes: team owners and admins can audit and export them. Direct messages between people are private and cannot be exported by the team. Your counsel should guide what you produce and how.

Is platform access to my messages recorded?

Yes. Whenever the platform accesses content, for moderation or a legal requirement, that access is logged.

Can C Chat refuse to decrypt messages because of encryption?

C Chat uses auditable encryption, not end-to-end encryption, so stored content can be decrypted by the service when legally required. That is an honest trade-off of a model that also lets businesses keep their own records.

Where is C Chat based for legal purposes?

C Chat is a product of CGuard Pro LLC, a company based in Texas, USA. The terms at getcchat.com/terms describe the legal framework.

Bring your team to C Chat

Encrypted messaging for businesses and teams. Free for now — up to 50 members per team.