{"id":47856,"date":"2026-07-29T17:03:43","date_gmt":"2026-07-29T14:03:43","guid":{"rendered":"https:\/\/trueconf.com/blog\/?p=47856"},"modified":"2026-07-29T17:37:22","modified_gmt":"2026-07-29T14:37:22","slug":"corporate-messenger-in-private-network","status":"publish","type":"post","link":"https:\/\/trueconf.com/blog\/news\/corporate-messenger-in-private-network","title":{"rendered":"Corporate messenger in a private network \u2014 the only way to protect your chats"},"content":{"rendered":"\"Corporate\r\n

The EU is currently discussing the Chat Control<\/a><\/strong> regulation, a law aimed at protecting civil liberties. The next discussion is scheduled for September, after which chat scanning will become mandatory<\/strong> for all messengers, email services, social networks, and hosting providers \u2014 extending even to correspondence protected by end-to-end encryption.<\/p>\r\n\r\n

Which services will be scanned:<\/p>\r\n\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n
\r\n

Service<\/b><\/p>\r\n <\/th>\r\n

\r\n

Is scanning required?<\/b><\/p>\r\n <\/th>\r\n <\/tr>\r\n <\/thead>\r\n

\r\n

Email<\/p>\r\n <\/td>\r\n

\r\n <\/span> \r\n <\/td>\r\n <\/tr>\r\n
\r\n

Messengers (WhatsApp, Viber, Telegram, etc.)<\/p>\r\n <\/td>\r\n

\r\n <\/span> \r\n <\/td>\r\n <\/tr>\r\n
\r\n

Web hosting<\/p>\r\n <\/td>\r\n

\r\n <\/span> \r\n <\/td>\r\n <\/tr>\r\n
\r\n

Social networks (Facebook, Instagram, etc.)<\/p>\r\n <\/td>\r\n

\r\n <\/span> \r\n <\/td>\r\n <\/tr>\r\n
\r\n

File storage<\/p>\r\n <\/td>\r\n

\r\n <\/span> \r\n <\/td>\r\n <\/tr>\r\n
\r\n

Cloud services<\/p>\r\n <\/td>\r\n

\r\n <\/span> \r\n <\/td>\r\n <\/tr>\r\n
\r\n

Video conferencing services (Skype, Zoom, Microsoft Teams, etc.)<\/p>\r\n <\/td>\r\n

\r\n <\/span> \r\n <\/td>\r\n <\/tr>\r\n
\r\n

Corporate messenger and video conferencing on private servers<\/p>\r\n <\/td>\r\n

\r\n <\/span>\r\n <\/td>\r\n <\/tr>\r\n <\/tbody>\r\n<\/table>\r\n\r\n

Companies will be required to scan absolutely all private messages<\/strong> \u2014 text, voice, photos, video, and files. However, some messengers use end-to-end encryption, meaning only the sender and recipient can see a message \u2014 not even the company itself can read it. To make the law work for these services too, a technology called client-side scanning<\/strong> has been proposed: software on your device analyzes content before it’s encrypted and sent, or after it’s decrypted on the other end \u2014 effectively a built-in surveillance tool on your device<\/strong>.<\/p>\r\n\r\n\"Corporate\r\n

The image is created based on the source<\/a><\/i><\/p>\r\n\r\n

This law threatens the privacy of communications and creates a risk of hacking and data theft<\/strong>. Businesses, where the confidentiality of company and employee data is critical, could be especially affected.<\/p>\r\n

\r\n

However, if a corporate messenger runs within a private network<\/strong> deployed on the company’s own servers, no one can access it from the outside. In this case, deploying is fully compliant with the law while giving you complete control over your privacy<\/strong>, since all users are verified employees \u2014 there are no unauthorized users or people who haven’t confirmed their personal data.<\/p>\r\n<\/div>\r\n\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n \r\n
\r\n

Criteria<\/b><\/p>\r\n <\/th>\r\n

\r\n

Cloud Messaging Providers<\/b><\/p>\r\n <\/th>\r\n

\r\n

On-Premise \/ Private Network Deployments<\/b><\/p>\r\n <\/th>\r\n <\/tr>\r\n <\/thead>\r\n

\r\n

Regulatory Scope<\/strong><\/p>\r\n <\/td>\r\n

\r\n

Directly named: email, messaging, and cloud services including E2E-encrypted platforms<\/strong> (e.g. WhatsApp, Signal)<\/p>\r\n <\/td>\r\n

\r\n

Outside the regulation’s stated scope. It\u2019s about providers serving end users, not internally deployed infrastructure<\/p>\r\n <\/td>\r\n <\/tr>\r\n

\r\n

Annual Risk Assessment<\/strong><\/p>\r\n <\/th>\r\n

\r\n

Mandatory:<\/strong> providers must assess exposure to risks year over year<\/p>\r\n <\/th>\r\n

\r\n

No equivalent obligation:<\/strong> no classification as “service providers” to third parties<\/p>\r\n <\/th>\r\n <\/tr>\r\n

\r\n

Risk<\/strong><\/p>\r\n

Classification<\/strong><\/p>\r\n <\/td>\r\n

\r\n

Applies directly<\/strong>, driving downstream compliance obligations<\/p>\r\n <\/td>\r\n

\r\n

Not applicable<\/strong> \u2014 the system of control is built for externally-facing services, not for corporate ones<\/p>\r\n <\/td>\r\n <\/tr>\r\n

\r\n

Content Scanning<\/strong><\/p>\r\n <\/td>\r\n

\r\n

Mandatory:<\/strong> reputational and regulatory exposure for those who opt out<\/p>\r\n <\/td>\r\n

\r\n

Not addressed<\/strong> \u2014 relevant only if the deployment itself functions as a service to external users, who are not employees of the enterprise<\/p>\r\n <\/td>\r\n <\/tr>\r\n

\r\n

Identity & Age Verification<\/strong><\/p>\r\n <\/td>\r\n

\r\n

Explicitly required under the current draft<\/p>\r\n <\/td>\r\n

\r\n

Age verification is not required, since third parties don’t have access to the system, and employee data is stored by the employer<\/p>\r\n <\/td>\r\n <\/tr>\r\n

\r\n

Privacy Law Exemption<\/strong><\/p>\r\n <\/td>\r\n

\r\n

These providers get a permanent exemption from the EU’s main e-privacy law \u2014 meaning they’re legally allowed to scan private messages<\/strong>, something normally not permitted<\/p>\r\n <\/td>\r\n

\r\n

Not affected<\/strong> \u2014 this exemption only applies to public communication services, not internal company systems<\/p>\r\n <\/td>\r\n <\/tr>\r\n

\r\n

End-to-End Encryption Integrity<\/strong><\/p>\r\n <\/td>\r\n

\r\n

Nominally preserved, but scanning before\/after encryption remains possible at provider discretion<\/strong><\/p>\r\n <\/td>\r\n

\r\n

Governed by internal security policy<\/strong>, not by this regulation<\/p>\r\n <\/td>\r\n <\/tr>\r\n <\/tbody>\r\n<\/table>\r\n\r\n

\r\n

Protect your team communication with TrueConf!<\/span><\/h1>\r\n \r\n
\r\n\r\n \r\n Download for free\r\n <\/span>\r\n <\/a>\r\n<\/div>\r\n \"Corporate\r\n<\/div>\r\n\r\n\r\n","protected":false},"excerpt":{"rendered":"The EU is currently discussing the Chat Control regulation, a law aimed at protecting civil liberties. The next discussion is scheduled for September, after which chat scanning will become mandatory for all messengers, email services, social networks, and hosting providers \u2014 extending even to correspondence protected by end-to-end encryption.","protected":false},"author":67,"featured_media":47977,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[104],"tags":[],"class_list":["post-47856","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","no-wpautop"],"_links":{"self":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts\/47856","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/users\/67"}],"replies":[{"embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/comments?post=47856"}],"version-history":[{"count":62,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts\/47856\/revisions"}],"predecessor-version":[{"id":47995,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/posts\/47856\/revisions\/47995"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/media\/47977"}],"wp:attachment":[{"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/media?parent=47856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/categories?post=47856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/trueconf.com/blog\/wp-json\/wp\/v2\/tags?post=47856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}