Security and support

Keep the record, or keep it private. Say which.

End-to-end encryption for everything makes a business blind to its own history. No encryption makes people uneasy. Comms offers both, labelled on the conversation, and the organisation decides what is allowed.

Default

Managed

Encrypted on the way and at rest, with keys that belong to that organisation. Admins can set retention, export, and recover a history after an account is restored.

  • Search on the server, inside that tenant only
  • Export is its own permission, not a side effect of being an admin
  • If staff can be read by an admin, they are told, and every access is logged

When the organisation allows it

Private

End-to-end encrypted with an established group protocol, Messaging Layer Security. The server cannot read the content, so it cannot export it or search it.

  • History comes back only from the person’s own encrypted backup
  • Search stays on the device
  • People can verify devices, and are told when a new one appears

Isolation

Another organisation is not a filter.

Every tenant is separated in the data itself. A valid login for one organisation cannot read, search, or be notified about another. Presence does not leak across the boundary. Cross-organisation conversations exist only when both sides agree, and each keeps its own retention.

  • Push notifications carry an identifier, not the message text
  • Logs, crash reports and analytics do not contain message content
  • Sign-in, invites, messaging and webhooks are rate-limited
workplace.interlink.digital/comms
Delivery trace Where a message got to, without opening what it said.
workplace.interlink.digital/comms
Contact support The in-app route to a named person at Interlink.

A named person

Recovery is not a robot.

A locked-out member is restored by their own admin, who confirms who they are. If the admin is locked out, Interlink support does it, and the recovery is written to the audit log. Opening a tenant’s data requires a stated reason, and the owner is told.

  • First response target: four working hours
  • One hour when the whole organisation is down
  • “It never arrived” can be traced stage by stage, without opening the message