How we protect your chats

What we do

Encrypted in transit

The site is served only over HTTPS (TLS), and browsers are told to use HTTPS for every later visit too (HSTS).

Encrypted at rest

While your upload is being received it is briefly written to our server; it is then encrypted with AES-256-GCM and the readable copy deleted, normally within seconds. Media is briefly decrypted to a temporary file while it is analysed, then deleted. Uploads, attached media and the map that restores names in your own report are stored encrypted, with a separate key for each upload. Those keys are themselves encrypted with a master key that is kept out of the database.

Only your account can open your reports

Every upload, report, PDF and follow-up question is checked against the signed-in account that owns it. Passwords are stored only as salted scrypt hashes, and repeated sign-in attempts are slowed down.

Two-step sign-in

You can require a code from an authenticator app when you sign in. Its secret key is stored encrypted, recovery codes are stored only as keyed hashes and each works once, and sign-in locks for a while after repeated wrong codes.

Names replaced before the AI reads the chat

Participant names, phone numbers, email addresses and links are replaced with labels before chat text is sent to an AI provider. Voice notes, images and videos cannot be anonymised, so they are only sent if you choose to include them.

Deleted on a schedule

The encrypted upload and the media attached to it are deleted about an hour after your paid report finishes. An upload that nobody buys a report for is deleted after seven days. If a paid report fails and we refund it automatically, the upload is deleted about an hour after the refund, unless you order another report on it before then, in which case the rules above apply to the new order. Reports are stored under labels rather than names and stay in your account until you delete them. When you download a report as a PDF, it is created in memory and sent straight to your browser; it is never saved on our server.

Files checked on arrival

Every file is identified from its own contents rather than its name, and archives are unpacked with size limits.

Payments by Stripe

Stripe is loaded only when you pay: on the checkout page, and when you open "Buy credits". You type your card details into Stripe's own form, so they go straight to Stripe. We never see or store your card number.

Report a security problem

If you think you have found a vulnerability, email support@chat-forensics.com with "Security report" in the subject. Please give us a reasonable chance to fix it before telling anyone else. We reply within one working day. Report a security problem

Reading a report safely

A report is AI-assisted analysis of the messages you supply and can be incomplete or wrong. Have it reviewed by a qualified professional where legal, clinical or safeguarding decisions are involved. If anyone is in danger, contact the emergency services. Read the privacy notice