Give your staff, volunteers and families a WhatsApp channel you actually own and govern. Same app they already use, on a number that belongs to your charity, with every message on the record.
WhatsApp lives in your care homes, your frontline teams, your fundraising chats, your trustee threads. Your DPO knows. Your IT director has tried to stop it. They cannot. The conversations happen anyway, just outside everything you bought to keep your organisation safe.
Then a group is infiltrated. A relative makes a Subject Access Request. A safeguarding incident needs evidence. A trustee asks the obvious question, and the only honest answer is "we don't know."
You can spend another year fighting the culture. Or you can govern the channel your people refuse to give up.
Don't fight WhatsApp. Govern it. Move the conversations onto a channel you own, where every message is on the record.
Governed WhatsApp groups run on a Business API number your charity owns. The same number keeps normal one-to-one staff chats via WhatsApp Coexistence.
Staff, volunteers and families join the governed group by invite link. Membership is controlled by API: one-click onboarding, instant removal when someone leaves.
Each message flows through the Business API into your UK-hosted, tamper-evident archive in real time. Disclosed to members, never covert.
Subject Access Requests, safeguarding evidence, retention and litigation holds. All answered from one console, in hours not weeks.
Groups run on your charity's WhatsApp Business API number, not a volunteer's personal phone. The channel belongs to the organisation and survives staff churn.
Add and remove members by API. When a volunteer or staff member leaves, they are out of every governed group instantly. No more "who still has access to that chat".
Every message captured through the Business API into a UK-region store, fully indexed and retained to policy. Exportable to your compliance stack for eDiscovery.
Search by data subject across every governed channel. Redact, package, deliver. An ICO-aligned SAR workflow built for charity DPOs.
Apply retention rules per channel. Legal-hold flags survive deletion attempts, giving you a trustee-ready evidence trail for safeguarding and disputes.
Bring your own encryption keys via Azure Key Vault or AWS KMS. Revoke the key and the archived data is cryptographically destroyed. You stay in control.
Every number here is the number you pay. No obscure platform fees, no inflated seat counts, no setup hidden in the small print. You pay for staff seats; everyone you serve joins free. Annual billing includes a month free, and onboarding is on us.
We operate to the standards your trustees expect, and a few they don't yet ask about. Every claim on this page is independently auditable.
Information security mapped to ISO 27001:2022 controls from day one. Independent certification on the roadmap.
Targeting certification under the UK NCSC scheme. Increasingly expected by funders and public sector partners.
All data stored in UK-region Azure or AWS. No transfers outside UK or EEA without explicit customer opt-in.
Hold your own encryption keys via Azure Key Vault or AWS KMS. Revocation cryptographically destroys your data.
DPIA templates, Article 30 records, lawful basis register. Built in, not bolted on.
No covert monitoring. Members are in a charity-owned group and told it is governed. Lawful and ethical by default.
A 30-minute call with our team. We'll show you the product, talk through your specific risk picture, and tell you honestly whether we're a fit.
30 minutes, no pitch deck. We'll show you the product, talk through your risk picture, and tell you honestly whether we're a fit.
We'll be in touch within one working day from hello@chat.org.uk. If it's urgent, just reply to that thread.