Summer 2026
If someone asked for it tomorrow, could you produce it?
A solicitor's letter asks for "all messages about my mother". A safeguarding review needs a handover chat that sits on the personal phone of someone who left in March. Somewhere in your organisation the honest answer is "on people's own phones" – and not one word of it can be produced.
That is the thing we build against. ComplyChat gives those conversations a channel your organisation owns – as easy as the messaging your people already prefer, verified by text, nothing to install – and once your Microsoft 365 tenant is connected, the lasting record files there: your tenant, your retention rules, per organisation, never pooled with anyone else's. We never become your system of record.
Ten minutes on a call: within the first minute or two you are messaging in a real channel from your own phone, a member of staff answers from Microsoft Teams, and before we hang up a magic link signs you into the client portal, where you can see your own record. You drive it, not us. No pitch deck. Or take our measure first and open a channel yourself, right now, without speaking to anyone: of the thirty-four vendors we surveyed, twenty-six will not even publish a price.
The Answerable Guarantee, in the contract on every tier. If a Subject Access Request touches your channels and you cannot produce the record from them within one working day, our team works it with you, free. If it still cannot be produced, we refund your full year. It does not cover a record you deliberately deleted yourself, or a tenant changed away from the setup we documented with you at onboarding – and it is never withheld for a setup we advised ourselves.
Chair of a board? See what a board's own channel looks like – the board's record, clean from the start. Or ask for the one-page trustee briefing, no call needed.
Product demo · ask it anything
You're chatting to our AI assistant – instant answers from our published pricing and docs. Want a real channel, verified by SMS? Open it here
There is no such thing as a private work conversation. There is only one you can answer for, and one you cannot.
01 · The exposure. Work conversations about the people we serve happen on channels this organisation does not own. If they were asked for, we could not produce them and we could not hold them, and they end when a phone is replaced or a term expires.
02 · What changes. Those conversations move to a channel we own, which families, volunteers and the public reach from a plain text with nothing to install. Everyone on it is told it is on the record and can object or leave at any time. From the first governed message onward, and once our Microsoft 365 tenant is connected, the record files there – under the retention and legal-hold rules we already run for email.
03 · What it does not fix. It cannot read anyone's personal phone, and it cannot pull in conversations that already happened. Nothing lawful can. The record starts clean, and closing the rest stays governance work for us. Our supplier publishes that on their own website, before we buy.
It outlives the person.
A term ends, a phone is replaced, a member of staff leaves. Their access ends. The record does not move, because it was never anywhere but your own Microsoft 365.
Nobody is watched in secret.
Everyone added to a channel gets a notice that it is on the record. They can object or leave at any time. We supply the wording.
Your own people produce it.
A read-only Replay viewer for a quick look back, and Microsoft Purview search and export in your own tenant, on your own licensing, for the request itself. We do not answer it for you. You do, from your own record – and if you cannot, we refund your year.
Showcase 01 · Where the record lives
Your record is a folder in your own Microsoft 365.
Every captured message is filed into a document library in your own Microsoft 365 tenant, on a site your administrator picked, through a permission that reaches that one site and nothing else. That library is the system of record. We do not hold a second permanent copy of it, and there is nothing for us to hand back if you leave.
It starts once your tenant is connected at onboarding. From then on a message is on the record the instant it is sent, and files across into your Microsoft 365 continuously, typically within the minute.
Your portal carries a button, Open your archive in SharePoint, that takes an administrator straight to the site holding the record.
Governed archive filing into the customer's own M365 SharePoint
Per-message item record (JSON in .txt)
Channel folders carry the name your organisation chose. Everything below them is a keyed pseudonym. No one's name or number is in a folder name – identity lives in the file contents.
Under every readable transcript sits the machine-readable one. Each message files as a single JSON document, named .txt so that Microsoft Purview indexes its words: who sent it and to whom, when, what it said, what was attached, any reactions, every prior version of an edited message, and the checksum of the media that came with it.
Oakfield Trust Channel Safeguarding - Year 7 Contact 7c2f91d4a3b8 Month July 2026 2026-07-08 09:14:02Z Priya Shah +447700900123 Here is the signed slip image 2026-07-08 091402Z m4507 in image.jpg
- schema
- cc-archive/2
- id
- 4507
- channel
- Safeguarding - Year 7
- thread_code
- 7c2f91d4a3b8
- direction
- inbound
- sent_at
- 2026-07-08T09:14:02.000Z
- from
- Priya Shah +447700900123
- msg_type
- image
- body_text
- Here is the signed slip
- media
- original_filename IMG_2231.HEICfiled_as 2026-07-08 091402Z m4507 in image.jpgquickXorHash vJ0mVv3s0y6mQ0k1bQ8zZ0aJ2mA=
- filed_at
- 2026-07-08T09:14:41.882Z
Showcase 02 · Nobody is watched in secret
Everyone is told. In the conversation itself, not in a policy nobody opens.
Every chat carries a standing line saying the conversation is kept in the organisation's record. It sits at the top of the transcript where the conversation is, not in a document somebody signed once. The full notice is one tap away, in the chat's own settings pane.
Beside it the header carries a persistent Recorded tag, and tapping either one opens the full notice: what is kept, who keeps it, why, for how long, and how to object or leave. It names your organisation, and it cites Articles 13 and 14 of the UK GDPR, because that is the obligation it discharges.
This is the part that makes the rest of it lawful. A record everybody knows about is evidence. A record nobody was told about is a problem you have not had yet.
Standing transparency line in every conversation
Persistent "Recorded" tag and transparency notice
Why this conversation is kept
Oakfield Trust keeps a record of this conversation, including messages, files and recorded calls, so that it can answer questions about the care and services it provides. You can object, or leave this channel, at any time.
Showcase 03 · Calls
There is no such thing here as an unrecorded call.
A bolt-on recorder can fail quietly and leave you with a call nobody kept. This one cannot. If recording has not gone active within about twenty seconds, the call ends for everyone and is filed as failed. There is no state in which the conversation continues and the record does not.
Before the call connects, both people see a screen that names recording first, and the screen that starts it says so. Once recording is live, a spoken notice plays to both parties, so the notice itself is on the recording. The banner stays up for the whole call.
Recorded-or-off teardown guarantee
Pre-call consent screen · Spoken in-call recording announcement
Permission, with a reason attached
Consent, naming recording first
Safeguarding - Year 7
Recording live, and everyone can see it
Afterwards the call card carries a short written summary. The summary is a labelled working aid and is never filed into the record. What files is the recording itself and its transcript.
Showcase 04 · The trust ask, inverted
A record of every access – and not one word of what was said.
Every administrative or operator access to your organisation's data is written as a tamper-evident chained event carrying counts, ids and settings, never message content. Each event carries the fingerprint of the one before it, so the chain can be re-checked from end to end by somebody who does not trust us, which is the correct posture for somebody buying this.
The whole chain is re-verified nightly, and again every time an administrator opens the feed. If it ever broke, the report would name the event it broke at rather than showing a green tick and hoping.
And you can take it away from us. One button downloads the entire content-free ledger as JSONL, one event per line, to hand to an auditor or to diff against the copy filed in your own tenant.
Content-free hash-chained access-transparency ledger
Chain verification and broken-chain reporting · Access-transparency feed with chain re-verification · JSONL export of the whole transparency ledger
Chain verified end to end Chain broken at event 4 of 6
- 062026-08-21 09:14ZAdministrator opened a channel recordOakfield Trustc41f…9e2
- 052026-08-20 16:02ZRetention window changed to 90 daysOakfield Trust8b70…15d
- 042026-08-20 11:47ZDistribution log exported Oakfield Trust2ad9…f04
- 032026-08-19 08:30ZAn administrator was invitedOakfield Trustffe1…73c
- 022026-08-18 22:00ZDaily digest filed into your tenantOakfield Trust91c2…0aa
- 012026-08-18 07:55ZChannel created: Safeguarding - Year 7Oakfield Trust40de…b18
Nothing here is a message. Each row is an action, a count and a fingerprint.
The button on event 04 alters that row; the banner above then names the event the chain broke at.
The strongest thing we can say about your record is that we do not hold it.
Leave whenever you like. The record was always yours, in your own Microsoft 365 – there is nothing to hand back and barely anything to delete. We confirm in writing that the little we hold is gone, and there are no fees to leave. If we're not earning the renewal, we shouldn't have it.
We surveyed thirty-four vendors in this market. Twenty-five of them pool every client's permanent records in their own cloud. Twenty-six will not publish a price. We do neither.
What would this look like for us?
Three quick questions – see how it works for an organisation like yours, and exactly what it costs. Nothing to fill in, no email needed.
One flat price per tier. Adding more people is always free.
- Two channels – typically one for staff, one for families
- Your whole team, and as many families and volunteers as you like – no charge per person
- Your own local number, answered from Microsoft Teams
- The record in your own Microsoft 365, with retention applied in your own tenant
- Read-only Replay, plus Purview search and export in your own tenant
- Setup included on yearly plans · email support within 48 hours
- Ten channels – one per site, service or team, each with its own record
- Your whole team, and as many families and volunteers as you like – no charge per person
- Local numbers for up to three sites, answered from Microsoft Teams
- Rules for keeping and holding records, set up with you
- Read-only Replay, plus Purview search and bulk export in your own tenant
- Compliance reports every quarter · phone support, reply next day
- As many channels as you like, a separate record per site
- Microsoft Teams across every site, with numbers wherever you reach families
- Retention rules and legal holds, set up across every site with you
- Read-only Replay across every site, including channels you have closed
- Purview search and bulk export across every site, from your own record
- A named lead and promised response times · setup across every site included
Every number is the number you pay, before VAT. Setup is included on every yearly plan. See what is in each tier
How it works
From your ComplyChat channels and Microsoft Teams to one record in your own Microsoft 365 – and the full list of what the record can do.
Read moreWhy us · Security
The lasting record sits in your own Microsoft 365. We save it as it is sent, so deleting a chat does not erase the record – and you can lock it so it cannot be changed. If we ever touched your data, your own access feed would show it.
See the differencePricing
One clear price per tier. Adding more people is always free.
See pricingQuestions worth asking.
The long answers, and a dozen more questions, are on the FAQ page.
Ten minutes. You send the first message.
A call with our team. In the first minute or two you send a message in a real channel from your own phone, and a member of staff answers it from Microsoft Teams. Before the call ends we send you a magic link that signs you into the client portal, where you can see your own record. No pitch deck, and a straight answer on whether we are right for you. Even if that answer is no.
The briefing: one page on the risks in your work messaging, written for boards. No follow-up unless you ask for one.