Institutional Channels & Privacy Modes
Department channels, project rooms, and privacy modes: Standard Governed, Enhanced Privacy, and Confidential E2EE.
Balancing Governance and Confidentiality
Each workspace channel specifies a privacy_mode that governs encryption and search indexing:
- standard_governed (Default): Messages are encrypted at rest on the server using AES-256-GCM, indexed for authorized Arabic full-text search, and subject to Legal Hold and Dual-Control Break-Glass.
- enhanced_privacy: Messages are excluded from workspace-wide full-text search indexing while remaining within institutional retention rules.
- confidential_e2ee: Messages carry a client-encrypted e2ee_envelope (X25519-AES256GCM). The server stores zero plaintext, skips server-side search indexing, and never exposes plaintext even during Break-Glass inspections.