ScanRecords
A public record — updated daily at 06:17 UTC

Is your messaging app scanning under the EU's Chat Control?

Chat Control lets providers voluntarily scan private messages in the EU until April 2028. Each company decides for itself — and end-to-end encrypted apps are excluded. We track 31 platforms and record what their own documents and EU filings actually say. How this works →

5scan under Chat Control 13scan under US law · no EU evidence 3no statement found 1says it doesn't 9can't — E2EE
Check yours Signal WhatsApp Telegram Gmail Instagram iMessage Discord TikTok

Scans under the EU's Chat Control 5

The derogation's mandatory reports exist only for providers actually scanning private communications under it. Exactly five filed them, for both 2023 and 2024, per the Commission's own implementation report — this is Chat Control use, documented by the EU itself.

Meta
Scans under Chat Control — confirmed Messenger · Instagram Direct Google
Scans under Chat Control — confirmed Gmail · Google Chat Microsoft
Scans under Chat Control — confirmed Outlook.com · Microsoft Teams · Skype (retired 2025) · GroupMe LinkedIn
Scans under Chat Control — confirmed LinkedIn messaging Yubo
Scans under Chat Control — confirmed

Scans globally — no EU evidence 13

Their documents disclose content scanning under US law (NCMEC reporting, PhotoDNA). No evidence found that they invoke the EU derogation for private communications — US-law scanning and Chat Control are separate regimes. Absence of evidence is a fact about the public record, not proof of absence: a provider could scan and not disclose it.

Discord
Scans under US law · no EU evidence Discord DMs · Discord servers Snapchat
Scans under US law · no EU evidence TikTok
Scans under US law · no EU evidence TikTok direct messages X
Scans under US law · no EU evidence X direct messages Reddit
Scans under US law · no EU evidence Reddit chat and DMs Zoom
Scans under US law · no EU evidence Zoom Meetings · Zoom Team Chat Twitch
Scans under US law · no EU evidence Twitch chat and Whispers Pinterest
Scans under US law · no EU evidence Pinterest messages Steam
Scans under US law · no EU evidence Steam Chat PlayStation
Scans under US law · no EU evidence PlayStation Network messages Yahoo Mail
Scans under US law · no EU evidence Roblox
Scans under US law · no EU evidence Roblox chat Epic Games
Scans under US law · no EU evidence Fortnite chat · Epic Games friends chat

No clear statement 3

Not end-to-end encrypted, so the provider can read the content — and no public statement about scanning private communications was found either way. Each of these pages shows the full search behind that finding: the vocabulary looked for, the documents searched, and every match in context. Silence measures disclosure, not behaviour.

Telegram
No statement found Telegram cloud chats · Secret Chats (E2EE) Slack
No statement found Slack DMs and channels GMX
No statement found GMX Mail

States it does not scan 1

The company publicly states that it does not scan message content.

Proton
Says it doesn't scan Proton Mail

End-to-end encrypted — out of scope 9

Content is end-to-end encrypted; E2EE communications are formally excluded from Chat Control's voluntary scanning.

Signal
Can't read your messages WhatsApp
Can't read your messages Apple
Can't read your messages iMessage · FaceTimeexcept iCloud Mail Threema
Can't read your messages Viber
Can't read your messages Rakuten Viber Olvid
Can't read your messages Wire
Can't read your messages Element
Can't read your messages Element (Matrix) Tuta
Can't read your messages Tuta Mail · Tuta Calendar

Statuses assessed 26 Jul 2026 from public records — they describe what companies say and file, not measurements of their software, and absence of evidence is not evidence of absence: a provider could scan without disclosing it. Full table with tracked documents: companies. Wrong about your company? Dispute it — disputes are published.

How the record works

1 · SnapshotEvery tracked policy, security page and App Store label is re-fetched daily at 06:17 UTC.
2 · DiffA change is committed only when the words actually changed — with the full before and after preserved.
3 · WitnessEach snapshot is a public git commit, and the Internet Archive captures changed sources the same day.

Go deeper

The scanners' own numbers →

Error ratios, report volumes, and the collapse of chat-scanning reports after Messenger went E2EE — from the Commission's own report.

What is Chat Control? →

The plain-language guide: the timeline, 1.0 vs 2.0, who actually scans, and what it means for your apps.

Notes →

Short, sourced write-ups from the record — starting with the Snapchat and Apple discrepancy.

Get alerts →

A push notification the moment a tracked company moves. No account, no email — install to your Home Screen and subscribe.

Get out of the scanning →

The practical version: which apps can't read your messages, the backup trap, and why a VPN changes nothing.

Latest changes

Every tracked document is re-fetched daily; when one changes, the change appears here with its full before and after. That is how a status change would be caught. Full record, including every baseline →

Baseline: 26 Jul 2026 — 96 documents and 25 App Store labels across 31 companies. Every snapshot is a commit in the public repository; nothing here can be silently rewritten, including by us.

31companies
96documents
25App Store labels
26 Jul 2026recording since
dailylast snapshot 24 Oct 2026
No cookies, no analytics — JavaScript only on the opt-in alerts page Every snapshot is a public git commit — tamper-evident Statuses cite their evidence and can be disputed publicly The data is CC0 — build on it