Comma Compliance
Trust through transparency: Open‑Source Comms Capture
Start new thread

Comma Compliance Android Archiver - Open-source SMS, MMS, and RCS capture for managed Android

by•
Comma captures business messages across 40+ channels for regulated companies. This is the Android app that handles SMS, MMS and RCS on fully managed, company-owned devices. Now public, so your security team can read what it reads before it goes on the fleet.

Add a comment

Replies

Best
Maker
📌
Hi all! Short answer on what this is: the Android app that captures SMS, MMS and RCS on company phones, for firms that are legally required to keep a record of it - banks, broker-dealers, advisers. Source is public now. Why: this thing runs on employee phones. If we're asking a security team to put our code on a thousand company-owned handsets, they should get to read it first. What it reads, what it skips, what actually leaves the device. Mechanism: it reads messages the phone's default messaging app has already stored, encrypts on the device, and ships straight to the customer's own archive. Nothing intercepted in transit. While it's running, the phone shows a persistent notification naming the organization doing the capturing, so nobody finds out about this after the fact. We did the same thing with WhatsApp and Signal capture in 2025, after the TeleMessage breach put plaintext chat logs on an intermediate archive server. Same reasoning here. Transparency matters and in regulated industries, it's shocking how opaque compliance is. Happy to answer anything on the capture mechanism.