ChallengeThe customer's clients are large companies, which prioritise corporate security and the protection of confidential data. They could use popular commercial solutions like WhatsApp or Telegram for message and file exchange, but that would not guarantee the safety of their data. All the information would then be stored on remote servers, accessible to third parties or security services. The customers needed to guarantee that the messenger would have no "backdoors" and would not be compromised, and nobody would be able to intercept the data in transfer. A decision was made to develop a customised application based on the security requirements. The customer came to us with this request.
ApproachThe requirement was to remove the slightest risk of messages being intercepted, application compromised, devices impersonated or someone's account accessed without authorisation. Apart from end-to-end 256 bit encryption to ensure maximum security for user communications, the developers applied few creative solutions:
• Remote servers are completely removed from the data transmission sequence.
• Encrypted information is only stored on users’ devices.
• Messages can be automatically deleted after some time.
• The messenger only functions within the internal company network.
Seven developers had been working on Android mobile client and web-version for 12 months.
ResultOur corporate messenger complies with all the security standards of today. Two-factor authentication is used to authorise access to accounts, with the application associated with a phone number. With remote servers removed from the data transmission sequence, third parties cannot access corporate data. The application is now actively used by large companies with over 15,000 employees. Customers can use it to make major deals and collaborate on important projects without any worries about data security.
- 1 - Project manager
- 1 - Analyst
- 1 - Back-end developer
- 1 - Front-end developer
- 2 - QA Engineers
- 1 - Mobile developer