CM Chat logoCM Chat

Trust Center

Security you can ask about, in detail.

The pages a school district, an IT manager or a security reviewer reads before buying a chat product. We describe what CM Chat does today, and we share the technical detail directly with the people who need it.

Last reviewed October 2026

Security documentation

Available on request.

We do not publish technical detail about how CM Chat is protected. We give it to customers and reviewers who ask.

Ask for the security documentation

Detailed security documentation is available on request: security@cmchat.app.

Email security@cmchat.app

What you can ask for

  • A security overview for your reviewers
  • An architecture summary
  • Subprocessor details
  • Answers to your security questionnaire
  • A call with the people who run CM Chat
  1. 1

    Write to us

    Tell us who you are and what your review needs.

  2. 2

    We reply

    A person answers, usually within a few business days.

  3. 3

    We share what fits

    You receive the documents that answer your questions.

What we protect

Three things matter most.

Everything else in the Trust Center supports one of these.

  • Your messages and files

    Encrypted in transit and at rest, and kept apart from every other organization's data.

  • Your people's details

    Names, email addresses and other personal details are stored protected, not in the clear.

  • Access to your workspace

    Invitations, sign-in with an email code or a passkey, an optional second step, limited sessions and a log of admin activity.

Read it by topic

Four documents.

Each page covers one question and says where something is not built yet.

  • Access

    Sign-in, second steps and passkeys, sessions, guests, country limits and the admin activity log.

  • Data

    Where data is hosted, how long it is kept, backups, export and what happens when a workspace is deleted.

  • Subprocessors

    Every third party that handles customer data, what for, which data and where. Dated October 2026.

  • Report a vulnerability

    How to reach us, what is in scope, our safe-harbour promise and what to expect in reply.

  • Privacy Policy

    What we collect, why, and how long we keep it, from Image Depot LLC.

  • Terms of Service

    The agreement between your organization and Image Depot LLC. See also the security overview.

Stated plainly

What we do not claim.

A reviewer should not have to read between the lines.

Find it fast

Machine-readable contact.

The same contact details are published for automated tools.

Security contact
security@cmchat.app
security.txt
cmchat.app/.well-known/security.txt
General and sales
hello@cmchat.app
Operator
Image Depot LLC

Questions from your security team?

Write to hello@cmchat.app and a person will reply. To report a vulnerability, write to security@cmchat.app (see how to report, and security.txt).

Detailed security documentation is available on request: security@cmchat.app.

Schools and districts: talk to us about your district's requirements. We would rather answer a specific question than hand you a badge.