Comma Compliance published the source code for its Android software that captures employee text messages for compliance archiving. The Comma Compliance Archiver, which covers SMS, MMS, and RCS, is now on GitHub under the MIT license, so corporate IT and security teams can inspect the capture software before deployment.
The release addresses a specific trust problem in enterprise communications archiving. Comma captures more than 40 channels, and on every other one, no software is installed on employee devices. Android text messaging is the exception, as capture occurs on the device itself.
Rather than ask a security team to trust software it cannot inspect, Comma is publishing the capture mechanism itself: what the application reads, what it does not read, and what data it sends to the customer’s archive.
The archiver reads messages the phone’s default messaging app has already stored, encrypts them on the device, and sends them to the customer’s Comma back end. It does not intercept anything in transit. Coverage includes SMS, including long multipart messages, MMS media, and RCS content: group conversations, attachments, and message edits.
“If our software is going to run on a thousand employee phones, the security team responsible for those devices should be able to read the code before it goes onto the first one,” said Jeremiah Church, CEO of Comma Compliance.
Capture is also visible on the device. While archiving is active, the phone carries a persistent notification naming the organization doing the archiving, so the mechanism is not hidden from the person using the phone.
Comma open-sourced its WhatsApp and Signal capture connectors in 2025, after the TeleMessage breach exposed plaintext chat logs held on an intermediate archive server.
The source is at github.com/comma-compliance/android-capture.
Trademark Notice
Android and Google Messages are trademarks of Google LLC; WhatsApp of Meta Platforms, Inc.; Signal of Signal Messenger, LLC. RCS is a standard of the GSMA. Comma Compliance’s capture applications are neither affiliated with nor endorsed by these companies.
About Comma Compliance
Comma Compliance is a privately held RegTech company headquartered in San Francisco. Founded in 2024, it captures business communications across 40+ channels into a tamper-protected archive built for regulated recordkeeping.
View source version on businesswire.com: https://www.businesswire.com/news/home/20260910105635/en/
Media gallery
