Only messages sent in channels with the type “encrypted” and messages directly sent in conversations are end-to-end-encrypted.
Messages in channels with the type "organization", "contact group", "public" and "password secured" or messages send in conversations via broadcast are only transport encrypted.
What is transport encryption?
All relevant data is secured using SSL encryption methods. The securing process uses a 256-bit AES SSL/TLS encryption on the way to our servers, encrypting the data exchange between the server and the end device.
Are personal data (lists, ratings, etc.) allowed to be sent as a file, or only as a text message? Is data security guaranteed with transport encryption?
End-to-end encryption is not a prerequisite for GDPR-compliant processing of personal data. The encryption methods used for files are sufficient for GDPR-compliant processing.