The Chat Intelligence Engine detects and categorises messaging platform usage across your workforce. It monitors both web-based chat services (via browsing activity) and native desktop applications (via process tracking) to build a complete picture of how teams communicate. Importantly, the engine tracks platform usage and duration only. It does not capture message content.

Platforms are classified into enterprise and consumer categories. Enterprise platforms like Microsoft Teams, Slack, and Webex are expected in most organisations. Consumer platforms like WhatsApp, Telegram, Discord, and Signal may indicate shadow IT or data exfiltration channels. The engine highlights when employees adopt new platforms or shift communication to unsanctioned services.

Chat activity data feeds into the Insider Threat engine, where unusual platform adoption or after-hours messaging contributes to risk scoring. It also feeds into the Productivity engine for communication time analysis.