Internal and external messaging for the organization.

On evaluating communication tools: judge every one on four axes, not just “is it encrypted”:

1. Content encryption – is it end-to-end by default, or can the provider read messages?
2. Metadata – what the operator can still see and log (who talks to whom, and when), even when content is encrypted.
3. Infrastructure control – can you self-host or federate, or can a single operator cut you off, change the rules, or be compelled by a government? Prefer self-hostable/federated, then privacy-focused nonprofits, then mainstream platforms.
4. Endpoint security – encryption in transit is moot if the device at either end is compromised; that is usually the real attack surface.