Teamsworks security & privacy
Understand workspace access rules, encrypted messaging requirements, metadata, recovery limitations and privacy boundaries in Teamsworks.
Workspace access
Only members can read their company workspace. Owners and workspace admins manage membership; managers assign work. A website administrator role does not grant Team workspace membership.
Chat privacy
Chat messages and voice notes are readable only by current workspace members who belong to the conversation, enforced by database access rules and a private file bucket with short-lived links. They are encrypted in transit and stored by the provider, but they are not end-to-end encrypted; Matrix end-to-end encryption needs a configured homeserver.
Metadata and task privacy
Workspaces, memberships, task descriptions, assignments, timestamps and activity are stored server-side with access controls; task content is not end-to-end encrypted. Messaging encryption would not hide all routing metadata.
Devices and recovery
Device verification and encrypted recovery must be completed before secure messaging launches. Lost recovery material may mean lost history. Frontend compromise or malicious scripts can still threaten browser encryption.