Broker-dealers can inspect or self-host real-time message capture to meet the requirements of the SEC and FINRA.

Comma Compliance launched its open-source code for its real-time WhatsApp and Signal capture tools on GitHub. Firms can now inspect, adapt, or self-host the WhatsApp and Signal capture tools, or rely on Comma’s pre‑configured service that delivers messages into its secure, tamper-proof archive. Neither connector is endorsed by WhatsApp or Signal.

The release comes at a time when broker-dealers are reevaluating their communications compliance stacks, following the widely reported May 2025 TeleMessage breach. Attackers exploited multiple vulnerabilities to access plaintext messages, fueling demand for capture tools that can be independently verified. This reflects Comma’s commitment to building compliance tools that earn trust through transparency.

“By publishing our WhatsApp and Signal capture tools, we invite scrutiny and collaboration, making compliance software more open for everyone,” said Jeremiah Church, CEO of Comma Compliance. “Transparency should be the default in RegTech, not the exception.”

Key Features

• Security & Compliance Details - End-to-end encrypted capture: Messages remain encrypted from device to connector, never exposed in plaintext. Content stay encrypted in transit and rest to meet SEC and FINRA compliance regulations.
• Open, inspectable capture logic enables firms to verify how messages are collected. Receipts prove each captured message is complete and unaltered.
• Open-source licensing
  • WhatsApp: Apache License 2.0
  • Signal: GNU GPL v3
• Self-Hosting or Comma’s Built-out SaaS: Source Code available. No vendor lock-in; or use Comma’s built-in tooling.

Trademark Notice

WhatsApp® is a registered trademark of Meta Platforms, Inc. This release, and Comma Compliance’s WhatsApp connector, are neither affiliated with nor endorsed by Meta Platforms, Inc. Signal™ is a trademark of Signal Messenger, LLC.

About Comma Compliance

Comma Compliance helps regulated firms stay compliant by capturing business communication across 30+ channels, with storage in an immutable archive.

With a smart AI engine to flag risky messages and reduce false positives, Comma assists financial firms by reducing decision fatigue, preparing them for audits, and encouraging them to work smarter, not harder.

As part of its first approach, the privately held SF RegTech company has open‑sourced its WhatsApp and Signal connectors.

Learn more at commacompliance.com.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250805513789/en/

Recent incidents showed the risk of closed capture tools. Our approach is transparent: our WhatsApp and Signal connectors are now open source.