Tracked companies
31 platforms, 87 documents, 25 App Store labels — snapshotted daily at 06:17 UTC. Statuses assessed 26 Jul 2026; how they're assigned.
Scans under the EU's Chat Control 5
The derogation's mandatory reports exist only for providers actually scanning private communications under it. Exactly five filed them, for both 2023 and 2024, per the Commission's own implementation report — this is Chat Control use, documented by the EU itself.
| Company | Documents | App label | Last change |
|---|---|---|---|
| Meta (Facebook, Instagram, Messenger) | 3 tracked | ✓ | quiet since baseline |
| Google (Gmail) | 4 tracked | ✓ | quiet since baseline |
| Microsoft (Outlook, Teams) | 4 tracked | ✓ | quiet since baseline |
| 3 tracked | ✓ | quiet since baseline | |
| Yubo | 1 tracked | — | quiet since baseline |
Scans globally — no EU evidence 13
Their documents disclose content scanning under US law (NCMEC reporting, PhotoDNA). No evidence found that they invoke the EU derogation for private communications — US-law scanning and Chat Control are separate regimes. Absence of evidence is a fact about the public record, not proof of absence: a provider could scan and not disclose it.
| Company | Documents | App label | Last change |
|---|---|---|---|
| Discord | 5 tracked | ✓ | quiet since baseline |
| Snapchat | 3 tracked | ✓ | quiet since baseline |
| TikTok | 3 tracked | ✓ | quiet since baseline |
| X | 2 tracked | ✓ | quiet since baseline |
| 1 tracked | ✓ | quiet since baseline | |
| Zoom | 2 tracked | ✓ | quiet since baseline |
| Twitch | 2 tracked | ✓ | quiet since baseline |
| 3 tracked | ✓ | quiet since baseline | |
| Steam | 3 tracked | ✓ | quiet since baseline |
| PlayStation (Sony) | 2 tracked | ✓ | quiet since baseline |
| Yahoo Mail | 2 tracked | ✓ | quiet since baseline |
| Roblox | 1 tracked | ✓ | quiet since baseline |
| Epic Games (Fortnite) | blocked | — | quiet since baseline |
No clear statement 3
Not end-to-end encrypted, and no clear public statement about scanning private communications was found either way. Silence measures disclosure, not behavior.
| Company | Documents | App label | Last change |
|---|---|---|---|
| Telegram | 4 tracked | ✓ | quiet since baseline |
| Slack | 3 tracked | ✓ | quiet since baseline |
| GMX (1&1 Mail) | 3 tracked | — | quiet since baseline |
States it does not scan 1
The company publicly states that it does not scan message content.
| Company | Documents | App label | Last change |
|---|---|---|---|
| Proton | 4 tracked | ✓ | quiet since baseline |
End-to-end encrypted — out of scope 9
Content is end-to-end encrypted; E2EE communications are formally excluded from Chat Control's voluntary scanning.
| Company | Documents | App label | Last change |
|---|---|---|---|
| Signal | 2 tracked | ✓ | quiet since baseline |
| 3 tracked | ✓ | quiet since baseline | |
| Apple (iMessage, iCloud) | 4 tracked | — | quiet since baseline |
| Threema | 3 tracked | ✓ | quiet since baseline |
| Viber | 3 tracked | ✓ | quiet since baseline |
| Olvid | 3 tracked | — | quiet since baseline |
| Wire | 3 tracked | — | quiet since baseline |
| Element (Matrix) | 2 tracked | ✓ | quiet since baseline |
| Tuta (Tutanota) | 4 tracked | ✓ | quiet since baseline |
Institutional sources 2
The law's own pages, archived under the same rules as everyone else's — no scanning status, because these aren't providers; they're the paper trail.
| Source | Documents | App label | Last change |
|---|---|---|---|
| European Commission | 1 tracked | — | quiet since baseline |
| European Parliament | 1 tracked | — | quiet since baseline |
Currently untrackable
These pages block automated archiving; the block itself is the recorded fact.
| Target | Reason |
|---|---|
| Reddit (policy pages) | Serves an empty JS shell to plain fetches and a "blocked by network security" page to headless Chromium (recorded 2026-07-26). App Store label is tracked meanwhile. |
| Roblox (policy pages) | Zendesk WAF returns 403 to plain fetches and to headless Chromium alike (recorded 2026-07-26). App Store label is tracked meanwhile. |
| Epic Games (policy pages) | Cloudflare returns 403 to plain fetches and to headless Chromium alike (recorded 2026-07-26). |
| Yubo (policy pages) | WAF returns 403 to plain fetches and to headless Chromium alike (recorded 2026-07-26). A confirmed derogation user whose policy pages block archiving. |