A
Apple App Store apps Signal
Nonprofit-run encrypted messenger · Score 93/100 · Last checked 2026-10-22
Strong record on message privacy. Registration still requires a phone number.
Built from: public records, checked 2026-10-22.
Score breakdown
Who owns it
Parent based in: 🇺🇸 United States
Laws that can apply: US CLOUD Act, FISA 702
Where your data can go
| Who | Country | Why they are involved |
|---|---|---|
| Amazon Web Services | 🇺🇸 United States | Cloud infrastructure (confirmed by Signal's president after the October 2025 outage, per press) |
Jurisdictions touched: 🇺🇸 United States
What the public record says
A major AWS outage disrupted Signal for more than an hour, according to press reports. Content stays encrypted. Source
Signal's privacy policy describes registration codes sent by SMS or call, so accounts are tied to a phone number. Source
Signal's legal-requests page lists government demands since 2016 and says it can supply little more than account-creation and last-connection times. Source
Academic researchers formally analysed the Signal protocol's key agreement and Double Ratchet and reported no major design flaws. Not a vendor-commissioned audit. Source
Sources
Ownership, locations and data partners come from the company's own pages and filings where they exist. Last checked 2026-10-22.