Security Intelligence

Secure Communications for Executives | CloseProtectionHire

Q: "Is Signal actually secure for executive communications?"

"Signal is the most widely recommended end-to-end encrypted messaging platform for sensitive communications and is used by security services, journalists, lawyers, and government agencies globally. It uses the Signal Protocol, which is open-source and independently audited. Messages are encrypted between devices, and Signal stores minimal metadata -- the company cannot provide message content in response to legal demands because it does not hold it. For most threat models, Signal represents a high level of messaging security. The limitations are: it requires a phone number to register (some executives use a dedicated SIM), it is blocked in China and some authoritarian states without VPN, and like any secure system its security depends on device security -- a compromised endpoint breaks the encryption regardless of the protocol."

Q: "What is the difference between end-to-end encryption and in-transit encryption?"

"In-transit encryption (TLS/HTTPS) encrypts communications while they are moving across networks. It protects against network-level interception. The provider's servers can still read the content -- standard email, SMS, and most business messaging platforms use in-transit encryption only. End-to-end encryption (E2EE) encrypts the content such that only the sending and receiving devices can decrypt it. The service provider cannot read the messages. Signal, WhatsApp (when E2EE is enabled), ProtonMail, and iMessage (within Apple ecosystem) use end-to-end encryption. The distinction matters because in-transit encryption protects against network interception but not against platform-level access requests from governments or following a provider compromise."

Q: "Is WhatsApp secure enough for executive communications?"

"WhatsApp uses the Signal Protocol for end-to-end encryption of messages, meaning the content of messages is encrypted in the same way as Signal itself. The practical security distinction is metadata: WhatsApp is owned by Meta (Facebook), which collects and retains metadata -- who you communicate with, when, for how long, from what location. This metadata is available to Meta and may be subject to law enforcement requests. For executives whose threat model includes state-level adversaries, corporate intelligence operations, or situations where who-communicates-with-whom is sensitive, Signal's metadata minimisation is a meaningful advantage. For most corporate use cases where the primary concern is network-level interception rather than state or corporate intelligence targeting, WhatsApp's encryption is functionally adequate."

Q: "How should executives handle email security?"

"Standard corporate email -- whether Outlook, Gmail, or most enterprise platforms -- is encrypted in transit but accessible to the email provider and subject to legal requests. For communications that should not be accessible to anyone other than the sender and recipient, end-to-end encrypted email is the appropriate tool. ProtonMail (Switzerland) and Tutanota (Germany) offer E2EE email with servers in privacy-friendly jurisdictions. The limitation is that E2EE email only works end-to-end if both parties use the same service or use PGP encryption. For sensitive external communications where the counterparty cannot be moved to a secure email platform, a secure messaging channel (Signal) for the sensitive elements and standard email for non-sensitive administrative exchange is a practical approach."

Q: "What should an executive do if they believe their communications have been compromised?"

"If there is reason to believe communications are being intercepted -- anomalous access notifications on email or device accounts, information appearing in contexts that suggest interception, or confirmed breach notifications -- the immediate steps are: report to the organisation's IT security team or CISO, cease sensitive communications on the potentially compromised platform immediately, change all passwords on uncompromised devices, and if the threat is serious, request a Technical Surveillance Countermeasures (TSCM) sweep of the executive's office and residence. Do not attempt to investigate the compromise personally -- this can destroy forensic evidence and may alert the adversary. A specialist digital forensics firm (CrowdStrike, Mandiant, Cyjax, Secureworks) should assess any suspected compromise."

What encrypted messaging, email, and device security actually means in practice. A security consultant's guide to the tools and protocols that protect executive communications from interception.

1 May 2026

Written by James Whitfield, Senior Security Consultant

Speak to the Team

Executives communicate about sensitive matters constantly: commercial negotiations, board decisions, security arrangements, legal matters, and personal information that carries real risk if intercepted. Standard corporate email and messaging platforms encrypt communications in transit but leave them readable by the platform provider and subject to legal requests. In some operating environments – China, Russia, Gulf states with broad cybercrime laws – even in-transit encryption does not prevent state-level access.

This guide covers the practical tools and protocols for secure executive communications: what the encryption categories actually mean, which platforms provide what level of protection, and the operational discipline that makes communications security functional rather than theoretical.

What “encrypted” actually means

Encryption terms are used loosely in marketing and media, but the operational distinction that matters for executive security is:

In-transit encryption (TLS/HTTPS): Communications are encrypted while moving across networks. This prevents interception at the network level – a hostile actor on the same Wi-Fi network cannot read the messages as they travel. However, the service provider (email host, messaging platform, cloud storage) holds the decryption keys and can read the content. Standard corporate email, Microsoft Teams, Zoom (standard), Slack, and most business communication platforms use in-transit encryption.

End-to-end encryption (E2EE): Communications are encrypted such that only the sending and receiving devices can decrypt them. The service provider does not hold the decryption keys and cannot read the content. Signal, WhatsApp (messages), ProtonMail (ProtonMail to ProtonMail), iMessage (Apple to Apple), and some enterprise collaboration platforms with E2EE settings use this model.

Zero-knowledge encryption: An extension of E2EE in which the service provider cannot access any of the user’s data, including account metadata. ProtonMail and some secure storage services (Tresorit) operate on this model.

For executives, the practical significance is: in-transit encryption protects against network interception. E2EE protects against platform-level access (law enforcement requests to the provider, provider compromise, state-mandated access). For communications involving commercially sensitive material, legal matters, or security arrangements, E2EE is the appropriate standard.

Secure messaging platforms

Signal is the platform most widely recommended by the security community for sensitive communications. It uses the Signal Protocol (open-source, independently audited), stores minimal metadata, and has been subjected to multiple law enforcement demands that it was unable to fulfil due to its data minimisation architecture. Signal stores only the date of account creation and the date of last connection – not message content, contact lists, group memberships, or message timing.

Practical deployment: Signal works on iOS and Android. Disappearing messages should be enabled for the most sensitive communications channels – once messages expire, they are gone from both devices regardless of server-side retention. A dedicated SIM or a number registered to a non-personal identity is used by some executives to further reduce the metadata footprint.

WhatsApp uses the same Signal Protocol for message encryption and is functionally equivalent for message content security. The distinction is metadata: Meta collects who you communicate with, when, for how long, and from what location. For executives whose threat model includes sophisticated commercial intelligence operations or state-level adversaries interested in relationship mapping, Signal’s metadata minimisation is meaningful. For most corporate users whose primary concern is network-level interception, WhatsApp is functionally adequate.

iMessage uses E2EE within the Apple ecosystem (blue bubbles). When sending to Android (green bubbles), messages revert to SMS – no encryption. For executive teams that are entirely on Apple devices, iMessage provides E2EE. For mixed device environments, a platform-independent E2EE solution (Signal) is more reliable.

Secure email

Standard corporate email – Outlook via Exchange/Microsoft 365, Gmail via Google Workspace – is encrypted in transit but accessible to the provider and subject to legal requests in the provider’s jurisdiction. For most routine corporate communications, this is an acceptable security posture. For legally sensitive, commercially sensitive, or security-related communications, E2EE email provides a higher standard.

ProtonMail (headquartered in Switzerland, subject to Swiss law) provides E2EE for messages sent between ProtonMail accounts. Messages sent to non-ProtonMail accounts are encrypted in transit only. ProtonMail has been subject to law enforcement requests but can provide only limited metadata due to its zero-knowledge architecture. Switzerland’s data protection framework is more protective than US or UK frameworks for most purposes.

Tutanota (Germany) operates similarly to ProtonMail. The German legal framework applies. For executives operating in EU contexts, Tutanota’s German jurisdiction may be preferable.

The limitation of secure email is that it only provides E2EE end-to-end if both parties use compatible systems. An executive sending ProtonMail to a counterparty using Outlook receives in-transit encryption from the Outlook side only. For sensitive external communications where the counterparty cannot be moved to a compatible platform, Signal for the sensitive content and secure email for non-sensitive administrative exchange is a practical split.

Voice communications

Standard phone calls (carrier network or standard VoIP) are not E2EE. In many jurisdictions, they are legally accessible to authorities with appropriate orders. In China, Russia, Iran, and several other states, they should be assumed accessible to the state without judicial oversight.

Signal voice and video calls use E2EE and provide the same level of protection as Signal messaging. For sensitive voice conversations in high-risk operating environments, Signal calls are the appropriate tool.

Encrypted satellite phones (certain Iridium and Thuraya configurations) provide communications in areas with no mobile coverage but typically use in-transit rather than E2EE encryption.

Hardware security

Communications security rests on the security of the endpoint device. Hardware controls that support executive communications security:

Screen privacy filters prevent shoulder-surfing in public environments – trains, airports, hotel lobbies – where the executive is working on sensitive material. Physical-layer threat that is easily addressed.

Hardware security keys (YubiKey, Titan Security Key) provide hardware second-factor authentication for email and cloud service accounts. Phishing attacks against executive accounts frequently target the authentication credential. Hardware 2FA cannot be phished remotely – the attacker requires physical possession of the key.

Device management. Corporate devices should be managed under a Mobile Device Management (MDM) platform that enables remote wipe if the device is lost or stolen. An unlocked corporate device that is lost in a high-risk environment is a communications security incident regardless of the encryption on individual apps.

Tiered communications model

Rather than requiring all communications to use the highest-security available platform, a tiered approach is more operationally practical:

Tier 1 (standard corporate tools): Routine administrative communications, meeting scheduling, non-sensitive operational coordination. Standard corporate email and messaging.

Tier 2 (in-transit encryption minimum): Commercially sensitive but not exceptional communications, team coordination on ongoing projects. Corporate collaboration platform with in-transit encryption minimum.

Tier 3 (E2EE required): Legal matters, security arrangements, active commercial negotiations, sensitive financial information. Signal for messaging, ProtonMail for document exchange where both parties are on compatible platforms.

Tier 4 (maximum security): Active security incidents, K&R situations, crisis management communications, information that would be commercially or personally dangerous if intercepted. Signal with disappearing messages on designated device. Pre-established out-of-band communication method if primary channels are compromised.

For the broader digital security framework that this communications model sits within, see our executive digital security guide for international travel. For the technical surveillance countermeasures that address physical interception of communications in the executive’s office or residence, see our TSCM guide.

Sources

NCSC: End-to-End Encryption: What It Is and Why It Matters, National Cyber Security Centre, 2024. Signal: Technical Documentation and Security Audit Records, 2023. EFF: Surveillance Self-Defence – Communications Security, Electronic Frontier Foundation, 2024. CISA: Mobile Device Security Best Practices, Cybersecurity and Infrastructure Security Agency, 2024. ProtonMail: Security Model and Transparency Reports, Proton Technologies AG, 2024. GCHQ/NCSC: Guidance on Encrypted Communications for Businesses, 2024. Amnesty International: Security Lab – Communications Security Review 2024. Apple: Platform Security Guide 2024.

Summary

Key takeaways

Endpoint security determines the ceiling of communications security

The strongest encryption protocol is defeated by a compromised device. An executive who uses Signal on a phone with an unpatched operating system, or who has installed software from unverified sources, or whose phone has been physically accessed by a hostile actor, has no communications security regardless of the app used. Device security -- regular OS updates, no sideloaded apps, screen lock with strong PIN/biometric, MDM management on corporate devices -- is the foundation that communications security is built on.

Metadata is as sensitive as content for some threat models

The fact that an executive communicated with a specific person at a specific time and location may be as sensitive as what was said, depending on the context. Standard email, WhatsApp, and SMS create extensive metadata records. Signal minimises metadata retention. For executives involved in M&A activity, regulatory matters, journalist sources, or commercial negotiations where the counterparty relationship is itself sensitive, metadata discipline matters as much as message content encryption.

Different threat levels require different tools -- not one platform for all communications

A tiered communications approach is more practical than requiring all executive communications to use the most secure available platform. Routine scheduling and administrative communications can use standard corporate email. Commercially sensitive negotiations use a corporate secure messaging platform or Signal. The most sensitive communications -- security arrangements, active legal matters, K&R or crisis management -- use Signal with disappearing messages enabled and devices that are managed under the clean device protocol.

Encrypted email only works end-to-end if both parties are on an E2EE platform

An executive who sends a ProtonMail message to a Gmail address receives in-transit encryption from the Gmail side but not full E2EE -- the message is accessible to Google at the receiving end. E2EE email requires both parties to use compatible systems. For sensitive external communications, agreeing in advance on a shared secure channel (Signal for message, ProtonMail to ProtonMail for document exchange) is more reliable than assuming the counterparty's email provider respects the same privacy standards.

Physical security of the device is the last line of communications security

Communications security assumes the device is under the executive's physical control. An unattended phone in a hotel room in a high-risk environment, a device left with a border official for inspection, or a device that has been through hands other than the executive's should be treated as potentially compromised. The clean device protocol addresses this for high-risk travel markets, but device custody discipline is relevant in any environment where the executive's commercial interests make them a worthwhile target.

FAQ

Frequently Asked Questions

Signal is the most widely recommended end-to-end encrypted messaging platform for sensitive communications and is used by security services, journalists, lawyers, and government agencies globally. It uses the Signal Protocol, which is open-source and independently audited. Messages are encrypted between devices, and Signal stores minimal metadata – the company cannot provide message content in response to legal demands because it does not hold it. For most threat models, Signal represents a high level of messaging security. The limitations are: it requires a phone number to register (some executives use a dedicated SIM), it is blocked in China and some authoritarian states without VPN, and like any secure system its security depends on device security – a compromised endpoint breaks the encryption regardless of the protocol.

In-transit encryption (TLS/HTTPS) encrypts communications while they are moving across networks. It protects against network-level interception. The provider’s servers can still read the content – standard email, SMS, and most business messaging platforms use in-transit encryption only. End-to-end encryption (E2EE) encrypts the content such that only the sending and receiving devices can decrypt it. The service provider cannot read the messages. Signal, WhatsApp (when E2EE is enabled), ProtonMail, and iMessage (within Apple ecosystem) use end-to-end encryption. The distinction matters because in-transit encryption protects against network interception but not against platform-level access requests from governments or following a provider compromise.

WhatsApp uses the Signal Protocol for end-to-end encryption of messages, meaning the content of messages is encrypted in the same way as Signal itself. The practical security distinction is metadata: WhatsApp is owned by Meta (Facebook), which collects and retains metadata – who you communicate with, when, for how long, from what location. This metadata is available to Meta and may be subject to law enforcement requests. For executives whose threat model includes state-level adversaries, corporate intelligence operations, or situations where who-communicates-with-whom is sensitive, Signal’s metadata minimisation is a meaningful advantage. For most corporate use cases where the primary concern is network-level interception rather than state or corporate intelligence targeting, WhatsApp’s encryption is functionally adequate.

Standard corporate email – whether Outlook, Gmail, or most enterprise platforms – is encrypted in transit but accessible to the email provider and subject to legal requests. For communications that should not be accessible to anyone other than the sender and recipient, end-to-end encrypted email is the appropriate tool. ProtonMail (Switzerland) and Tutanota (Germany) offer E2EE email with servers in privacy-friendly jurisdictions. The limitation is that E2EE email only works end-to-end if both parties use the same service or use PGP encryption. For sensitive external communications where the counterparty cannot be moved to a secure email platform, a secure messaging channel (Signal) for the sensitive elements and standard email for non-sensitive administrative exchange is a practical approach.

If there is reason to believe communications are being intercepted – anomalous access notifications on email or device accounts, information appearing in contexts that suggest interception, or confirmed breach notifications – the immediate steps are: report to the organisation’s IT security team or CISO, cease sensitive communications on the potentially compromised platform immediately, change all passwords on uncompromised devices, and if the threat is serious, request a Technical Surveillance Countermeasures (TSCM) sweep of the executive’s office and residence. Do not attempt to investigate the compromise personally – this can destroy forensic evidence and may alert the adversary. A specialist digital forensics firm (CrowdStrike, Mandiant, Cyjax, Secureworks) should assess any suspected compromise.

Get in Touch

Request a Consultation

Describe your security requirements below. All enquiries are confidential and handled by licensed consultants.