Compliance archiving without the enterprise contract

The barrier was never one number

If you run a sales team of 15 and you have ever looked at enterprise messaging governance software, you know how the conversation goes. There is no price on the website. There is a demo form. Six weeks later there is a quote, an annual contract, a security questionnaire, and a deployment plan.

That sequence is the barrier. Not the per-seat figure, which for some platforms is not even unreasonable. The cost that kept these systems inside banks was the procurement cycle, the minimum commitment, and the rollout project that had to happen before a single message was captured.

A 15-person brokerage does not have a procurement cycle. That is why this category was, for 10 years, something you read about rather than something you bought.

What the enterprise platforms actually do

It is worth being accurate about this, because the answer is not “the same thing, more expensive.”

LeapXpert and platforms like it govern messaging across many channels at once: WhatsApp, iMessage, WeChat, Signal, Telegram, SMS, LINE and RCS. They give each employee a single professional identity, so the client never has the rep’s personal number. Employees message from inside Microsoft Teams or a dedicated app, and the message goes out through a governed relay.

That relay is where the control lives. Policy enforcement at the moment of sending. Information barriers between desks. Data loss prevention. Real-time supervision. Capture that is timestamped and immutable, and that exports into whatever archiving, conduct-monitoring or eDiscovery system the firm already runs.

They hold SOC 2 Type 2, ISO 27001, GDPR and CCPA. Gartner has named LeapXpert a Visionary in the Digital Communications Governance and Archiving Magic Quadrant 2 years running. This is serious software solving a serious problem for firms where a regulator can ask for every message a trader sent in 2023 and expects an answer.

Why that architecture costs what it costs

The relay model has one requirement that drives everything else: your reps stop using WhatsApp.

They use Teams. The client uses WhatsApp. The platform sits in the middle on the official WhatsApp Business Platform. That gives you total capture and total control, and it also gives you a change-management project. Every rep has to learn a new place to work. You inherit the official platform’s rules: message templates, the 24-hour window, per-message costs, no group chats.

For a firm with a compliance department, an IT team and a regulator to satisfy, that trade is obviously worth it. For a real estate team where 12 agents live in WhatsApp on their phones all day, it is a wall.

What changed

Companion device linking.

WhatsApp lets a number be linked to additional devices. Point a company-owned number at a service, scan a QR code once, and every message on that number is captured server-side from that moment on. It takes about 1 minute. Nothing is installed on anyone’s phone. Reps keep using WhatsApp exactly the way they use it now, on the device they already carry.

Remove the deployment project and you remove the reason the price had a floor under it. There is no rollout to staff, no client to migrate to, no integration work. Our pricing is per monitored number rather than per seat, and manager, director and auditor seats are unlimited at every tier. A 10-number team is $99 a month. There is a 14-day trial and you can see how the linking works before you talk to anyone.

That is the honest version of “now a small business can have this.” Not that the enterprise platforms were overcharging. They built a heavier machine for a heavier problem. What changed is that the lighter version of the problem now has a lighter answer.

What you do not get, and this is the part to read twice

This is not FINRA or SEC-grade archiving. If you are a registered broker-dealer or investment adviser subject to SEC Rule 17a-4 or FINRA Rule 4511, you need a records system built and attested for that purpose. Buy Smarsh, or an equivalent regulated archive. Do not buy a $99 tool and tell your examiner it is covered, because it is not.

One channel. WhatsApp only. If your reps also use iMessage, Signal, WeChat or SMS with clients, those conversations are not in the record and nothing here pretends otherwise.

No controls at the point of sending. There is no data loss prevention, no information barriers, no policy enforcement, no real-time supervision. The system observes. It has no outbound send path at all, by design, which means it can record that something was said but it cannot stop it being said.

No eDiscovery workflow. You get search and export, and legal hold from the Growth plan up. You do not get review workflows or case tooling.

Company-owned numbers only. A record of a rep’s personal number is not something we build, and you should be suspicious of anyone who offers it.

History before linking is limited. The archive starts when the number is linked. Conversations from before that point are partial at best.

Ban risk on WhatsApp is not zero. No vendor can promise otherwise, and any vendor who does is telling you something they cannot know.

Who should buy which

Buy an enterprise governance platform if you are a regulated financial institution, if a regulator can compel production of your messages, if your people use 3 or more messaging channels with clients, or if you have an IT and compliance function that can absorb a rollout. That is the problem these platforms were built for and they are good at it.

Buy the lighter version if you have between 8 and 60 reps selling on company WhatsApp numbers, no compliance department, and a specific question you cannot currently answer: what did the team actually say, how fast did they reply, and what happens to those relationships when someone resigns.

Buy both if you are somewhere in the middle. They are not mutually exclusive and they answer different questions.

There is a longer breakdown of how the two categories differ on the enterprise archiving comparison page, and our own security posture is documented rather than summarized, so you can check it against whatever your buyer asks.

The one question worth asking either kind of vendor

Ask what happens to a message that was delivered and then recalled 4 minutes later, while the rep’s laptop was shut.

An enterprise relay platform will tell you it never left their infrastructure, so the original is in the archive. A companion-device archive will tell you it was captured at delivery and the recall is recorded as a separate event. A tool that reads a browser window will tell you something vaguer.

The vaguer answer is the one that tells you what you are actually buying.