What compliance obligations apply when employees use chat apps and collaboration tools that the records system does not capture?

When employees communicate through chat apps, instant messaging, or collaboration platforms, those messages can still be records. Compliance obligations attach to the content and function of a communication, not to the channel it travels on or whether your official system happens to capture it. A gap in capture does not create a gap in responsibility.

Obligations Do Not Depend on the Tool

If a message documents a decision, transaction, approval, or other activity that your retention schedule defines as a record, it must be retained for its full required period regardless of where it lives. The core duties carry over to chat and collaboration tools:

• Recordkeeping and retention — apply existing schedules to messaging content; do not let short-lived or ephemeral channels become a default disposal mechanism.
• Capture and accessibility — records must remain findable, complete, and usable for as long as they are needed.
• Defensible disposition — destroy only under an authorized schedule, never by inattention.

Discovery, FOIA, and Privacy Still Reach Them

Messages in collaboration tools are routinely subject to litigation holds and e-discovery, and in the public sector to access requests. The duty to preserve potentially relevant information overrides routine deletion or auto-expiration settings, and obligations under records and access laws apply to qualifying content wherever it resides. Sensitive content (personal data, controlled information) carries the same protection and disclosure duties it would in any other system.

Closing the Gap

When the system of record cannot capture a tool, the risk shifts to people and policy. Practical steps:

• Decide whether a tool is approved for substantive business communication, and document that decision.
• Configure retention and disable auto-deletion where messages may be records.
• Train staff on what constitutes a record and where it must be preserved.
• Establish a defensible method to export, hold, or migrate content when needed for retention, holds, or requests.
• Periodically audit channels for shadow recordkeeping.

The goal is not to capture every chat, but to ensure that record-quality communications are governed, preserved, and producible. For more on managing these formats, see the electronic records topic hub.