A separate organization key
The archive is stored encrypted. Opening it requires your organization’s archive password.
TRUST CENTER
How Cerber protects work accounts and conversations
Cerber monitors your work Telegram accounts and saves conversations in an encrypted archive. You manage your team’s access and choose how to connect your AI tools.
14 days · Protect + Archive · up to 5 accounts and 75 GB · no card required
Cerber is an independent service and is not affiliated with Telegram.
Permissions for work tasks
Reading conversations, managing accounts and receiving login codes are separate permissions.
You connect your AI
MCP gives saved data to the AI you choose. Where decryption happens depends on the connection mode.
01 · TELEGRAM ACCESS
What access does Cerber receive?
Cerber connects as an additional Telegram session, visible in the account’s device list. Telegram gives an authorized session broad permissions. Service settings and user permissions limit access within Cerber.
| Feature | Data used | Purpose |
|---|---|---|
| Protect | Active sessions and account security settings. | Monitor new connections, notify users and apply configured protection rules. |
| Archive | Available history of connected chats, messages and supported attachments. | Keep work conversations and find the records you need. |
| MCP | Data already saved in the archive, within the issued access scope. | Answer requests from your AI. The archive interface is read-only. |
Disconnecting Cerber from an account stops monitoring and new imports. Data already saved remains in the organization’s storage.
02 · STORAGE AND KEYS
Where data is encrypted and where it can be read
Protecting a Telegram session and encrypting an archive serve different purposes.
Account monitoring
Monitoring runs in an isolated environment. Keys and Telegram sessions are protected separately from the management interface, limiting access from other service components.
Archive storage
The archive is stored encrypted, with a separate key for each organization. Access to saved objects without the corresponding key does not reveal their contents.
Opening in the browser
When you view the archive in the console, decryption happens in your browser. The archive password unlocks the organization’s key. For MCP, you choose a local or cloud connection separately.
Archive password
Your organization controls the archive password. Keep it in your corporate password manager and assign responsibility for access. A forgotten archive password cannot be recovered.
03 · ORGANIZATION PERMISSIONS
Who can work with conversations?
The administrator’s role and assigned work accounts determine which archives they can access in the console. Reading conversations, managing sessions and receiving login codes are separate permissions.
Work accounts
Agree with employees which work accounts the company connects and which data it retains.
Mixed-use accounts
For accounts mixing personal and work conversations, agree on the archive scope and permissions separately. Standard corporate-account rules should not be applied automatically.
Partner workspaces
Separate partner spaces without shared access require a distinct permission design. Discuss it before importing confidential data.
04 · AI AND MCP
What does your AI receive?
Connect your AI to saved work conversations to find agreements, documents and client context. MCP is read-only. Your AI receives text and files on request; that data is processed under your chosen AI provider’s terms.
Local MCP
Decryption for MCP responses happens on your computer. The bridge receives encrypted objects and sends the result to your AI client. The archive password is used by the local process.
For companies that need archive decryption on their own side.
Cloud MCP
Data is decrypted on the server to answer your AI. The server uses the archive password; if you choose to save it, it is stored encrypted. Your organization selects this mode when setting up the connection.
For connecting compatible cloud AI tools without a local bridge.
Revoke an MCP connection through its token. After changing the allowed accounts, revoke the old token and create a new connection. This does not delete data already sent to an AI or keys already saved locally.
05 · DEPLOYMENT
Cerber cloud or your company’s infrastructure
The free trial runs in Cerber’s cloud. Companies using their own infrastructure can arrange a separate Enterprise deployment.
Cerber cloud
The Cerber team handles infrastructure and updates. You create a workspace, connect the accounts you need and manage access in the console.
Your infrastructure
The system, archive and keys are hosted on your company’s infrastructure. Together with your technical team, we define server requirements, backups, updates and support access. Scope and launch are agreed under Enterprise terms.
06 · DATA CONTINUITY
What history stays with your company
Available history
Archive saves available cloud-chat history and supported attachments. Secret chats, calls and content deleted before connection are not included.
Edits and deletions
For messages captured by the archive, earlier versions and deletion markers are retained. Versions from before archiving began cannot be reconstructed.
Employee handover
Saved records remain in the archive when access to Telegram is lost or an employee leaves. Access follows your organization’s permissions and subscription.
Connection interruptions
When Telegram is unavailable, new imports resume once the connection returns. Access to saved data depends on Cerber’s availability.
TEAM
The people behind Cerber
Cerber is built jointly by XFounders, XF Labs and OQTACORE.
Fazil Suleymanov
Business & Strategy
Fedor Erashev
Development & Partnerships
Dmitriy Elisov
Technology
Nikolay Elisov
Finance & Operations
FAQ
Questions and answers
Can the company read an employee's messages?
Yes, when work chats are saved in the archive and assigned permissions allow access. Connecting an account does not give every employee access to every conversation. Agree in advance which accounts and chats the company will retain.
What happens when an employee leaves?
The admin revokes the employee’s access. The corporate account and number stay with the company. The saved archive remains in shared organization storage; access depends on permissions and the subscription.
Where is archive data decrypted?
The console and local MCP decrypt data on the customer’s side. Cloud MCP decrypts data on the server to answer your AI. Your organization chooses the connection mode. For deployment in your own environment, infrastructure and support access are agreed separately.
Where is our data stored?
Cloud deployments use Cerber’s infrastructure. Enterprise deployments use your company’s infrastructure. If you have requirements for a specific storage region or support access, book a demo to review the setup with your technical team.
Does protection become fully active as soon as we connect?
After connection, Cerber starts monitoring the account’s sessions. Telegram temporarily restricts what new sessions can do, including terminating other connections. Protective actions become available once those restrictions are lifted and follow your selected settings.
What does this add to a corporate number and 2FA?
A corporate number helps retain account ownership, and 2FA protects sign-in. Cerber also monitors active Telegram sessions and saves work history in an archive. Device security, corporate policies and backups are still needed.
Is the archive sent to my AI automatically?
An administrator connects MCP. You choose the AI tool, permitted accounts and decryption mode. That tool processes the data under its own terms. Revoke the connection through its token; previously received data is not deleted by revocation.
Does the archive remain available after losing access to Telegram?
Yes. Saved records remain accessible through the console and MCP within your organization’s permissions and subscription. You can find work conversations, documents and earlier message versions that Archive captured.
What happens to the archive when Archive stops?
For the new offer, collection and MCP access stop after the paid term expires. Archive viewing and export remain available for 30 days. Existing customer agreements are unchanged. With an active subscription, a disconnected work account’s saved archive remains within the organization’s shared quota.
How do we start?
Click Start free trial, register your company and verify your email. Your first platform sign-in starts a 14-day trial: Protect + Archive, up to 5 accounts and 75 GB, no card required. After the trial, you choose and pay for a plan. To see the product with our team first, book a demo.
Try Cerber on your team’s work tasks
Start with the accounts you need in a free trial. To discuss security and deployment first, book a demo.
14 days · Protect + Archive · up to 5 accounts and 75 GB · no card required
The trial starts on your first platform sign-in after registration is complete. Connecting Telegram and importing the archive do not change that period.