Messaging

In Kolekto's Messaging module, conversations can only be opened through justified, time-limited access, and only if the organization has chosen the auditable mode; in that mode, employees accept a monitoring notice before using messaging. The audit manager signs in with their account's two-step verification code and opens access to a conversation, 30 minutes by default, by choosing a reason category and entering an explanation; every view is logged, and the organization can add an approval step for this access. Conversations set as "private chat" cannot be audited.

Kolekto's Messaging module supports one-to-one and group chats, and groups can have a photo, a description and an invite link. Files up to 25 MB can be shared, and messages can be replied to, forwarded, starred and searched.

Tenant isolation is enforced in three layers: every query is scoped to the organization and that rule is verified by automated checks before releases; files live in a fully private bucket and are served only through short-lived signed links after an authorization check; file paths are separated per organization too. On top of that: role-based access, hashed session tokens and an audit trail for critical actions. Internal communication messages are stored encrypted on the server; the organization chooses whether conversations are auditable from the admin panel or private.

Kolekto runs in the browser and is fully responsive; use it from phone, tablet or desktop with no installation. Employees open leave requests from their phone, managers approve from theirs.

Access is role-based: only those with HR module permission see employee records, and every employee can access their own. Critical actions are written to the audit log, so who viewed and changed what is traceable.