Encrypted in Transit, Readable in Backup
Encrypted, and Still Readable
In August 2026 Apple confirmed it is challenging a second secret UK order for access to encrypted iCloud data. This brief asks who can read an end-to-end encrypted conversation once its copies reach cloud backups, on a principal's phone and on the phones of everyone in the thread. Built from provider security documentation, the reported record of the UK orders and documented cases of backup-derived evidence. For principals, family offices and the counsel and staff who hold their threads.
Unlock this Command Brief.
Get this assessment, the full subscription collection, and new intelligence as it is published.
For your first year, then $100/month. Or $750 for the first year, then $1,000 annually.
- The CORGI Morning Brief, each morning
- This brief and the subscription collection, 90+ briefs
- New Command Briefs as they are released
- Principal and Analyst briefs, as PDF
Secure checkout through Substack. Substack asks for your email first.
How it happens
Provider-held copies
A provider retains copies, keys or logs (backups, notifications, AI conversations, purchase records) beyond what the user sees or deletes.
More on acquire and collect →- Mechanism · Acquire and collectCounterparty-held copies. Contacts, staff or their tools hold and expose a person's data outside the person's control.
- Mechanism · Acquire and collectCompelled access. Legal or border authority compels devices, passcodes, provider records or decryption.