The best European chat and calling apps

Encrypted messengers, and exactly who can read what you send

What actually separates a European-made chat or calling app from a global one has less to do with the encryption itself — most serious messengers now use variants of well-studied, publicly documented protocols — and more to do with jurisdiction and business model. A company legally headquartered and controlled in an EU country or the UK falls under GDPR, but more to the point it is also subject to that country’s own rules on data requests and national-security access, not a foreign government’s, which is why we track where a company is actually incorporated and controlled today rather than where its marketing copy says it was “founded.” A number of tools in this category, including Threema and Session, also let you register without handing over a phone number, which limits what any provider could ever be compelled to disclose in the first place.

One concrete regulatory hook specific to this category is the EU’s Digital Markets Act. Its Article 7 requires a “gatekeeper” messaging service — so far that designation has only ever been applied to Meta’s WhatsApp and Messenger, not to other large messengers — to publish a technical reference offer and, on request, open up interoperability to other providers free of charge, generally within three months. The obligation is being phased in by feature:

• Basic one-to-one text messaging — first to be required.
• Group chats — required from September 2025.
• Voice or video calls — not required until September 2027.

By November 2025 the European Commission confirmed the first two independent, non-Meta services had gone live using that interoperability. It is a mechanism a small European messenger can invoke in principle; whether any particular one has, or plans to, is worth checking directly with the provider rather than assuming.

Separately, and worth noting for anyone choosing an encrypted messenger, EU lawmakers spent much of 2025 and into 2026 negotiating rules aimed at detecting child sexual abuse material online. An interim measure, extended into 2028, lets platforms keep voluntarily scanning for known abuse material but explicitly excludes end-to-end encrypted services from that scanning. A separate, permanent proposal that could allow courts to order broader detection obligations remained under negotiation between Parliament and Council, with no final agreed text as of this writing. We flag this as a live regulatory question rather than a settled fact, and take no position on it either way.

None of this replaces actually checking a tool’s own code and terms, which is why every entry in this category is verified against three things directly:

• Headquarters and control — the country where the company is currently based (ownership changes, so we recheck it rather than trust an old listing).
• Open source — whether the client you install is published as open source and can be independently rebuilt from that source.
• A real, dated price — taken from the provider’s own current pricing page, not a press release.