They do. There&#x27;s an audit that confirms it, and you can use Validation Logging to verify it yourself: <a href="https:&#x2F;&#x2F;threema.ch&#x2F;validation&#x2F;" rel="nofollow">https:&#x2F;&#x2F;threema.ch&#x2F;validation&#x2F;</a>