In short
- We require valid legal process, and we read every request carefully.
- We tell the customer before disclosing, unless the law forbids it.
- We challenge requests that are overbroad or unlawful.
Our principles
Customers own their documents. We disclose customer data to a public authority only when the law requires it, and we give only the data that the request specifically covers. We do not build back doors or give any authority direct access to our systems.
What we require
Requests must be in writing, come from an authority with jurisdiction, and follow the applicable legal process, such as a subpoena, court order, or search warrant in the United States. Requests from outside the United States should use a mutual legal assistance treaty, letters rogatory, or another mechanism that the law recognizes. Where possible, we ask the authority to request the data from the customer first.
Notice to customers
We notify the affected customer before disclosing their data, so they can seek a remedy, unless the law or a court order forbids it or there is an emergency. If we are prohibited from notifying, we notify once the prohibition ends.
Challenging requests
We review each request. When a request is overbroad, unclear, or conflicts with the law of another country, including the GDPR, we ask for it to be narrowed or we challenge it. For data from the European Economic Area, we assess the request against article 48 of the GDPR and the commitments in our data processing agreement.
Emergencies and preservation
If we believe in good faith that disclosure is needed to prevent death or serious physical harm, we may disclose limited data without delay. We may preserve data for up to 90 days when an authority asks, while it obtains formal legal process.
How to send a request
Authorities can send requests to hi@insigner.co with the subject “Legal request”, or by mail to Nubesti LLC, 1111B S Governors Ave STE 23840, Dover, Delaware 19904, United States. This address does not accept service of process on behalf of our customers.