Law Enforcement Requests

Our approach

We protect our customers' data and disclose it only when the law requires. We review each request for legal validity and scope, and we push back on requests that are overbroad or unclear.

What we require

• Non-content information (such as account name or billing details): a valid subpoena or equivalent legal process.
• Content (such as records, messages or files): a search warrant issued under procedures described in the Federal Rules of Criminal Procedure or equivalent state warrant procedures, upon a showing of probable cause.
• Requests from outside the United States: through a Mutual Legal Assistance Treaty or other valid U.S. process.

Telling our customers

We notify the affected business before disclosing information, unless the law prohibits it or there is an emergency. If a non-disclosure order ends, we notify the business then.

Emergencies

If there is an emergency involving danger of death or serious physical injury, we may disclose information without legal process as allowed by law. Mark the request as an emergency and explain the situation.

How to send a request

Email hello@thora.cloud with "Legal process" in the subject from an official government email address, or mail it to [TBD: mailing address for legal notices]. Include the requesting agency, the officer's name and contact details, and the specific account and information requested. Sending a request by email does not waive any legal objections.