Trust & Safety / CSAM Policy

1. 18 U.S.C. § 2258A Statutory Directive & Zero Tolerance

Natrium Technologies Inc. strictly prohibits the transmission, hosting, distribution, solicitation, or storage of Child Sexual Abuse Material (CSAM), Child Sexual Exploitation and Abuse (CSAE), child grooming, or any form of minor exploitation.

Under 18 U.S.C. § 2258A and federal child safety statutes, electronic communication service providers have a mandatory legal duty upon obtaining actual knowledge or verified detection of apparent CSAM/CSAE to immediately report the incident to the National Center for Missing & Exploited Children (NCMEC) CyberTipline and relevant law enforcement authorities.

2. Automated Prohibited Media Hash Detection & Verification

To prevent illicit media transmission while preserving general user zero-knowledge privacy, Natrium uses automated cryptographic media signature verification at the ingestion boundary:

• Cryptographic Signature Hashing: Attachment payloads and media SHA-256 hashes are evaluated against an active registry of known prohibited signatures maintained in accordance with NCMEC and threat intelligence standards.
• Boundary Rejection: Transmissions matching prohibited signatures are immediately halted and dropped at the MTA gateway before delivery or storage.
• Zero Human Browsing: Screening operates strictly on mathematical cryptographic hashes and automated threat indicators. No human staff members browse or inspect private user correspondence.

3. Mandatory NCMEC CyberTipline Reporting Protocol

Upon detection of a verified prohibited signature match or explicit child exploitation material:

• The transmission is immediately dropped and blocked from reaching internal or external recipients.
• An automated evidentiary dossier is compiled containing the connecting IP address, UTC timestamp, sender/recipient envelope addresses, session identifiers, and prohibited signature hash.
• The report is sealed with an HMAC-SHA256 integrity proof and transmitted to the NCMEC CyberTipline for referral to federal and state law enforcement agencies.

4. Irreversible Non-Appealable Account Ban Protocol

Violations of our Child Sexual Abuse Material or severe safety policies trigger immediate, permanent multi-vector termination:

• Active browser sessions and authentication tokens are revoked and destroyed immediately.
• Account status is permanently locked and disabled.
• Connecting IP addresses and associated anti-abuse device binding tokens are permanently added to the perimeter firewall blocklist.
• No Appeals: Zero-tolerance safety determinations are final, permanent, and strictly non-appealable. No review requests, support tickets, or reactivation appeals will be processed.

5. Severe Illicit Harm, Malware & Weaponization Restrictions

Natrium strictly prohibits using its infrastructure for severe harm, including assassination or terrorist threats, explosive/biological/chemical weapon schematics, ransomware distribution, credential phishing botnets, command-and-control (C2) relay operations, or illicit trafficking of lethal controlled substances. Transmissions or accounts detected engaging in these activities are immediately terminated and blocked at the network perimeter.

6. Tamper-Evident Evidence Preservation Standards & REPORT Act

When a statutory child safety incident occurs, Natrium records an immutable evidentiary record in our encrypted compliance registry. In compliance with the federal REPORT Act (18 U.S.C. § 2258A(h)), Natrium preserves all relevant evidentiary records, transmission metadata, and incident hashes for at least one (1) full year from the report date to facilitate law enforcement investigation and judicial prosecution.

7. User Phishing Reporting, Sender Blocklists & One-Click Unsubscribe

Natrium empowers users with built-in defensive tools directly inside the email reading pane to combat spam, phishing, and unwanted bulk mail:

• Phishing & Spam Telemetry: Users can flag suspicious messages as phishing or spam with one click. Reporting a message automatically moves it to quarantine, adds the sender address to the user's personal blocklist, and records a high-priority SIEM threat event for SecOps review.
• Per-User Sender Blocklist: Users can block or unblock specific email addresses or domains at any time. Inbound messages from blocked senders are rejected automatically before reaching the inbox.
• One-Click List-Unsubscribe: Natrium parses RFC 2369 / RFC 8058 List-Unsubscribe headers and provides an inline one-click unsubscribe action that dispatches the opt-out request server-side without exposing your client browser IP to the mailing list operator.

8. Automated Perimeter Defense & Abuse Mitigation

To protect accounts against automated credential stuffing, password spraying, and volumetric abuse, Natrium enforces stateful perimeter rate-limiting and baseline edge firewall protections. Repeated failed authentication attempts result in temporary traffic throttling.

Our infrastructure employs automated anomaly detection to preserve platform security. In the event of unauthorized access attempts, anomalous traffic, or abuse, automated perimeter controls may temporarily suspend session tokens and restrict network access pending verification to protect tenant privacy and platform integrity.

9. Abuse Reporting Channels & Incident SLAs

To report suspected phishing, spam campaigns, security vulnerabilities, or illicit material originating from or targeting a Natrium mailbox, contact our 24/7 SecOps team: