Law Enforcement & Subpoenas

1. Scope, Purpose & Jurisdiction

These Law Enforcement & Subpoena Operational Guidelines govern how Natrium Technologies Inc. reviews and responds to formal legal process, grand jury subpoenas, court orders, search warrants, and preservation requests issued by judicial authorities and law enforcement agencies under the Electronic Communications Privacy Act (ECPA), the Stored Communications Act (18 U.S.C. § 2701 et seq.), and applicable statutory and federal law.

2. Mathematical & Architectural Inability to Decrypt Communications

Natrium operates under a strict zero-knowledge cryptographic architecture. Message bodies, subjects, drafts, personal notes, TOTP secrets, and .enc attachment blobs are sealed with authenticated AES-256-GCM encryption and per-user Data Encryption Keys sealed in user-specific key envelopes. Plaintext account passwords are never stored on or known to Natrium servers.

Formal Technical Inability Statement: Because Natrium does not possess, escrow, or log plaintext user account passwords, Natrium cannot bypass a user's password-derived key envelope to produce unencrypted message contents when user-held keys are unavailable. Under settled U.S. legal doctrine, a service provider cannot be compelled to produce plaintext data that is outside its technical possession, custody, or control.

3. Data Availability Matrix for Law Enforcement

4. Statutory Legal Process Standards (ECPA / SCA)

Natrium requires strictly valid, properly domesticated legal process before disclosing any available non-content subscriber records:

• Subpoenas (18 U.S.C. § 2703(c)(2)): Valid federal or state grand jury, trial, or statutory administrative subpoenas are required to compel basic subscriber registration records.
• Section 2703(d) Court Orders: A court order issued under 18 U.S.C. § 2703(d) supported by specific and articulable facts is required to compel non-content transactional metadata or ephemeral SIEM logs.
• Search Warrants (Fed. R. Crim. P. 41): A probable-cause search warrant issued by a neutral magistrate judge is required for any request seeking stored account records.
• International Law Enforcement (MLAT): Non-U.S. law enforcement agencies must submit requests through a Mutual Legal Assistance Treaty (MLAT), Cloud Act executive agreement, or letters rogatory domesticated via the U.S. Department of Justice Office of International Affairs.

5. Preservation Requests (18 U.S.C. § 2703(f))

Upon receipt of a formal, signed law enforcement preservation request pursuant to 18 U.S.C. § 2703(f) identifying a specific @natrium.sh account, Natrium will preserve available non-content account registration metadata and current rolling SIEM entries for an initial period of ninety (90) days pending issuance of formal legal process, extendable for one additional 90-day period upon written renewal. Natrium does not proactively create new wiretap logs or alter zero-knowledge encryption in response to a preservation request.

6. Emergency Threat Requests Involving Imminent Danger

Pursuant to 18 U.S.C. § 2702(b)(8) and § 2702(c)(4), Natrium may voluntarily disclose available basic subscriber or connection records to a verified law enforcement officer if we have a good-faith belief that an emergency involving imminent danger of death or serious physical injury to any person requires disclosure without delay. Emergency requests must be submitted from an official government law enforcement email domain to emergency@natrium.sh and must specify the nature of the emergency, the target account, and the requesting officer's badge/credential number and direct telephone contact.

7. User Notification Policy

It is Natrium's strict policy to notify affected users when we receive legal process seeking their account records prior to any disclosure, giving the user at least seven (7) calendar days to file a motion to quash or seek protective judicial relief. We withhold notice only where explicitly prohibited by a valid non-disclosure order issued by a court of competent jurisdiction under 18 U.S.C. § 2705(b), or where notice would visibly endanger a minor or risk imminent physical harm. Once a § 2705(b) non-disclosure order expires, Natrium will promptly notify the user.

8. Warrant Canary & Infrastructure Integrity Statement

As of November 1, 2026, Natrium Technologies Inc. certifies the following transparency statements:

• Natrium has received zero (0) National Security Letters (NSLs) or Foreign Intelligence Surveillance Court (FISA) orders.
• Natrium has never installed any law enforcement backdoor, key-escrow mechanism, or weakened cryptographic parameter in our codebase or mail relays.
• Natrium has never been compelled by any court or government authority to modify our source code to capture user plaintext passphrases.

9. Objections to Overbroad Process & Cost Reimbursement

Natrium carefully reviews every subpoena, order, and warrant for facial validity, jurisdictional authority, and constitutional specificity under the Fourth Amendment. We object to and move to quash requests that are overbroad, vague, fishing expeditions, or lack a valid statutory basis. Pursuant to 18 U.S.C. § 2706, Natrium reserves the right to seek statutory reimbursement for costs reasonably incurred in searching for, assembling, and reproducing responsive records.

10. Official Service of Process & Legal Notices

All subpoenas, court orders, preservation requests, and official law enforcement communications must be transmitted from a verified government or judicial email domain to: