Last updated: May 16, 2026
These Guidelines explain how law enforcement, regulators and other government authorities can request information from Thumber. They are for guidance only and do not create rights for any third party or limit objections we may raise.
1. Submitting requests
All requests must be submitted on official letterhead with the requesting officer's badge/ID, a callback contact at an official domain, and the legal basis. Email lawenforcement@thumber.app. Emergency disclosure (imminent risk of death or serious bodily harm): same address, subject "EMERGENCY".
2. Legal basis required
- USA: subpoena for basic subscriber info; 2703(d) order for non-content records; search warrant for content; ECPA, SCA and CLOUD Act applies.
- EU/EEA: valid order under national law; for cross-border production we accept e-Evidence Regulation 2023/1543 orders.
- UK: RIPA / IPA 2016 notices, court orders, DPA 2018 Sch.2 para.2 requests.
- South Africa: s.205 CPA subpoena, RICA orders, POPIA s.38 disclosure.
- Other jurisdictions: MLAT or local equivalent of lawful process.
3. Preservation requests
We will preserve records for 90 days (renewable once for another 90) on a properly-formed preservation request pending lawful process.
4. User notice
Our policy is to notify users of requests for their information before disclosure, with sufficient time to seek a protective order, unless prohibited by law (e.g. non-disclosure order, gag order, statute), or where notice would create risk of injury or evidence destruction in a CSAM, terrorism or imminent-harm investigation.
5. Cost reimbursement
Where permitted (e.g. ECPA §2706 in the USA), we may seek reimbursement for the reasonable cost of producing records.
6. CSAM & child safety
We report CSAM to NCMEC, IWF, AFP-ACCCE, SAPS FCS and other INHOPE members regardless of legal compulsion. See Safety policy.
7. Civil subpoenas
Civil litigants must serve subpoenas in accordance with the rules of the issuing court and Thumber's place of organisation. We may move to quash overbroad or unduly burdensome requests.
Transparency
See our Transparency Report for aggregate figures.