Government and Law-Enforcement Request Policy

Our approach

HEOSSI responds only to legal demands that it reasonably believes are valid, binding, properly addressed, and within the issuing authority's jurisdiction. We review demands for legal sufficiency, scope, and conflicts of law and may reject, narrow, or challenge demands that are defective, overbroad, or disproportionate.

We disclose only information within our possession, custody, or control that is responsive to the lawful demand. QNSI's encryption and access architecture may mean HEOSSI does not possess plaintext Customer Data or customer-controlled key material.

Customer notice

We will notify the affected customer before disclosure when legally permitted and reasonably practicable, so the customer may seek protection. We may delay or omit notice where prohibited by law, where a lawful order requires secrecy, or where notice would create an imminent risk of death, serious harm, fraud, or compromise of an investigation.

Emergency requests and preservation

We assess emergency requests case by case and require sufficient information to evaluate the claimed emergency and legal basis. A preservation request preserves existing records only when legally valid; it does not create data that does not exist or extend retention indefinitely without further lawful process.