Law enforcement and government request policy
Verification, jurisdiction, minimization, preservation, emergency disclosures, customer notice, challenges, and official contact across Solarius.
Last revised: October 23, 2026
This Law Enforcement and Government Request Policy ("Policy") governs Solarius B.V.'s ("Solarius") assessment of official requests for customer, account, service, or business records within its possession or control. Requests shall be directed to lawenforcement@solarius.me together with the operative legal process. Publication or use of that address does not constitute consent to jurisdiction, acceptance of formal service, waiver of an objection, or permission for continuing access to any system.
Required particulars and verification
A request shall identify the agency and official, verifiable official contact, applicable legal authority and process, relevant customer or resource, precise categories and time range, response deadline, and any asserted notice restriction. Attach the operative order or other legally required instrument and explain any urgent basis. An undefined search across unrelated customers is insufficiently specific.
Before disclosure, Solarius shall assess the authenticity, jurisdictional basis, binding effect, enforceability, and scope of the request, the records actually available, and the applicable confidentiality and data-protection restrictions. Any voluntary disclosure must have an independently valid lawful basis; the requesting authority's preference does not supply one. It can seek clarification, a narrower request, appropriate service, or required recognition or cooperation procedures. A known agency name, an unofficial email, or a demand marked urgent is not proof of lawful authority. Contact verification shall use a reliable independent method where warranted.
Jurisdiction and customer-controlled systems
Solarius B.V. is established in the Netherlands. A foreign request is assessed against applicable Dutch, EU, international-cooperation, and other binding law and any relevant transfer safeguards. A direct foreign demand is not automatically enforceable or a sufficient basis for restricted transfer merely because the requesting authority considers it valid in its own jurisdiction.
Direct requests for customer-owned local data, independently selected providers, or systems Solarius does not operate to the party controlling the records. Solarius shall not represent that it can access every self-hosted installation or decrypt data for which it does not hold the key. Technical capability shall not be created or expanded merely to satisfy an informal request.
Minimum necessary disclosure and challenges
Only records lawfully required and actually within the relevant scope shall be disclosed. Solarius shall not provide government agencies with standing direct access, a general backdoor, unrelated tenant records, or an unrestricted search interface. An order for one category or time range does not authorize all associated content, and preservation alone does not authorize disclosure.
Solarius shall challenge or seek clarification of unlawful, disproportionate, conflicting, or insufficiently specific demands where a meaningful legal route is reasonably available. Relevant processor and transfer-clause duties, including notice and challenge obligations, remain applicable. A commercial desire to avoid inconvenience is not a substitute for those duties. Necessary professional advisers can assist under appropriate confidentiality.
Customer notice and restrictions
Solarius shall notify the affected customer before disclosure where lawful, with enough information to seek a remedy within the available time. A binding prohibition or a specific legally justified urgent risk might prevent prior notice; the restriction shall be limited to its actual scope and duration. Solarius shall seek to narrow or lift an overbroad notice prohibition where reasonably available and notify when permitted.
A voluntary request for silence is not treated as equivalent to a binding prohibition. Delayed notice shall not become indefinite merely because a case once existed. The customer contact shall be verified so notice does not expose protected records to an unauthorized person. Information whose disclosure risks materially endangering a child, person, or lawful investigation might require a legally justified limitation rather than full immediate detail.
Preservation
A request to preserve records shall identify the binding legal basis or other valid lawful authority, affected records, time scope, preservation duration, and review or expiry condition. Preservation and production are distinct acts requiring their respective authority; preservation shall not be treated as consent to disclosure or as a general extension of data-retention periods. Solarius shall preserve only what the binding requirement covers and restrict access and use to preservation and the authorized purpose. It shall not collect new unrelated categories, suspend all ordinary retention indefinitely, or disclose preserved material without the separate required authority.
A lawful preservation duty can limit a deletion request for affected records. Solarius shall explain relevant retention exceptions when permitted and reapply the ordinary lifecycle when the duty ends. Customer-created litigation or evidence holds remain subject to their own lawful basis and the applicable DPA; labeling a record a hold does not itself establish government authority.
Emergency requests
An emergency request shall identify a credible imminent risk of death or serious physical harm, the facts supporting urgency, why ordinary process cannot meet it, and the exact information needed. Provide a verifiable official callback and any applicable legal basis. Solarius shall assess the actual threat, necessity, authority, and lawful disclosure basis rather than accept an emergency label alone.
Any emergency disclosure shall require an applicable lawful basis, be limited to the records necessary and proportionate to the identified emergency, and be documented for subsequent review. An emergency designation shall not waive a required transfer safeguard or authorize continuing access after the emergency purpose ends. Ordinary legal process might still be required for additional information. This policy does not promise that an ordinary email channel is monitored as a public emergency service. If you are in immediate danger, contact local emergency services.
Records, transparency, and other requests
Solarius shall maintain an appropriately restricted record of material requests, scope decisions, disclosures, notice restrictions, and preservation handling for a justified period. Aggregate transparency information can be published when lawful and sufficiently protective of individuals and ongoing matters. This policy does not claim a reporting cadence, historic request count, or independent audit that has not been established.
Civil litigants and private parties must use the applicable legal process and legal@solarius.me; an abuse complaint is not a substitute for authority to obtain private records. Individuals use the privacy route, customers use authorized data requests, and rights holders use the Copyright Policy. These processes have separate authority and verification requirements.