Transparency · updated 9 October 2026
What we have been asked for, and what we gave
Published twice a year, in January and July, and whenever something worth knowing happens in between. This first report covers the service from launch to the date above.
None received
Subpoenas: 0. Court orders: 0. Search warrants: 0. Emergency requests: 0. Requests from outside the United States: 0. Records produced: none. When requests arrive we report how many of each kind, and how many we answered in full, in part or not at all. Some orders forbid saying they exist; where the law allows only a range, we give the range.
We cannot hand over what we cannot read
Files are encrypted on the sender's device before they reach us, and we never hold a key that opens them. Most are deleted from the relay as soon as they are downloaded, and none is kept beyond 7 days. What we do hold: the email addresses and public keys people publish, which account sent each file (kept 90 days after the file is gone), which key opened a delivery and when, license details for verified professionals, and short-lived technical logs. Senders sign in with an emailed link; people who only open files never do.
Legal process only, the minimum, and you hear first
Nothing is produced without valid US legal process, reviewed by counsel. We produce only what it names. We tell the affected customer before producing anything, unless a court order or the law forbids it, and we tell them as soon as that restriction ends. We will not build a way to read files, collect more data or weaken the encryption because someone asks us to.
0 received · 0 opened
A recipient can report a delivery and hand us the key to that one file, so we can
review it. Each opening by our staff is recorded in a tamper-evident log, and the
running totals (received, opened, dismissed, removed, escalated) are published live
by the service itself at
/.well-known/cd-cert-broker.json
under report_transparency, so you need not wait for this page.
Reports to NCMEC: 0
We report child sexual abuse material to the National Center for Missing & Exploited Children as the law requires, and keep the evidence for the year the law requires. We count those reports here.
History we cannot quietly rewrite
The service's audit log is hash-chained, and its newest hash is published and timestamped on the Bitcoin blockchain every day. If our records of who opened what were ever altered, the published history would show it.