Law Enforcement & Government Data Request Guidelines

Overview

These guidelines describe how LarsCo LLC responds to requests from US law enforcement, government agencies, and parties in civil litigation seeking information about ROAMiQ Cloud users.

Required legal process

• Subscriber information (name, email, signup IP, billing address): subpoena.
• Non-content records (login history, IP logs, security events, manifest metadata): 18 U.S.C. § 2703(d) court order or warrant.
• Stored content (encrypted backups, manifest detail): warrant under 18 U.S.C. § 2703(a).
• Real-time data: wiretap order under 18 U.S.C. §§ 2510–2522.

We only accept valid US legal process. Foreign requests must come through the Mutual Legal Assistance Treaty process or a US-court-issued order.

What we can produce

We can produce account metadata, IP addresses, country-level geo, security events, and unencrypted backup manifests. We cannot produce decrypted contents of customer-held-key (Genius tier) backups under any circumstance — we do not hold the keys. Managed-mode backup decryption requires a separate REWIND-key request handled by Operations.

Preservation requests

We honor formal preservation requests under 18 U.S.C. § 2703(f) for up to 90 days, extendable on showing of continuing need.

User notice

We will provide notice to the affected user before disclosing information unless we are legally prohibited (e.g., by a non-disclosure order or sealed warrant) or where notice would create an imminent risk of physical harm.

Transparency report

LarsCo will publish an annual transparency report summarizing the number and type of requests received, beginning Q1 2027.

Contact

Law-enforcement officers should email [email protected] with the subject line "LEA REQUEST" and attach valid legal process from the requester's official email domain. See also our Vulnerability Disclosure Policy.