Subpoena Response Policy
This policy describes how StratumBase responds when we receive a subpoena, court order, search warrant, or other governmental data request that targets a customer's data. It is our commitment to our customers about what we will do — promptly, transparently, and with the minimum production the law compels.
1. Purpose
Customers entrust StratumBase with confidential and often privileged matter content. When a third party — court, regulator, or law-enforcement agency — compels us to disclose that content, our customers deserve advance notice and a meaningful opportunity to challenge or narrow the request. This policy states the commitments we make to every customer about how we handle compelled process directed at their data.
2. What we will do when we receive compelled process
"Compelled process" means a subpoena, court order, search warrant, civil-investigative demand, or any other legally binding governmental data request. When we receive one targeting customer data, we will:
- Verify validity. We promptly review the request to confirm it issues from a court or agency with apparent jurisdiction, is properly signed, and is within the scope of US legal process. If the request appears facially invalid, we object before producing anything.
- Notify the affected customer within two (2) business days of receipt — unless we are legally prohibited from doing so. Notification includes a copy of the request (or the portions we are permitted to share) and the deadline by which we must respond.
- Allow the customer time to challenge. Where the legal process timeline permits, we will hold production for at least ten (10) business days from notification so the customer can move to quash, narrow, or otherwise challenge the request through their own counsel. Where the deadline imposed on us is shorter, we will hold for the maximum time allowed and notify the customer of the compressed window.
- Comply only with what is specifically compelled. We produce the minimum responsive set the request describes — not more. Where the request permits, we produce in encrypted, redacted, or otherwise minimized form.
- Confirm production. When we have produced data, we notify the customer of what was produced and when, to the extent we are legally permitted to do so.
3. Limits — when we cannot notify you
In a narrow set of circumstances, we are legally barred from telling a customer that we have received compelled process. Those circumstances include:
- A court-issued gag order or non-disclosure order accompanying the request.
- A National Security Letter, FISA process, or similar instrument carrying a statutory non-disclosure obligation.
- An active grand-jury secrecy order.
- A genuine emergency request where notification would clearly endanger life or safety, made by an agency authorized to issue such a request and supported by a written certification we retain.
Where notification is delayed for one of these reasons, we will provide notice as soon as the legal restriction is lifted or expires. We will also, where lawful, challenge non-disclosure orders we believe to be overbroad or improperly issued.
4. What we produce
- Only the data specifically described in the compelled process. We do not volunteer adjacent records, related matters, or unaffected tenants.
- Where the request allows, encrypted, hashed, redacted, or otherwise minimized forms — including Bates-style productions where appropriate.
- An internal log of every production: what was produced, to whom, on what date, and under what legal authority. This log is retained and made available to the affected customer to the extent legally permitted.
5. Your options when we notify you
On receipt of our notification, customers commonly choose one or more of the following routes. We do not provide legal advice; the decision is yours, made with your own counsel.
- Move to quash or modify. File a motion with the issuing court to invalidate or narrow the request.
- Negotiate scope reduction. Engage the requesting party directly to narrow the data sought or extend the timeline.
- Coordinate production format. Work with us on the form of production — for example, requesting that we produce in a privileged-review format, or that we exclude data outside the agreed scope.
- Allow production. Take no action, in which case we comply with the valid request on its stated deadline.
We will reasonably cooperate with any of these routes within the bounds of the compelled process and our own legal obligations.
6. Contact
Subpoenas, court orders, and other compelled process should be directed to legal@stratumbase.ai. We will acknowledge receipt promptly to the issuing party where acknowledgement is permitted.
7. Effective date and changes
Effective: May 2026 · Version: 1.0. We will revise this policy as our practices evolve. If we make a material change that weakens any commitment above, we will provide notice to active customers before the change takes effect. Non-material edits (formatting, typos, clarifications) may be made without notice; the version and date at the top of this page reflect the current revision.