Independence & Legal
Government Data Request Policy
CivicVault is independent of political parties and governments worldwide. Our position on state access to member data is absolute and is a core part of this platform's charter:
CivicVault provides no support, access, assistance, or cooperation to any government, intelligence service, law-enforcement body, or state institution — of any country — with respect to user data, in any kind or form, except strictly and narrowly where compelled by legally binding process within applicable law, as described below. We do not invite such requests, we do not facilitate them, and our architecture is built so there is normally nothing to produce.
Our commitments
- No cooperation by default. CivicVault does not voluntarily disclose, sell, share, hand over, or summarize any member data to any government authority — foreign or domestic — under any contract, informal arrangement, or informal request.
- No surveillance support of any kind. We provide no government backdoors, no master keys, no escrowed copies, no "special access" channels, no real-time intercept capability, and no assistance with monitoring members. There is nothing to provide: CivicVault holds no decryption keys for member communications.
- No backdoor engineering, ever. Any legal or political demand to weaken or bypass CivicVault's encryption would be resisted. Weakening the protection of every member to satisfy a monitoring requirement is a design change we will not make voluntarily.
- No sale, no advertising, no political profiling of member data — ever.
- Valid legal process only. Any demand must be a legally binding order, issued by a court of competent jurisdiction, properly served and specific to an identified account. Generic, exploratory, or out-of-process requests are refused. We do not respond to informal government inquiries.
- Independent legal review. Every legal demand is reviewed by independent counsel before any response, with a strict minimum-disclosure analysis (narrowest data set sufficient to satisfy the order).
- Challenge unlawful and overbroad demands. Where legally possible, CivicVault challenges orders it considers unlawful, overbroad, jurisdictionally improper, or dangerous to press freedom, including through appeals and intervention.
- Member notification. Affected members are notified of any demand concerning their data when legally permitted and safe to do so, including through unsealing or post-process notice if immediate notice is barred. A gags order's expiration triggers notification.
- Transparency reporting. All requests — and our responses — are counted in periodic public Transparency Reports, to the maximum extent the law allows.
- Narrow emergency process, documented. Only where there is an imminent, articulated risk to human life, and only formally documented, independently reviewed, and narrowly scoped, may data we possess be considered for production; this process is auditable and reported on request.
What the law of physics means: what we cannot hand over
Even under compelled legal process, the architecture limits what can possibly be produced:
- Message contents: End-to-end protected between members' devices; CivicVault relays ciphertext and holds no decryption keys. There is no administrative or legal mechanism for CivicVault to read these messages. It cannot comply with an order for such content except by producing opaque ciphertext.
- File plaintexts: Uploaded files are stored as encrypted objects; keys are client-held. We cannot decrypt them.
- Keys: We hold none. There is no key escrow, no recovery path that exposes user keys, and none will be accepted by design.
The honest limits
We do not promise absolute immunity. No platform can promise that. CivicVault is subject to lawful jurisdiction: where a valid, final, binding order compels production of data we actually possess, and our challenges have been exhausted, we must comply to the minimum extent — nothing beyond the order's letters. That is exactly why our first and strongest defense is architectural: we
collect as little as possible, retain it briefly, and hold keys nowhere, so that the set of data available to any authority remains minimal by construction. See
Privacy Policy for precisely what that is.
Summary
| Government asks CivicVault for… | CivicVault's response |
|---|
| Voluntary access, informal inquiry, backdoor | Refused. No cooperation of any kind. |
| Contents of member communications / files | Cannot be produced — we hold no keys; contents are end-to-end encrypted between members' devices. |
| Lawful, specific, court-ordered account data we possess | Reviewed by independent counsel; minimum necessary production only; member notified where permitted; reported. |
| Overbroad or unlawful order | Challenged wherever legally possible. |
| Data we do not have / have already deleted | Nothing to produce — short retention by design. |
Questions about this policy: Contact. History and statistics: Transparency Reports.