Law Enforcement Guidelines

These guidelines are for law enforcement and government representatives (“Authorities”) seeking access to customer account information or personal data. They do not apply to requests from customers, their end-users, or other third parties.

Scope & Approach

Upsun provides a global Platform as a Service (PaaS) in the cloud. If Authorities seek customer account data or personal data, they must follow legal procedures. Upsun only discloses personal data if required by law and after careful review. Overbroad or unjustified requests may be limited or challenged.

Submitting a Request

1.Send an email to dpo@upsun.com with the subject line “Attention: Government & Law Enforcement Information Request.”

2.Alternate Submission: Requests by mail or in person should be sent to:
22 Rue de Palestro, 75002 Paris, France.
(Note: Mail requests take longer and submitting this way does not waive jurisdiction or service objections.)

Requirements for Requests

A valid request must:

• Be sent from an official government domain (except for mail/in-person).
• Include enforceable legal authority (e.g., subpoena, court order, or search warrant).
• Provide the requester’s name and contact details.
• Clearly specify the records or data sought.
• Supply enough detail (e.g., an account identifier) to identify the customer’s account, but only as needed.
• Define the time period for which data is requested.

Upsun responds only to requests compliant with its Terms of Service, Privacy Policy, and applicable laws. Depending on jurisdiction, further legal process (like MLAT or letter rogatory) may be required.

Customer Notification

Upsun will usually inform customers if authorities request their data unless prohibited by law. If Authorities wish to restrict customer notification, they should provide a court order or legal authority preventing Upsun from informing the customer.

If a request reveals a Terms of Service violation, Upsun may act to prevent abuse, potentially alerting the customer. To delay such action, Authorities must explicitly direct Upsun not to take action until after data production and investigation are complete.

Emergencies & Child Safety

Upsun may disclose data without standard process if necessary to prevent imminent harm or serious injury, as allowed by law. All such requests are evaluated case by case. Upsun also reports child exploitation or missing children to Authorities and cooperates fully per applicable laws.

Data Preservation

Authorities may request preservation of existing data for up to 90 days (unless the law requires a longer period) except where there are system limitations from our side. Preservation requests must meet these guidelines and may be subject to user notification unless barred by law or court order.

Cost and Timing

Upsun may seek reimbursement for costs incurred by unusual or burdensome requests but not for emergencies or child safety matters.

Upsun aims to respond within two business weeks. Complex cases may take longer. If an urgent response is necessary, Authorities should justify that.

Changes

These guidelines are reviewed periodically and may change at Upsun’s discretion.