Law Enforcement Requests

Last updated: July 13, 2026

Written requests only. We verify authority and jurisdiction, reject invalid process, and disclose only what the law requires.

1. How to submit a request

There is no self-service portal. Valid requests must be in writing and sent to legal@gtaup.com. Messages to abuse@gtaup.com that are clearly law-enforcement process may be forwarded to legal.

2. Minimum contents

  • Requesting agency / authority and official contact details;
  • Evidence of authority and the legal basis for the request;
  • Case or investigation reference number;
  • Specific target identifiers (account email, file URL, or file key) — not open-ended fishing requests;
  • Scope of data sought and relevant time window;
  • Jurisdiction and court or statutory process relied upon.

3. Verify or reject

We review every request. Outcomes:

  • Verify — authority and jurisdiction appear valid; we narrow the scope where the request is overbroad;
  • Reject — invalid, unauthorized, out of scope, or insufficiently specific — with a reason where practicable;
  • Log — requests and dispositions are recorded (email archive is sufficient at this stage; append-only audit events come later).

4. Preservation and disclosure

Where appropriate pending valid process, we may preservean object by disabling public access and setting a legal hold so automated expiry cleanup does not delete it. Public "your file is still available to download" notice is not provided in preserve cases.

We disclose only data we are legally compelled (or lawfully permitted) to provide, limited to what is necessary. Uploaded files are stored as ordinary objects on our platform (Cloudflare R2); we can access file content for abuse handling and lawful process. An optional share password gates download access — it is not end-to-end encryption and does not prevent us from reading stored bytes when we hold the object. We do not offer a zero-knowledge vault product.

5. User notice and gag orders

Where legally permitted, we notify affected users before or after disclosure. We will not notify when prohibited by law or a valid non-disclosure order, or where notice would create a serious risk of harm (for example certain child-exploitation emergencies). Delayed notice may be given when a prohibition expires.

6. Emergency disclosures

In narrow circumstances involving an imminent risk of death or serious physical injury, we may disclose limited information that would help prevent that harm, after authenticating the request as far as practicable. This path is exceptional and subject to legal review.

7. International requests

GTAUP does not automatically treat foreign court orders or agency emails as binding process. Mutual legal assistance, letters rogatory, or other formal international cooperation channels may be required. We may reject or redirect requests that lack proper process for the jurisdiction that applies to the Service and the data sought.