Government Data Request Policy
How RoofKit handles requests for data from government agencies, courts, law enforcement, and other public authorities.
Scope
This policy covers every request from a government agency, court, law enforcement, or other public authority, in the United States or elsewhere, for data that RoofKit holds. It includes subpoenas, court orders, warrants, preservation letters, emergency requests, and national-security requests.
How to send a request
Public authorities send requests to legal@roofkit.ai. Only the designated policy owner at Verve AI LLC responds. RoofKit personnel do not disclose data informally, by phone, or as a courtesy.
Legality and jurisdiction review
Before any disclosure, RoofKit checks and records the following.
- The request comes from a real authority. RoofKit verifies it through an independently published channel, not the contact details in the request.
- The request is the right type of legal process for the data sought. Under United States law, the content of communications generally requires a warrant.
- The authority has jurisdiction over Verve AI LLC. RoofKit does not honor a foreign request directly unless counsel confirms a valid basis, such as a mutual legal assistance treaty.
- The request is specific and limited, and RoofKit actually holds the data.
- Where RoofKit holds the data as a service provider for a roofing contractor, RoofKit directs the authority to that contractor, unless that is unlawful or impractical.
A licensed attorney reviews warrants, court orders, national-security and foreign requests, nondisclosure orders, requests for content, and any unclear request before RoofKit responds. RoofKit can answer an emergency request that involves an imminent risk of death or serious injury on the documented judgment of the policy owner, and informs counsel right afterward.
If a request is unlawful, overbroad, vague, or outside the authority's jurisdiction, RoofKit asks the authority to withdraw or narrow it. When counsel advises it and it is reasonable, RoofKit challenges the request through legal channels. RoofKit discloses nothing while a challenge is pending, unless a court orders it.
Data minimization
RoofKit discloses only the minimum data that a valid request legally requires: the narrowest set of accounts, fields, and dates. RoofKit does not volunteer extra data. Where it can, RoofKit produces an export rather than giving access to its systems.
Notice to customers and users
RoofKit notifies the affected customer, and the user where possible, before it discloses data, unless the law, a court order, or a genuine emergency prevents notice. When a nondisclosure order expires, RoofKit gives notice then.
Annual transparency note
Each January, RoofKit publishes a short note for the prior calendar year. The note states the number of requests received, the number where RoofKit disclosed some data, the number challenged or rejected, and the number of national-security requests within the range the law permits. A year with zero requests is reported as zero.
Transparency statistics for prior calendar years will be published here each January.