Este aviso ha sido traducido automáticamente. Nuestra versión en inglés está disponible aquí.
Denne meldingen er maskinoversatt. Vår engelskspråklige versjon er tilgjengelig her.
Last Updated: September 2026
CAI is committed to protecting the privacy and rights of its customers and the individuals of whose data we process, while also respecting laws of the jurisdiction in which we operate. As such, CAI requires that all law enforcement requests for customer data be accompanied by valid, binding, and enforceable legal process from a law enforcement authority with jurisdiction. CAI will only provide customer data in response to a law enforcement request when we reasonably believe that we are legally required or permitted to do so, and in accordance with our Privacy Policy, Terms of Use, and our individual customer agreements. To protect the privacy and rights of our customers, CAI reviews all law enforcement requests to ensure they comply with applicable law and are lawful, specific, and not overly broad. It is CAI’s policy to notify our customers of requests for their information and provide them with an opportunity to object to the disclosure where legally permitted and practicable, unless we are explicitly prohibited from doing so by law or legal process.
GUIDELINES FOR SUBMITTING LAW ENFORCEMENT REQUESTS
HOW TO SERVE A LAW ENFORCEMENT REQUEST
The CAI Legal Department is the only CAI department authorized to receive and respond to law enforcement requests. All such requests should be sent via email to [email protected].
If the requesting agency is required to submit a request in person or via mail, CAI Software’s address is:
6520 S. Millrock Drive
Suite 225
Holladay, Utah 84121
Attn: General Counsel
Please also email [email protected] to alert us to the incoming request
REQUIREMENTS FOR SUBMITTING A LAW ENFORCEMENT REQUEST
CAI will process a law enforcement request if it meets the following criteria:
- Is submitted to the CAI Legal Department by a law enforcement agency or official government entity;
- Includes valid and enforceable legal process, such as a warrant, subpoena, or court order, that authorizing or requiring CAI to produce the information requested; • States with sufficient particularity the categories of information or records sought;
- Contains the name, official contact information, and badge number or other official identification of the government representative or law enforcement agent authorized to submit the request;
- Includes sufficient information to enable CAI to clearly identify the customer account(s) at issue;
- Clearly states the specific customer information being requested, such as names, usernames, email addresses, phone numbers, IP addresses, or other identifiers; and
- Specifies a response date or deadline for the requested information.
If the requesting agency seeks to prevent CAI from notifying a customer of a law enforcement request, the request must include a court order or other legal authority that explicitly prohibits or restricts such notification.
DATA AVAILABILITY AND RETENTION
CAI can only provide customer data that exists and is retained by CAI at the time the request is received. CAI does not retain customer data for law enforcement purposes and is not required to create new data, records, or reports in response to a law enforcement request.
REQUESTS FOR PRESERVATION OF CUSTOMER INFORMATION
Upon receipt of a valid law enforcement preservation request, CAI will preserve relevant customer information for the period required by applicable law or valid legal process, including any valid extension thereof. If the preservation request is not validly extended by the end of the applicable preservation period, CAI may delete the preserved customer information in accordance with its data retention practices.
EMERGENCY REQUEST REQUIREMENTS
If a law enforcement agency or authorized government entity submits a request for the disclosure of customer information in relation to an emergency involving a good-faith belief of imminent risk of death, serious physical injury, or harm to a child, CAI may disclose information reasonably necessary to address the emergency, consistent with applicable law.
INTERNATIONAL LAW ENFORCEMENT REQUEST REQUIREMENTS
CAI discloses customer information solely in accordance with applicable law, our Privacy Policy, Terms of Use, and our individual customer agreements. To compel the disclosure of customer information from CAI, a Mutual Legal Assistance Treaty (MLAT) request, letter rogatory, or other recognized international legal mechanism may be required. CAI also requires that any agency or individual issuing a law enforcement request ensure that the request or legal process is properly domesticated, recognized, or enforceable in the relevant jurisdiction.
INTERNATIONAL LAW ENFORCEMENT REQUEST REQUIREMENTS
In providing services to our customers, CAI may process Personal Data (as defined under the GDPR or other applicable data privacy laws) relating to individuals located in jurisdictions outside the United States, including where such data is processed or stored in the United States.
If CAI becomes aware of a binding request by public authorities or direct access to customer Personal Data by such authorities, CAI will notify the affected customer and, where applicable and legally permitted, the relevant data subject. CAI will document and retain records relating to such requests in accordance with its applicable record retention policies and legal obligations.
If CAI receives a law enforcement request that seeks disclosure of customer data containing Personal Data of international individuals, CAI will inform the requesting authority that it processes such Personal Data on behalf of its customer as a service provider or processor, as applicable. Unless prohibited by law, CAI will notify the customer and coordinate with the customer before producing any information in response to the request. CAI will review each law enforcement request for legal validity.
If CAI determines that a law enforcement request is unlawful or conflicts with applicable data protection laws, CAI will assess available legal remedies, which may include challenging the request, seeking modification, or requesting interim relief, where feasible and permitted by law.
Where appropriate and permitted by applicable law, CAI may:
- Where permitted, seek a limited waiver or lifting of any prohibition on notifying the customer or affected data subjects;
- Work with the requesting agency to narrow the request to the minimum amount of Personal Data necessary to fulfil the stated purpose;
- Inform the requesting authority, where appropriate, that the requested Personal Data is subject to the GDPR and/or other applicable data protection laws that confer rights upon individuals, including rights of transparency, access, rectification, and erasure;
- Evaluate whether the request exceeds what appears reasonably necessary and proportionate for a legitimate and recognized public interest purpose under applicable law; and
- Challenge, narrow, or seek to quash requests that CAI determines to be overbroad or disproportionate, to the extent permitted by law.
TRANSPARENCY AND RECORDKEEPING
Where legally permitted and practicable, CAI will endeavor to keep the affected customer reasonably informed. CAI will document all law enforcement requests, including the legal basis asserted, the entities involved, CAI legal assessment, and any actions taken in response. To the extent permitted by law, CAI may provide the affected customer with information regarding the request and CAI’s response. CAI may also publish transparency reports summarizing government requests for information in an aggregated and anonymized manner.