Law Enforcement & Legal Requests Policy

01.Purpose and Position — The White-Area Position

NADI VPN provides robust privacy within the boundaries of the law. It does not provide impunity for criminal activity, and it does not support cybercrime, extortion, hacking, financial fraud, or the distribution of child sexual abuse material (CSAM).

The Service cooperates with competent law enforcement authorities on legitimate criminal investigations only where a valid, specific, and legally binding court order or warrant requires it under applicable law. The Service will never assist with warrantless dragnet surveillance, mass data collection, bulk account profiling, or non-criminal queries lacking a sound legal foundation. We actively challenge requests that are overbroad, procedurally deficient, or outside an authority’s statutory jurisdiction.

02.What Can Be Disclosed vs. What Cannot Be Disclosed

Because our production relay fleet functions entirely inside non-persistent volatile memory (RAM-based Linux kernels without persistent swap or access logs), our capability to respond to legal demands is bounded by data existence:

Any legal request demanding items from the second category will be formally answered with confirmation that the requested records do not exist. Shared relay egress IP addresses are multiplexed across thousands of active tunnels simultaneously and cannot establish individual identity attribution.

03.Validation and Legal Requirements

NADI VPN complies only with requests that fulfill all of the following procedural requirements:

• Jurisdictional Competence: Issued by a competent court or judicial authority within the Netherlands or the Federal Republic of Germany (where our relays reside), or through formal international treaties such as European Investigation Orders (EIO) or Mutual Legal Assistance Treaties (MLAT) recognised under Dutch, German, and UK law.
• Written and Specific: Issued in writing on official judicial letterhead, citing statutory authority, specifying the exact identifiable account identifier, WireGuard public key, or payment hash, and accompanied by a certified warrant or judicial order.
• Official Channel: Transmitted exclusively to our designated legal channel at [email protected]. Requests transmitted via social media, chat services, or non-verified web forms are disregarded.

04.What We Will Never Do

To preserve user privacy and network security, NADI VPN guarantees:

• We will never disclose retained subscriber data in response to civil discovery demands or IP-only copyright infringement allegations lacking a court subpoena.
• We will never install network wiretaps, packet sniffing tools, or DPI hardware on our relay infrastructure.
• We will never reconfigure our operating system kernels to initiate logging on specific individuals.
• We will never surrender private cryptographic keys or weaken WireGuard encryption protocols.

05.Preservation, Suspension, and Prospective Remedies

Upon receipt of a validated statutory preservation order, we will freeze existing retained records (email, public key, pass duration, payment hash) for the legally mandated period. Preservation orders cannot reconstruct historical logs or reverse data that was never collected.

When presented with verifiable evidence of severe criminal conduct violating our Acceptable Use Policy, we reserve the right to prospectively suspend the account, blacklist the associated WireGuard public key, and terminate active tunnels.

06.Child Sexual Abuse Material (CSAM) Zero Tolerance

NADI VPN maintains absolute zero tolerance for Child Sexual Abuse Material. Confirmed or credible reports involving CSAM result in instant account termination, public key revoking across all relays, and immediate reporting to designated child protection authorities and international hotlines (including INHOPE, ECPAT, and Dutch/German cybercrime divisions).

07.User Notification

Unless explicitly forbidden by a binding judicial gag order with criminal penalties, our policy is to notify affected users when a lawful demand seeking their retained information is received, allowing them reasonable time to contest or quash the order in court. Once statutory non-disclosure restrictions expire, notice is promptly delivered.

08.Transparency & Auditability

All lawful requests, warrants, and preservation notices received by NADI VPN are aggregated and published every three months on our public Warrant Canary & Transparency Report. Requests rejected due to lack of logged data are clearly categorized as such.

09.No Statutory Immunity Claim

Nothing in this policy, our Terms of Service, or associated documentation creates blanket legal immunity or promises specific court outcomes. NADI VPN acts as a neutral intermediary conduit under European Union e-Commerce and Digital Services Act (DSA) principles.