Information for Law Enforcement

A transparent explanation of what Backroom Box can and cannot provide to law enforcement agencies.

What We Cannot Provide

IP addresses — We do not log IP addresses. They are never stored.
User identities — Accounts require only a username and passphrase. No email, phone number, or government ID is collected.
Decryption keys — Files are encrypted client-side. Decryption keys exist in URL fragments and are never transmitted to our servers.
Activity logs — We do not maintain logs of user actions, request paths, or session activity.

What We Can Provide

Published documents — Content published to the public transparency archive is publicly accessible.
Encrypted blobs — We can provide the encrypted file stored on our servers, but without the decryption key it is unreadable.
Submission metadata — Non-identifying metadata such as submission timestamps and receipt codes.

Legal Process

We respond to valid legal process as required by applicable law. Given our zero-logging architecture, the data we can produce in response to such requests is extremely limited.