Government Requests for Data

Cerros does not give any government or public authority access to customer data except where legally compelled. This page is the process we follow when a request arrives, and it applies to every customer and every connected data source.

Legality review

Every request is reviewed before any response. We confirm it is validly issued, properly served, and legally binding on Cerros AI LLC. Informal or voluntary requests — those carrying no legal compulsion — are declined.

Challenging unlawful requests

Where a request is overbroad, defective, or not legally binding, we object to it, seek to narrow it, or challenge it — engaging counsel where warranted — before producing anything.

Disclosing the minimum necessary

Where a response is legally required, we disclose the minimum data necessary to comply, scoped to the specific accounts and time periods named in the request. We do not provide bulk access, standing access, or exploratory access to a customer's database, and we do not volunteer data beyond what is compelled.

Notifying the customer

Where we are not legally prohibited from doing so, we notify the affected customer before responding, so they have the opportunity to seek their own relief. Where a court order or statute forbids notice, we give it as soon as that restriction lifts.

Documentation

Every request is logged: what was requested, which authority made it, the legal basis asserted, the review we performed, who decided, and precisely what was disclosed. That record is what makes this policy auditable rather than a statement of intent.

What we have received

Cerros has never received a national security request, and has never disclosed customer data to any government or public authority. If that changes, we will report it here to the extent the law permits.

Related: Platform & App Privacy Policy · Data Deletion Instructions · Trust & Security