Written for the person who has to serve an instrument. It sets out where to send it, what we act on, how long we take, and — exhaustively — which records exist to be produced.
Procedure
A request that meets these conditions is answered on its merits rather than with correspondence about the conditions.
Where to send it
Service is on the registered entity in the Republic of Moldova. We do not operate a public inbox for legal process: an address nobody staffs is worse than none, and it invites service that never reaches a person. The registered particulars are supplied to a serving authority on request.
Acknowledged within 72 h
What we act on
An order or warrant issued by a competent court of the Republic of Moldova, properly served on VPSOffshore SRL. That is the instrument that compels production, and it is the only one.
Moldovan court order
If you are outside Moldova
A request from a foreign authority is routed through mutual legal assistance and granted by a Moldovan court before it has effect here. Sending it to us directly does not shorten that route; it only starts it later.
MLAT, then a Moldovan court
What we tell the customer
They are notified before we act, with enough time to seek advice, unless the order itself forbids notification. A request that we stay silent, without an order requiring it, is declined and counted.
Notified by default
Registered particulars are supplied to a serving authority on request. Everything that arrives is logged and counted, valid or not, and published in aggregate each quarter.
Under a valid order
An order cannot produce what was never created. The list is short by design rather than by neglect, and it is the same list published in the privacy policy — compare them.
The email address on the account
Chosen by the customer, never verified against anything. A forwarding alias or a disposable address is common and permitted.
Invoice records
Amount, coin, date, for five years. No legal name is attached, because none was collected at any point.
Connection metadata, if recent
Source address and timestamp of panel and API logins, for the last 24 hours only. Older than that and the record no longer exists to be produced.
Service inventory
Which machine, which plan, which address, for the period concerned.
Not held, in any form: identity documents, a payment identity, a phone number, traffic content, packet captures, disk images, or any behavioural profile. An order to produce these cannot be complied with, and we say so in those words rather than asking for an extension.
Stated in advance
Stated here rather than decided case by case, so that neither side has to guess — and so that a change of position would be a change to a published document.
Voluntary disclosure without an order
Including requests marked urgent, and including requests from agencies we would rather be on good terms with. There is no emergency-disclosure channel, and creating one would make every other sentence on this page conditional.
Interception, mirroring or a tap
We have never placed one and no mechanism exists to place one quickly. An order requiring us to build interception capability would be contested as beyond what is technically imposed on us.
Preservation without a legal basis
A preservation request does not create a record that has already rotated out. We will not begin retaining more than 24 hours of metadata on the strength of correspondence.
Keys, credentials or disk contents
We do not hold customer encryption keys and cannot produce them. Where a disk is unencrypted on a virtual server, production still requires an order specific to that service.
The operative text. Nothing in it is written to be clever; it is written so that a request which meets these conditions is answered without correspondence about the conditions.
VPSOffshore SRL, Chișinău, Republic of Moldova. Registered in the Republic of Moldova.
There is no parent company, no holding structure in another jurisdiction, and no United States or European Union establishment, subsidiary or agent. Service on any other entity has no effect, and we will say so rather than let a deadline run against the wrong party.
An order, warrant or judicial authorisation issued by a competent court of the Republic of Moldova, properly served. We verify that it is genuine, that it names this entity, that it identifies the service concerned with enough precision to act on, and that it orders something within our power.
Where any of those fails, we say which one and invite a corrected instrument. We do not refuse silently, and we do not comply with a defective order to be helpful.
A foreign order has no direct effect here. It acquires force through mutual legal assistance: the requesting state transmits it, and a Moldovan court grants it. That route is public, adversarial and slow, and it is the only one.
Approaches sent to us directly by a foreign agency are acknowledged, declined, and counted in the transparency report under foreign requests. They are not forwarded to the Moldovan authorities on your behalf; that is your route to take.
The complete list, unchanged from the privacy policy: the email address on the account; invoice records for five years, carrying an amount, a coin and a date and no name; connection metadata for panel and API logins, for the last 24 hours only; and the service inventory.
There is no identity document, no payment identity, no phone number, no traffic content, no packet capture and no disk backup. These do not exist rather than being withheld, and the distinction matters when an order is drafted: an order to produce them cannot be complied with, and we will say so in those terms.
Connection metadata older than 24 hours has been overwritten. A preservation request received afterwards cannot recover it, and no order can either.
Acknowledgement within 72 hours, including weekends. Substantive response within ten working days for a valid order, and sooner where the order sets a shorter period that is achievable. Where we cannot meet a deadline we say so before it passes, with the reason.
We notify the affected customer before producing anything, with enough time for them to seek their own advice, unless the order itself prohibits notification. A request for confidentiality that is not backed by an order is declined, and the declined request is counted in the transparency report.
Where notification is barred, it is given as soon as the bar expires. We do not treat an expired gag as a permanent one.
We will not disclose voluntarily, in any circumstance, including circumstances described as urgent. We will not place a tap, a mirror or an interception device. We will not begin retaining more data on the strength of a preservation request. We will not hand over encryption keys, which we do not have.
These are not positions we would abandon quietly. Each is stated weekly in the warrant canary, which is the mechanism by which their abandonment would become visible.
We do not charge for responding to a valid order, and we do not have a law enforcement billing schedule. Providers that do have an incentive we would rather not have.
Every request, valid or not, is logged and published in aggregate each quarter: notices received, foreign approaches, Moldovan orders, and the number of accounts for which any data left our systems. The last figure has read zero every quarter since we opened, and it is published in a form where it would be visible the quarter it stopped.
This page describes our process; it is not legal advice, and it does not purport to state Moldovan procedural law in full. Customers raise questions about it from the panel.
Version 1.3 · last substantive change 2026-07-01 · in force since 2026-07-22. Material changes are announced by email 30 days before they take effect, and the previous version stays reachable.
Asked from both sides
Answered the same way to an investigator and to a customer, because two different answers would eventually meet.
The quarterly figuresWe test whether it is valid and properly served, and we refuse anything that is not — including orders that are genuine but defective, which is more common than it sounds. We will not break Moldovan law for a customer, and you should distrust any host that promises they would: that promise costs nothing to make, is never tested in public, and is abandoned the first time it is.
Not for disclosure. There is one for content: the two categories in the acceptable use policy — child sexual abuse material and material organising violence — are removed on sight without any order at all, and reported. What that path does not do, in any circumstance, is produce customer records; for those you need an order from a Moldovan court.
Nothing stops us; something makes it visible. Each refusal above is restated weekly in the warrant canary, signed with a published key and carrying a recent block hash so it cannot be pre-signed. A page that changes is an edit. A canary that stops being signed, or that quietly loses a line, is an event — and it is the only mechanism that works when we are barred from speaking.
The counts are published every quarter, including the columns we would rather show movement in and the ones we would not. Foreign approaches arrive and are declined; the figure is not zero. Moldovan court orders and data handed over have both read zero every quarter since we opened. When either changes, the report will say so in the quarter it happens rather than the quarter after.
The mechanism, not the promise
A policy page can be edited quietly. A signed statement that stops appearing cannot be.
