As a U.S. company with its main data infrastructure located in the US, we only preserve or share customer data if compelled by a U.S. government authority with a legally binding order or proper request under the Stored Communications Act, or in limited circumstances in the event of an emergency request. If a non-U.S. authority approaches 37signals for assistance, our default stance is to refuse unless the order has been approved by the U.S. government, which compels us to comply through procedures outlined in an established mutual legal assistance treaty or agreement mechanism.