Policies

Law enforcement and legal request guidelines

For government agencies, courts and litigants. Effective January 1, 2027.

Who controls the data

PXCMail processes email on behalf of its customers (healthcare practices, firms and advisers). The customer controls the data. Requests for a customer’s records should be directed to the customer in the first instance; we will respond to valid legal process that compels PacinfraX directly.

What we require

DataRequired process
Basic subscriber information (organization name, contact, service dates)Subpoena
Non-content metadata (sender/recipient addresses, timestamps, IP logs)Court order under 18 U.S.C. § 2703(d) or equivalent
Message contentSearch warrant issued on probable cause
Protected health informationProcess satisfying 45 CFR 164.512; we involve the covered entity

Service of process

Serve PacinfraX Corporation, Attn: Legal, 19900 MacArthur Boulevard, Suite 915, Irvine, CA 92612, or by email to [email protected] with the original to follow by mail. Requests must identify the customer organization or account precisely and be narrowly tailored; overbroad requests are challenged.

Customer notice

We notify the customer before producing data unless legally prohibited (for example by a non-disclosure order) or where notice would create a risk of harm; we notify afterwards when the prohibition expires.

Emergency requests

Where a request involves imminent danger of death or serious physical injury, mark it EMERGENCY and email [email protected]; a designated officer reviews it immediately and may disclose the minimum necessary under 18 U.S.C. § 2702(b)(8).

Preservation requests

Valid preservation requests under 18 U.S.C. § 2703(f) are honored for 90 days, renewable once.

Costs and reporting

We may seek reimbursement of reasonable costs as permitted by law. Aggregate statistics are published in our transparency report.

International requests

Requests from outside the United States must come through a mutual legal assistance treaty or letters rogatory; we do not act on direct foreign requests.