We publish what we can. We tell you when we cannot.
Trust requires accountability. This page documents Candidfy's legal-request history and our disclosure policy. We update it periodically.
We previously published a warrant canary here. A canary is only meaningful if maintained on a strict, verifiable cadence — and one that lapses can be misread as a signal it was never meant to send. We would rather not run a canary than run one unreliably, so we have deliberately retired it as of July 13, 2026. This is a considered policy decision, not the result of any legal order.
Our policy on disclosure is unchanged: we disclose sender identity only when compelled by valid legal process. We may reintroduce an automated, cryptographically-signed canary in the future.
Legal requests — cumulative record
| Period | Requests received | Complied with | Challenged | User data disclosed |
|---|---|---|---|---|
| Launch – May 2026 | 0 | 0 | 0 | 0 |
Next update: November 2026.
Our disclosure protocol
When Candidfy receives a legal request for user data, we follow this process without exception:
Every request is reviewed by qualified legal counsel. We verify jurisdiction, specificity, proportionality, and legal authority before taking any action.
Where legally permitted, we notify the affected user before complying. Where notification is legally prohibited, we log the prohibition and include it in our next transparency report.
We challenge requests that are overbroad, lack proper jurisdiction, or seek bulk data rather than specific individuals.
We treat any request for user data with maximum scrutiny, and disclose only when compelled by valid legal process.
We disclose only the specific data required by the legal order — nothing more.
We keep records of the legal requests we receive and reflect them in our aggregate transparency reporting.
What we will not do
Candidfy will never voluntarily disclose sender identity without valid legal process. We will never comply with informal requests from law enforcement. We will never comply with civil litigation requests without a court order. We will never disclose data in bulk. We will never build backdoors or weaken our encryption at the request of any government.
Data retention
Contact
Legal requests: legal@candidfy.com
Privacy enquiries: privacy@candidfy.com
Security concerns: security@candidfy.com