Government data requests

How we handle requests from public authorities

VYVO OS holds data belonging to the businesses that use it — their products, their orders, their customers, and the accounts they have connected. If a government body or law enforcement agency asks us for any of it, this is what we do.

Last updated 3 August 2026

We check that the request is lawful

Every request is reviewed before anything is disclosed. We establish who is asking, under what legal authority, what specifically is sought, and whether the authority cited actually reaches us and the data in question. A request that does not meet that bar is not actioned.

Requests are reviewed by a director of the company. Where a request is complex, cross-border, or its legal basis is unclear, we take external legal advice before responding.

We will challenge a request we believe is unlawful

If a request appears to exceed the requesting authority's powers, lacks a valid legal basis, is impermissibly broad, or conflicts with our obligations to our customers, we will push back — seeking narrowing or clarification first, and formally challenging or resisting the request where that is warranted.

We disclose the minimum necessary

Where a request is lawful and we are obliged to comply, we disclose only the specific data required to satisfy it, and nothing further. We do not provide broader datasets for convenience, we do not volunteer data that has not been asked for, and we do not grant direct or bulk access to our systems.

We keep a record

Every request is documented, whether or not we comply. The record includes:

• Who made the request, and when
• The legal authority relied on
• What was asked for
• Our assessment of its lawfulness, and the reasoning behind it
• Who reviewed and decided it
• What was disclosed, if anything, and when
• Whether the affected customer was notified

We tell the affected customer where we lawfully can

If we receive a request concerning a customer's data, we aim to notify that customer so they have the opportunity to respond or object, unless we are legally prohibited from doing so. Where a prohibition is time-limited, we notify them once it lapses.

Where to send a request

Requests from public authorities should be sent to privacy@vyvo-os.com with the legal basis clearly stated. We do not accept service of legal process by phone or through support channels.

Transparency

As of the date above, VYVO OS has received no requests for customer data from any public authority.