Law Enforcement Guidelines

To: legal@3nt.com
Subject: LEA | [DISCLOSURE / PRESERVATION] | [AGENCY] | [CASE REFERENCE]

Authority and jurisdiction:
Requesting officer, role and signature:
Official email and verification telephone (country code):
Case / proceeding reference:
Legal basis and attached authorisation:
Relevant offence or matter and connection to the resource:

IP address / port / protocol / service identifier:
Relevant period (start, end and time zone; UTC preferred):
Specific data categories and action requested:
Reason this scope is necessary:

Deadline, time zone and legal basis:
Preservation duration, if requested:
Non-disclosure basis, scope and expiry, if applicable:
Secure response arrangements / required evidential format:
Attachments:

For an emergency, start the subject with EMERGENCY and explain the
imminent threat to life or risk of serious physical injury, why ordinary
process cannot be obtained in time and how the requested assistance helps.

1. Where to send a request

Send authority correspondence to legal@3nt.com, addressed to the Legal Team, 3NT Solutions LLP. Use an official agency email address and attach the signed request or legal instrument in a readable format. Where mandatory service rules require another method, follow those rules and send an email copy so the matter can be identified promptly.
The registered office is: 3NT Solutions LLP, 22 Brondesbury Park, Willesden, London, England, NW6 7DL, United Kingdom. Company number: OC363382. Email receipt or an acknowledgement does not waive jurisdiction, valid service or other applicable procedural requirements.
Do not use the website contact form, sales@3nt.com or abuse@3nt.com for authority requests. Messages to abuse@3nt.com, including the sender’s address, are automatically forwarded to the customer. security@3nt.com is the confidential security reporting channel; legal@3nt.com is the authority-request channel.

2. Identify the type of assistance

State the requested action at the start of the subject, followed by your agency and case reference. Keep related correspondence in one thread and quote any 3NT reference we supply.

• LEA | DISCLOSURE | agency | case reference — a request to produce specified existing records.
• LEA | PRESERVATION | agency | case reference — a request to retain specified existing material while the necessary disclosure process is pursued.
• EMERGENCY | agency | case reference — an authority request involving an imminent risk of death or serious physical injury.
• LEA | FOLLOW-UP | case reference — clarification, an extension request, a corrected instrument or a status enquiry on an existing matter.

State any deadline, its time zone and its legal basis. An administrative preference is different from a binding deadline. Correspond in English or include an accurate English translation where practicable; translation assistance does not replace the original instrument or any mandatory procedural rule.

3. Information required for review

Provide a request that is specific enough to assess without seeking unrelated customer information.

• The full issuing authority, jurisdiction, postal address and official website; the requesting officer’s name, role, official email and a reachable telephone number with country code.
• The investigation or proceeding reference, the relevant offence or matter and a concise explanation of the requested records’ connection to it.
• The legal authority relied on, the type of process, its issuing date and any required judicial or other independent authorisation. Attach the complete signed instrument, including its schedules.
• The exact identifiers: IPv4 or IPv6 address, relevant port and protocol, service or account identifier where known, and the relevant domain or URL where useful.
• The precise start and end of the relevant period, with time zone and timestamp precision. If attribution depends on a single event, identify that event’s timestamp. UTC avoids ambiguity.
• Each requested category of data, the period it covers and the action sought. Explain why the scope is necessary; “all data” without a defined connection is insufficient for a focused review.
• The response deadline and reason for urgency, any permitted secure delivery method, and any required evidential format or certification.
• Any non-disclosure requirement, its legal basis, the persons or information covered and its duration or expiry. Attach the relevant restriction rather than relying on a confidentiality label alone.

Do not include unlawful imagery, live malware or unrelated personal data in the initial request. Describe sensitive evidence and ask us to agree a secure means of transfer. A signed request should identify the officer or official accepting responsibility for its accuracy.

4. Verification and legal assessment

We verify the requesting authority and contact details, including through an independently established official channel where needed. An official-looking domain, letterhead or signature is not sufficient on its own. Please make the named officer available for a verification call or written clarification.
We then assess jurisdiction, validity of the process, the applicable disclosure basis, scope and any conflicting obligations. Where a request is incomplete, ambiguous, overbroad or directed to the wrong entity, we may seek clarification, ask for a narrower or corrected instrument, or decline the unsupported part. Applicable rights to challenge process are preserved.
Data protection law permits some necessary, proportionate sharing with competent authorities, but an investigation does not create a blanket exemption. We assess the lawful basis and any additional conditions for sensitive information or criminal-offence data. See the ICO guidance on sharing with law enforcement.

5. Preservation is separate from disclosure

A preservation request should identify the existing records, resource, relevant historical period, legal basis, requested duration and the process expected to follow. Explain any urgency, including a known risk that relevant records will expire in the ordinary course.
We assess the request promptly in light of its circumstances and whether preservation is lawful and technically feasible. Where a hold is accepted, we confirm the scope and applicable expiry or review date. Do not assume that sending a request has created a hold, that every requested category exists, or that a standard retention period applies to all services.
Preservation retains identified material; it does not itself authorise its release, require retrospective creation of missing records or establish a general duty to monitor future activity. If an extension is needed, request it before the confirmed expiry and provide the renewed basis and required period. Follow with the disclosure process appropriate to the records sought. Let us know when a hold is no longer required.

6. Emergency requests

An emergency request must explain the imminent threat of death or serious physical injury, the people at risk to the extent necessary, the factual connection to the identified 3NT resource and why ordinary process cannot be obtained in time. Identify exactly which information or action is needed and how it is expected to address the threat.
Use legal@3nt.com with “EMERGENCY” as the first word of the subject. Include a continuously reachable official contact, country code, time zone and case reference. Identify the lawful basis for the requested assistance and provide supporting authorisation or follow-up process where required.
We prioritise assessment according to the stated risk and verify the request. Any assistance or disclosure remains subject to an applicable legal basis, necessity, proportionality and technical feasibility. Labelling a matter urgent does not establish those conditions. An emergency disclosure decision is separate from a preservation decision.
These email channels are not an emergency-services hotline and do not guarantee a response within a particular number of hours. Contact the relevant emergency services directly where immediate intervention is needed. Do not rely on an unacknowledged email as confirmation that action has been taken.

7. Authorities outside the United Kingdom

3NT Solutions LLP is registered in England and Wales. A foreign request or order is not automatically enforceable against us merely because it has been emailed to the company. Identify the legal mechanism relied on, its applicability to 3NT and the requested data, and any requirements governing international disclosure.
Depending on the circumstances, assistance may be available under applicable law or an international arrangement, or the requesting authority may need mutual legal assistance to obtain enforceable process. An urgent preservation request can be assessed separately while the appropriate disclosure route is pursued. Preservation does not resolve the basis for a later international transfer.
For formal assistance requiring coercive measures in England, Wales or Northern Ireland, consult the UK Home Office mutual legal assistance guidance. It directs requests to the appropriate central authority and its current submission service; fiscal matters and requests concerning Scotland have separate arrangements. That government process is distinct from sending correspondence to 3NT. We cannot submit an authority’s application on its behalf or determine which route it must use in every case.

8. Records and technical limits

We can produce only information that exists, is within our possession or control and may lawfully be disclosed. Depending on the service and relevant retention period, this may include account and contact details, order and billing records, recorded IP assignments, and relevant support or security records. The existence and accuracy of each category must be checked for the period requested.
A customer may administer its own dedicated or virtual server. Customer-held application logs and content are distinct from 3NT’s business records. We do not claim routine access to every file, application or encryption key. Access to customer systems, forensic imaging, interception, prospective monitoring or other intrusive measures requires separate assessment of the precise legal authority and technical scope.
We cannot recreate historical traffic or content that was not retained. An IP assignment identifies a recorded service relationship at a time; it does not, on its own, establish the identity of the person who performed an act. If a resource was provided through another party, that distinction may be relevant to the records available.

9. Production and secure delivery

After verification and legal assessment, we identify responsive records, review them against the authorised scope and prepare the material for the verified recipient. Unrelated information is excluded or redacted where appropriate. We may explain that a category is unavailable, outside our control or unsupported by the process.
Agree a suitable secure delivery method with the Legal Team before sending or receiving sensitive material. Do not assume that a third-party upload link is approved, or send decryption credentials in the same message as protected material. Specify any required evidential statement, format or certification in the original request so feasibility can be assessed.
A production should be read with its stated scope, dates and limitations. Further categories or a wider time range may require a new or amended legal instrument. We keep an appropriate record of the request, assessment, disclosure and any continuing preservation obligation.

10. Customer notice and confidentiality

We assess customer notification under applicable law, any valid non-disclosure requirement and specific risks to people, the investigation or evidence. Where notice is lawful and appropriate, it may allow the affected customer to understand or challenge the request. Notice may be withheld or delayed where legally required or otherwise lawfully justified on the facts.
If notice would create a particular risk, explain it and provide the applicable legal restriction, scope and duration. We may ask for clarification and review a restriction when it expires or circumstances change. We do not promise either unconditional notice or indefinite secrecy on the strength of an unsupported request.

11. Status, corrections and follow-up

Keep the agency and 3NT references in the subject and reply through the verified correspondence. Clearly identify any changed deadline, newly discovered emergency, corrected identifier or amended scope. If you have received no acknowledgement, follow up at legal@3nt.com; silence is not confirmation of receipt, preservation or disclosure.
We assess deadlines in the context of the process, urgency and work required, and explain material issues where permitted. There is no universal production time for every record type or jurisdiction. If you believe our response contains an error, identify the specific record or omission and supply the relevant correction or authority.
These guidelines describe our request-handling approach. They do not replace applicable law, create a right to customer information or waive any requirement for valid process. Personal information is handled in accordance with the Privacy Policy and applicable preservation obligations.