1. Overview
This policy (the "Policy") sets out how Morsberg handles legal process, governmental and regulatory demands, law enforcement requests, and analogous legally binding notices directed at Morsberg in connection with its services, customers, or systems. It applies to all demands for information, data access, disclosure, restriction, suspension, or other enforcement action.
This Policy is applied alongside Morsberg's data protection obligations, contractual commitments, and applicable privacy frameworks. Where Customer operations give rise to validly applicable obligations in other jurisdictions, Morsberg evaluates those obligations on a case-by-case basis.
2. Mandatory Legal Basis for Compliance
Morsberg does not voluntarily provide information, data, system access, or assistance to law enforcement agencies, governmental bodies, private parties, or any other third parties. Cooperation is extended solely where strictly compelled by a valid and legally binding obligation under applicable law. No request, inquiry, or communication, regardless of its form or the authority from which it originates, imposes any duty on Morsberg to respond, preserve data, or take action.
Where applicable law requires formal legal process as a prerequisite for disclosure or action, including a court order, warrant, subpoena, or regulatory directive, Morsberg requires that process before proceeding. Morsberg will not substitute informal cooperation, preliminary confirmations, or discretionary assistance for legally mandated procedure. Morsberg does not confirm or deny the existence of accounts, content, data, or activities; does not provide metadata or investigative assistance; and does not preserve data absent a binding legal obligation to do so.
Requests submitted informally, including by email outside designated channels, telephone, messaging applications, support systems, or personal contacts, are not valid for legal compliance purposes and will not be acted upon.
3. Validity Requirements and Internal Review
Morsberg responds only to requests that are lawful, properly issued, and legally enforceable under applicable law. All demands received, whether from courts, regulators, law enforcement, or governmental bodies, are subject to internal review before any action is taken. Morsberg assesses each request for legal validity, issuing authority, jurisdictional competence, proportionality, and conformity with applicable law.
Morsberg reserves the right to seek clarification, request supplemental documentation, require narrowing of scope, or obtain confirmation of authority prior to responding. Any request that is informal, imprecise, overbroad, improperly issued, or not enforceable under applicable law creates no obligation to act. Morsberg may delay or decline action on any demand pending conclusion of its review.
4. Minimum Necessary Scope
Morsberg limits its compliance with legal demands to the minimum extent required by applicable law. Where a request exceeds what is legally necessary in scope, duration, content, or form, Morsberg may challenge, object to, or seek modification of that demand. Morsberg will not disclose Customer data or take compliance action beyond what is strictly required, and may refuse demands that conflict with applicable data protection, confidentiality, or privacy obligations.
Customer data is disclosed only where required by valid binding legal process, and only to the degree necessary to satisfy that obligation. Disclosures are subject to proportionality and data minimisation principles. Morsberg does not provide third parties with direct access to Customer systems or environments unless expressly compelled by law, and applies appropriate technical and organisational safeguards during any such process.
5. Emergency Requests
Morsberg may, in strictly limited circumstances and solely where permitted by applicable law, respond to an urgent request without prior formal legal process. This applies only where Morsberg determines, in its sole and reasonable judgment, that the situation presents a credible and imminent risk of death or serious physical harm, and that immediate action is necessary to prevent that harm. Any response in such circumstances is limited to the minimum information or action necessary to address the imminent threat, and is subject to subsequent verification of the requesting authority and internal documentation.
Morsberg reserves the right to require prompt submission of formal legal process following any emergency response, and may cease further cooperation absent such process. Nothing in this section constitutes a waiver of Morsberg's rights, an expansion of its legal obligations, or a commitment to provide voluntary assistance beyond what is legally required.
6. Customer Notification
Where legally permitted, Morsberg will use commercially reasonable efforts to notify the affected Customer before disclosing Customer data or taking action in response to a legal demand. Notification may include details of the nature of the request, the identity of the requesting authority, and the scope of information sought, subject to applicable legal and confidentiality constraints.
Morsberg may be legally prohibited from notifying Customer, including under non-disclosure requirements, gag orders, or other legally imposed restrictions. Where notice is restricted, Morsberg will comply with those restrictions and, where permitted by law, will inform the Customer after the restriction lapses. Morsberg bears no liability for any failure or delay in providing notice where such notice is prohibited or restricted under applicable law.
7. Good Faith Compliance; Service Restrictions
Morsberg acts in good faith when fulfilling legal obligations, balancing applicable law, customer rights, proportionality, and operational continuity. Where reasonably possible and not prohibited by law, Morsberg seeks to minimise disruption to Customer operations. Actions taken in good faith to comply with legal demands do not constitute a breach of any agreement with Customer and give rise to no liability.
Morsberg may suspend, restrict, or modify access to its services, in whole or in part, where required or reasonably necessary to satisfy a legal obligation, court order, regulatory directive, or governmental demand. Such action may be taken without advance notice where notice is prohibited or where immediate action is legally required. Morsberg bears no liability for losses arising from service restrictions taken in good faith compliance with legal obligations. Customer remains responsible for all fees and contractual obligations accrued up to and during any such restriction period, to the extent permitted by law.
8. No Obligation to Contest
Morsberg has no obligation to challenge, appeal, or litigate any legal process, governmental demand, or regulatory action on behalf of any Customer. Any decision to object to or seek modification of a demand is made by Morsberg in its sole discretion, in its own interest, and for its own compliance purposes. Customers bear sole responsibility for asserting their own legal rights with respect to any legal process that affects them.
9. Notices That Trigger Legal Obligations
Morsberg may receive complaints, notices, or communications from third parties or authorities referencing legal frameworks that are not directly applicable to Morsberg or not independently binding upon it. Notwithstanding this, such notices may constitute actual knowledge or awareness of alleged unlawful conduct or infringement that triggers Morsberg's own obligations under applicable law. The legal relevance of such a notice derives not from the jurisdiction or framework it cites, but from the awareness it creates and the duties that awareness may impose on Morsberg under the laws to which Morsberg is subject.
As an illustration: a copyright infringement notice issued under a foreign legal regime may not itself be enforceable against Morsberg, but the underlying factual allegations may nonetheless give rise to obligations under applicable law, including obligations to assess, restrict access to, or otherwise address the reported content. Morsberg may review and act on such notices solely to fulfil its own legal obligations, without this constituting any acknowledgment of being bound by the jurisdiction or framework cited, and without waiving any right to contest the validity or scope of the notice or its allegations.
10. Foreign and Extraterritorial Requests
Demands originating from jurisdictions where Morsberg is not legally established or does not operate are not valid or enforceable against Morsberg unless submitted through recognised international cooperation mechanisms. Where required by applicable law, such demands must be routed through mutual legal assistance treaties (MLATs), letters rogatory, or equivalent formally recognised cross-border procedures directed to the competent authority in the relevant jurisdiction. Morsberg will not voluntarily comply with foreign demands that are not properly issued and enforceable under applicable law.
Where a request purports to apply extraterritorially or originates from a jurisdiction whose laws conflict with those applicable to Morsberg or to the relevant data, Morsberg will not automatically comply. Morsberg will conduct a documented assessment of: (i) whether the requesting authority has lawful jurisdiction over the relevant Morsberg entity; (ii) whether a valid legal obligation to comply exists; (iii) whether compliance would violate applicable data protection, confidentiality, or other mandatory law; (iv) whether the request is necessary and proportionate; and (v) whether alternative cooperation mechanisms are available. Where direct compliance would require acting in breach of applicable law, Morsberg will decline and require the matter to be pursued through appropriate intergovernmental or judicial channels.
Any request must be directed to the specific Morsberg entity that is lawfully subject to the requesting authority and has lawful possession or control of the relevant information. Morsberg will not restructure or re-route data or access in a manner that circumvents applicable legal protections to accommodate a request.
11. Records and Regulatory Cooperation
Morsberg maintains records of legal demands, compliance actions, and disclosures to the extent required by applicable law or internal compliance obligations. Where legally required, Morsberg cooperates with audits, inspections, or inquiries by competent authorities, limited to what is legally mandated and subject to applicable confidentiality and data protection obligations. Morsberg is not obligated to provide Customers with access to internal compliance records or audit documentation unless required by law or agreed in writing.
12. Limitation of Liability
To the fullest extent permitted by applicable law, Morsberg is not liable for any losses, damages, costs, or claims arising from actions taken in good faith to comply with legal process, governmental demands, regulatory obligations, or applicable law. This covers disclosures of information, service restrictions, data preservation, delayed notification, and any other compliance-related measure. Nothing in this Policy limits liability where such limitation is prohibited by law.
13. Policy Amendments
Morsberg may amend this Policy at any time to reflect developments in law, regulatory guidance, or operational practice. Amendments take effect upon publication unless a different effective date is specified. Continued use of Morsberg's services after an amendment constitutes acceptance of the revised Policy. If a Customer does not accept an amended Policy, their sole recourse is to cease using the services, subject to any applicable contractual obligations.
14. How to Submit a Legal Request
All legal process, governmental demands, regulatory notices, and other binding legal communications must be directed to the specific Morsberg entity that is lawfully subject to the requesting authority's jurisdiction and that has lawful custody or control over the relevant data or services. Requests addressed to an incorrect entity, or to an entity without jurisdictional nexus or control over the requested information, are not valid and may be rejected or redirected.
The applicable Morsberg entity is determined by reference to: (i) where the contracting Customer is located; (ii) where the relevant service is delivered; (iii) where the relevant data is stored or processed; and (iv) the legal establishment and operational authority of the relevant Morsberg entity over the requested information.
All requests must be submitted electronically to [email protected]. Requests submitted through any other channel, including sales contacts, support systems, or informal communications, are not valid for legal compliance purposes. Morsberg may require resubmission of any request not received in accordance with this section. Receipt of a request does not constitute acknowledgment that Morsberg is subject to the requesting authority's jurisdiction.