Transparency
Transparency report
Requests we have received from governments, courts, and law enforcement — and what we were actually able to produce in response.
Reporting period: since launch, to 7 August 2026 · Reviewed quarterly
| Request type | Received | Complied with | Data produced |
|---|---|---|---|
| Law-enforcement data requests | 0 | 0 | 0 |
| Court orders and subpoenas | 0 | 0 | 0 |
| National security requests | 0 | 0 | 0 |
| Emergency disclosure requests | 0 | 0 | 0 |
| Content removal demands | 0 | 0 | 0 |
| User data preservation orders | 0 | 0 | 0 |
Counts cover Livotov Labs Ltd. and the public keylane.app relay. Self-hosted instances are operated by their own operators, who receive and answer requests independently of us.
What we could produce if compelled
A transparency report is only meaningful alongside an inventory of what exists to be handed over. A valid order compelling us to produce everything we hold about a user would yield the following, in full.
Could be produced
- Sealed envelopes currently in the spool, which are encrypted and which we cannot decrypt.
- Destination device identifiers for those envelopes.
- Public prekey bundles, which are public by design.
- IP addresses observed during a connection, if we were ordered to begin recording them prospectively.
Does not exist to produce
- Message content, in readable form or otherwise recoverable by us.
- Records of who sent a message to whom. The spool does not store senders.
- Conversation history. Delivered envelopes are deleted, not archived.
- Phone numbers, email addresses, or real names. Never collected.
- Contact lists or any social-graph reconstruction.
- Private keys. They exist only on user devices.
How we handle requests
-
Legal review of every request
We require valid legal process from a competent authority with jurisdiction over Livotov Labs Ltd. in Bulgaria. Informal requests without legal process are refused.
-
Challenge where there are grounds
Overbroad, improperly issued, or extraterritorial requests are challenged rather than quietly complied with.
-
Produce only what is required, and only what exists
Where an order is valid we comply with its narrow terms. We do not build new collection capability to satisfy a request for data we do not hold.
-
Notify the user where lawful
Where we are not legally prohibited from doing so, and where we have any means of reaching the person, we notify them. Our architecture frequently leaves us with no such means.
Warrant canary
Statement current as of 7 August 2026
As of the date above, Livotov Labs Ltd. states that it has:
- Never received a national security letter or equivalent secret order.
- Never received a gag order preventing disclosure of a request.
- Never been required to modify Keylane to facilitate surveillance.
- Never disclosed private keys or any cryptographic material to a third party.
- Never been subject to an order compelling a backdoor or weakened cryptography.
This statement is reviewed and reissued quarterly. Its absence, or its failure to be updated on schedule, should be treated as significant.
Jurisdiction
Livotov Labs Ltd. is registered in Varna, Bulgaria, and operates under Bulgarian and EU law, including the GDPR. Requests are answered under Bulgarian legal process; foreign authorities must proceed through mutual legal assistance rather than directly.
Jurisdiction matters less here than it would elsewhere. The strongest protection is not which country’s courts we answer to — it is that the architecture leaves almost nothing for any court to reach.
Legal contact
Legal process should be directed through the legal request form, or by email to legal@livotov.eu. Requests sent to support or general enquiry addresses will be redirected and may be delayed.
Security vulnerabilities are not handled here — see the disclosure policy.