LAW ENFORCEMENT & LEGAL REQUESTS POLICY

Ourfirm.ai, Inc. Effective Date: October 23, 2025

1. Guiding Principles

We respect the privacy and confidentiality of our customers and their clients. We require due process, provide notice where lawful, narrowly tailor disclosures, and challenge unlawful or overbroad requests. We do not provide “backdoor,” bulk, or upstream access to our systems.

2. Scope and Definitions

This policy governs governmental and private-party legal requests (e.g., subpoenas, court orders, search warrants, preservation requests) seeking information related to the Services.

3. Valid Legal Process Required

We require valid, properly served legal process issued under applicable law. We do not accept oral requests. Email service is accepted at legal@ourfirm.ai. Alternatively, process may be served on our registered agent on file with the Delaware Secretary of State.

4. Notice to Customers

Unless legally prohibited or there is a clear risk of harm or data destruction, we will notify affected customers before producing data, providing reasonable time to seek legal remedies.

5. Narrowly Tailored Disclosures

We produce only the minimum information necessary to comply with valid legal process. Where feasible, we seek to limit scope, date ranges, and data types and to redact non-responsive information.

6. Emergency Disclosure

In emergencies involving danger of death or serious physical harm, we may disclose limited information necessary to address the emergency, consistent with applicable law. Requests should be labeled “EMERGENCY REQUEST” and sent to legal@ourfirm.ai.

7. Preservation Requests

We will take reasonable steps to preserve records identified with particularity for up to 90 days, renewable upon a valid extension request.

8. Cost Reimbursement

We may seek reimbursement for costs incurred responding to requests, including research, engineering time, and production media, as permitted by law.

9. International Requests

Our primary processing region is the United States. We require appropriate U.S. legal process for data stored in the U.S., or process pursuant to an applicable mutual legal assistance mechanism.

10. Transparency

We may publish aggregate information about the number and types of legal process we receive, unless prohibited by law.

---