Law Enforcement Guide
Indicia Law Enforcement Guide
Effective: December 7, 2025
Service: Indicia (Indicia.app)
Location: Fairfax County, Virginia, USA
These guidelines are intended for law enforcement and government authorities seeking information about users of the Indicia OSINT platform. Indicia is committed to cooperating with law enforcement while protecting the privacy and civil liberties of our users.
These guidelines describe the type of data we collect, how we retain it, and the legal process required to compel disclosure.
1. U.S. Legal Process Requirements
Indicia discloses user data in accordance with the Electronic Communications Privacy Act (ECPA) and 18 U.S.C. § 2701 et seq.
A. Basic Subscriber Information (Subpoena)
A valid administrative, grand jury, or trial subpoena is required to disclose basic subscriber records (18 U.S.C. § 2703(c)(2)). This includes:
Username and Email address.
Account creation date
IP address history and login timestamps
Payment transaction references (we do not process or store full credit card numbers; we can provide Transaction IDs linked to our processor).
B. User Content & Search History (Search Warrant)
A valid search warrant issued under the procedures described in the Federal Rules of Criminal Procedure (or equivalent state warrant) is required to disclose stored user content (18 U.S.C. § 2703(a)). This includes:
Search queries and text input history.
Tool usage logs.
C. Important Note on Images & Files
As detailed in our Privacy Policy, Indicia does not permanently store, archive, or retain images uploaded by users. Uploaded files are processed in-memory and deleted after the analysis result is generated.
Consequently, Indicia cannot produce uploaded images or files, even in response to a valid search warrant.
2. Verification & Authenticity Checks
Due to the rising prevalence of compromised law enforcement email accounts and forged legal documents, Indicia employs strict verification protocols for all requests, including Emergency Data Requests (EDRs).
A. Independent Verification
We do not rely on phone numbers or contact details provided within the email signature or the request header. We will independently locate the official, publicly listed main switchboard number for the requesting agency.
B. Mandatory Callback
An Indicia representative will call the agency’s verified main line and request to be transferred to the issuing officer or their direct supervisor. We will verbally confirm:
The identity of the requesting officer.
That the request genuinely originated from the agency.
The specific case reference number.
If we cannot verify the request via a callback to the agency’s official public number, the request will be denied.
C. Fraudulent Requests & Impersonation
If the officer or agency denies initiating the request during our verification process, Indicia treats the submission as a criminal attempt to unlawfully access user data.
Immediate Reporting: We will immediately forward the fraudulent request–including the sender’s email headers, IP address, and attachments–to the appropriate federal authorities (e.g., FBI IC3) and the impersonated agency’s Internal Affairs or Fraud Division.
Preservation of Evidence: All metadata regarding the fraudulent attempt will be preserved as evidence of violation of 18 U.S.C. § 1030 (Computer Fraud and Abuse Act) and 18 U.S.C. § 912 (Officer & Employee of the United States).
3. Data Retention
Law enforcement should be aware of the following data retention schedules when crafting a request:
Access Logs and IP History: Technical and security logs, including IP addresses, timestamps, and access metadata, are retained for up to 18 months. These records may be retained longer only if required by an active legal hold, security requirement, or ongoing investigation, consistent with Section 4 of the Privacy Policy.
Search History and Queries: User search history, including tools accessed and text queries entered, is retained as part of the user’s account data. Upon account deletion, this data is scheduled for deletion and may persist for up to 30 days during processing. Limited records required for security, compliance, or investigations may be retained for up to 18 months, or longer only if subject to a legal hold.
Uploaded Images and User Content: Indicia does not retain uploaded images or user submitted content. Images are processed temporarily in memory for the duration of the request and are deleted immediately after the output is generated. Indicia does not archive, log, or store uploaded images and cannot retrieve them after processing.
Deleted Accounts: When a user deletes an account, or when Indicia initiates deletion, associated account data, including search history, is permanently purged from active systems within up to 30 days. After this period, the data is no longer recoverable, except for limited records retained for security, compliance, or legal purposes as described above.
4. Preservation Requests
We accept requests to preserve records in connection with official criminal investigations pending the issuance of a court order, pursuant to 18 U.S.C. § 2703(f).
Preservation requests must be signed by a law enforcement official and must state the specific account (email address or username to be preserved).
We preserve a snapshot of the available records for 90 days. You may request one 90-day extension.
5. Emergency Requests (EDR)
Under 18 U.S.C. §§ 2702(b)(8) and 2702(c)(4), Indicia may voluntarily disclose information if we have a good faith belief that an emergency involving imminent danger of death or serious physical injury to any person requires disclosure without delay.
Emergency requests must contain the subject line “EMERGENCY DISCLOSURE REQUEST.”
The request must explain the nature of the emergency and why the information is needed immediately to prevent harm.
All EDRs are subject to the verification procedures outlined in Section 2.
6. User Notification Policy
Indicia respects user rights and transparency. It is our policy to notify users of requests for their information prior to disclosure, to allow them the opportunity to seek protective relief.
Exceptions:
We are prohibited from doing so by a valid court order (e.g., under 18 U.S.C. § 2705(b)).
We believe, in good faith, that notification would create a risk of death or serious physical injury.
7. Cost Reimbursement
Under federal law (18 U.S.C. § 2706), Indicia is entitled to reimbursement for costs incurred in searching for, assembling, and reproducing records. We may request reimbursement for complex or voluminous data requests.
8. International (Non-U.S.) Requests
Indicia is a United States company based in Virginia. We are governed by U.S. law, including the Stored Communications Act (SCA) and the Electronic Communications Privacy Act (ECPA).
A. No Direct Response to Foreign Process
We do not produce user data in response to legal processes (warrants, court orders, or subpoenas) issued by non-U.S. government entities. Foreign court orders are not enforceable against Indicia in the United States.
B. The Mutual Legal Assistance Treaty (MLAT) Process
Foreign law enforcement officers seeking data from Indicia must work through the Mutual Legal Assistance Treaty (MLAT) or Letters Rogatory process.
The foreign authority must submit their request to the U.S. Department of Justice (DOJ) Office of International Affairs (OIA).
If the request satisfies U.S. legal standards, the DOJ will issue a valid U.S. subpoena or search warrant to Indicia.
We will respond to the U.S. process issued by the DOJ.
C. Emergency Exceptions
We may disclose data to non-U.S. law enforcement voluntarily if we have a good faith belief that there is an emergency involving imminent danger of death or serious physical injury. These requests are subject to the strict verification protocols in Section 2, and we may require validation through a U.S. Legal Attaché or Interpol.
9. Submission of Process
Indicia is located in Fairfax County, Virginia. We accept service of process via email or mail to our mailing address.
Email (Preferred): [email protected] (Please include “Legal Process” in the subject line).
Mail: 7419 Lisle Ave, Falls Church, VA 22043