ServPrivacy Warrant Canary
Monthly signed transparency statement. As long as this page updates on time, we have not received any secret legal order forcing silent compliance. Staleness is the warning.
What is a warrant canary?
A warrant canary is a legal mechanism: in jurisdictions where a provider can be compelled to silently comply with a request AND forbidden from disclosing it, they can instead choose to not renew a positive statement. If the canary goes stale, users are alerted that something has changed — even though the provider never "spoke" about the order directly.
Current statement
A canary that is more than 40 days stale should be treated as suspicious. Verify the latest issue date above against the current date.
How to verify
Save the latest canary text and signature (when available) locally. On each refresh, compare the current statement to prior issues — the only differences should be dates and the signature. Structural changes may signal a coerced modification. You can also archive issues to the Wayback Machine for independent timestamping.
FAQ
01 How often is it refreshed?
Every first day of the month. If we have not refreshed within 10 days of the expected date, treat the absence as meaningful.
02 Why is a canary not perfect?
In some jurisdictions, authorities may attempt to compel the renewal itself. No legal mechanism is perfect. A canary is one signal among several (self-hosting, encryption, jurisdictional diversity) — not a silver bullet.
03 What jurisdictions can coerce a canary?
US National Security Letters have been argued to compel continued canary publication but case law is unsettled. Our 7 jurisdictions (Iceland, Panama, Moldova, Romania, Switzerland, Netherlands, Russia) all have stronger protections than the US for this specific mechanism.
04 Is the canary signed?
A PGP-signed version is available on request via our contact form. Publication of the public signing key happens via the press kit.