Public-authority enquiries
Government or police requests concerning an account.
THE OPEN RECORD2025 — 2026
KOAHOST / TRANSPARENCY
A little less trust.
A lot more clarity.
Privacy should leave room for questions. Here is our account of the legal requests we received, the action they led to and the data that sits behind your account.
Read the numbers ↓Reporting periodNovember 2025 — November 202613 months. One clear record.
THE COMMUNITY BEHIND THE NUMBERS
10,205active accounts0
customer identities
handed over
0
accounts ended for
non-CSAM requests
5
accounts removed after
confirmed CSAM
CHANNELRECEIVEDACTION
540
Copyright & DMCA notices
A notice alone does not trigger a KoaHost takedown.
Judicial data demands
Orders asking for records relating to a customer.
Judicial removal demands
Orders seeking the removal of hosted material.
Overseas legal channels
Foreign subpoenas and mutual assistance requests.
Restricted security demands
National-security or secrecy-bound requests.
Child-protection reports
CSAM reports reviewed for a confirmed violation.
One request is counted in its principal category. Action means a resulting disclosure, content removal or account termination; the received column is not a count of affected customers.
A FIRM LINE, WITHOUT EXCEPTIONS
No place for exploitation.
We do not provide a refuge for child sexual abuse material. Relevant reports are assessed, confirmed prohibited content leads to immediate service termination, and reports are passed to the appropriate authority when the law requires it.
5received
→5examined
→5confirmed & closed
02 / A SMALLER DATA FOOTPRINT
What's in an account?
Less than you might think.
Not collecting an identity dossier is a deliberate choice. It does not mean that an account has no operational records.
The essentials we retain
Your chosen email address, protected account credentials, billing records and the support correspondence needed to run the service. No routine inspection of your VPS content.
ACCOUNT / BILLING / SUPPORTThe things we leave out
No passport or identity card. No legal name, phone number, postal address or date of birth. No card or bank-account details, VPS activity history or account-linked portal IP history.
NO KYC / NO ACTIVITY LOGSShorter retention
Payment records are deleted within 30 days after account closure. Tickets are deleted on closure or resolution; after three days without a response, they close and are deleted.
30 DAYS / 3 DAYS03 / FROM INBOX TO OUTCOME
Four questions.
Before any response.
Every request is considered on its own merits. Urgent safety, legal and network obligations can require immediate action.
- 01
Who is asking?
Establish the sender and record the request.
- 02
Is it valid?
Check authority, jurisdiction and the scope claimed.
- 03
What exists?
Limit the assessment to information actually held.
- 04
What follows?
Document the decision and notify the customer when permitted.
KEEP ASKING THE RIGHT QUESTIONS.