Requests from authorities

This page explains how competent authorities can submit requests to Petra and how we handle them under Dutch and EU law (GDPR, Digital Services Act, E-Evidence Regulation, mutual legal assistance, European Investigation Order). We support lawful investigations and protect the privacy and safety of our members.

Petra is operated by •••, Ijbruglaan 1495, 1087 KM Amsterdam, The Netherlands (Kamer van Koophandel (KVK), registration number 78052769). Requests must be addressed to this company.

Send requests by email to [email protected] with the subject “Law enforcement request”. Requests in English, Dutch or German are accepted. Requests sent to app support, social media or individual people may be delayed or not processed.

Details of the authority and a contact person; the legal basis and case reference; the exact account identifier (username, profile link or registered phone number); the time period; the data categories requested and why; a short description of the offence or danger; whether it is urgent; whether the member may be informed or the legal basis for non-disclosure; a signed order or a letter on official letterhead or from an official email domain.

We check that the sender is a competent authority with a valid legal basis before releasing data. We may verify through official sources, call back a publicly listed number or ask for further documents. Foreign requests must come through the applicable legal channel. Informal or unverifiable requests receive no personal data.

We release only data that is necessary, proportionate and specifically named. Requests that are too broad or poorly justified may be clarified or declined in whole or in part. We do not answer bulk requests or requests for the data of many members.

For an imminent danger to life or physical safety, put “EMERGENCY” in the subject, describe the danger and give a direct phone number. We prioritise these, also outside office hours where possible, and release only the data needed to avert the danger. Formal proof follows afterwards. Please call your local emergency number first (112 in the EU).

On a formal request or order we preserve existing data of the named account for up to 60 days while legal proceedings are pending; one extension is possible on a new valid request. Preservation is not disclosure.

Account data (display name, username, registration time, language, and the phone number if the member signed up with one) on a valid request.

Technical data (for example connection data from server logs) only to the extent it still exists and an order permits it.

Content of chats: Petra is end-to-end encrypted. We hold only encrypted data and cannot decrypt it. The key backup we store is a block we cannot open. We have no access to message content, no backdoor and no real-time access, and we cannot create data for a request. Public profile content (profile photo, “about me”) can be provided.

Affected members are normally informed so they can defend their rights. We withhold notice where a law or order prohibits it or where it would endanger an investigation or a person; we inform them when the reason lapses. Authorities asking for a delay must state the legal basis and a time limit.

We intend to publish regular information about requests and orders. Members may complain to us, to the Dutch Data Protection Authority or to the courts. Orders under the DSA and Regulation (EU) 2021/784 go to the channel in section 3. Child-safety matters are always referred to the authorities.