Ahorra un 25 % (o incluso más) en tus costes de Kafka | Acepta el reto del ahorro con Kafka de Confluent

Last Updated January 1, 2025

Confluent Guidelines For Law Enforcement

Confluent values transparency in its relationship with customers and the handling their data. These Confluent Guidelines for Law Enforcement (“Guidelines”) are intended for use, respectively, by customers and Third-Party Authorities (as defined below). 

These Guidelines are intended to serve as an informational resource and do not create obligations or waive any objections concerning how Confluent will respond in any particular case or request.

1. To Customers

Confluent may receive requests from law enforcement, regulatory, judicial or other government or public authority (“Third Party Authority”) for data that our customers upload into Confluent Cloud for storage or hosting, or otherwise for certain data about our customers (“Customer Data”).  Because Confluent’s offerings enable real time processing for business entities, it is unlikely that Confluent will receive law enforcement requests. To the extent permitted by law, Confluent provides additional safeguards noted below and will reasonably cooperate with customers to limit, challenge and protect against disclosure of Customer Data to a Third-Party Authority.

In the event Third-Party Authorities make a lawful request to Confluent for Customer Data, Confluent will attempt to redirect such requests so that customers can respond to it directly. If Confluent is unable to redirect such request to the customer, or if Confluent knows or gains a reasonably grounded suspicion that ThirdParty Authorities have obtained or will soon obtain access to Customer Data which is subject to processing by Confluent, and such access by the Third-Party Authorities is neither subject to a data processing agreement, nor covered by an instruction from the customer, Confluent will inform the customer of such ThirdParties Authorities’ access as soon as reasonably practicable, to the extent legally permitted.

If Confluent is not able to redirect such request to the customer, or if Confluent knows or gains a reasonably grounded suspicion that Third-Parties Authorities have obtained or will soon obtain access to Customer Data which is subject to processing by Confluent, and such access by the Third-Party Authorities is neither subject to a data processing agreement, nor covered by an instruction from the customer, Confluent will inform the customer of such Third-Parties Authorities’ access as soon as reasonably practicable, to the extent legally permitted. 

Confluent will disclose only the minimum amount of Customer Data necessary to satisfy the Third-Party Authorities’ request. Confluent will provide the data in the form uploaded and will do no additional processing. In order to keep such disclosure as restricted as possible, customers are responsible for ensuring a level of data protection commensurate with the sensitivity of the content uploaded to the Confluent Cloud Service, including without limitation, an appropriate level of message level encryption, in accordance with the Confluent Cloud Security Addendum

Confluent will review the legality of requests received from Third-Party Authorities and challenge such requests if, after careful assessment, Confluent concludes that there are reasonable grounds to consider such request unlawful. As of page publication date, Confluent declares:

  1. Confluent does not cooperate with US authorities conducting surveillance of communications under E.O. 12.3333; and 
  2. Confluent has not received a Third-Party Authorities’ request for Customer Data. 

Confluent maintains the Confluent Transparency Report that provides information on law enforcement requests received by Confluent.

 

2. To Third-Party Authorities

Third Party Authorities can send requests to:

Confluent, Inc.

Attn.: Confluent Deputy General Counsel, Privacy & Compliance

899 W Evelyn Ave, 

Mountain View CA 94041

United States of America

dpo@confluent.io

Please include your full name, mailing address, email address and phone number with the request. Confluent accepts requests by email from a Third-Party Authority, provided these are transmitted from the official email address of the Third-Party Authority. 

Confluent will only respond to requests issued where: i) Confluent is subject to the jurisdiction; ii) there is an enforceable subpoena, court order, or search warrant compelling Confluent to produce the information requested; and iii) categories of records sought and specific time period is clearly stated. For purposes of transparency with its customers, Confluent will use reasonable efforts to notify customers of requests to the extent legally permitted. If a Third-Party Authority does not want Confluent to notify its customer of a request, the Third-Party Authority should reference the explicit legal authority barring Confluent from disclosing or obtaining a non-disclosure order. Confluent reserves the right to seek reimbursement for reasonable costs related to a request and may charge additional fees for costs incurred in responding to unusual or burdensome requests.