At cPanel we are committed to trust and transparency. As part of our commitment, we publish periodic reports about the following issues:
- Law enforcement and government demands for Customer Data (which is information about people or entities who use our products and services);
- Content that is permanently disabled under the Digital Millennium Copyright Act (DMCA); and
- Customer accounts that are disabled by us under our Terms of Service for reasons other than failure to fulfill payment terms, or material breach of contract.
Our report is below and covers all such issues received during the period from December 31, 2022, to December 31, 2023 (Reporting Period). We will provide additional reports on a semi-annual basis. More information about our policies and practices with respect to Customer Data can be found in the cPanel privacy policy, available at https://cpanel.net/privacy-policy/ and our legal notices and other agreements available at https://cpanel.net/legal-notices/
Our Values:
- cPanel is committed to maintaining our customers' privacy and confidentiality;
- We review requests for Customer Data validity and interpret all requests narrowly;
- And respond to those requests, if required, in accordance with applicable law, including the Electronic Communications Privacy Act, 18 U.S.C. § 2701 et seq.
- We notify Customers prior to disclosure of Customer Data, unless we receive a binding court order preventing that notice, such notice would endanger the safety of identified individuals, or would harm the Company; and
- cPanel encourages requesting parties to obtain Customer Data directly from Customers, who have access to a far greater range of information than cPanel.
- cPanel produces Customer Data only pursuant to United States law, and does not directly respond to non-U.S. law enforcement.
Legal Demands for Data
During this reporting period, cPanel received four requests for information about cPanel Customer and/or Customer Data from U.S. law enforcement and governmental entities. cPanel did not receive any requests from law enforcement or governmental entities outside the U.S.
Type of request |
Number of requests received |
cPanel’s response |
No information disclosed |
Non-content disclosed |
Content disclosed |
Pending |
Subpoena |
7 |
4 |
3 |
0 |
0 |
Search Warrant |
2 |
2 |
0 |
0 |
0 |
National security requests received |
0 |
Types of Requests
- “Subpoena” is any formal, compulsory demand for the production of documents or testimony issued by a governmental entity (including grand jury subpoenas, administrative subpoenas, investigative subpoenas, and trial subpoenas).
- “Search warrant” is a court order issued by a neutral and detached magistrate upon a finding of probable cause to search or seize the property or place described therein.
- “National security requests” refers to National Security Letters (issued pursuant to 18 U.S.C. § 2709) and orders issued pursuant to the Foreign Intelligence Surveillance Act (FISA, 50 U.S.C. § 1801 et seq.).
- Providers like cPanel who have received classified demands are generally limited to publishing aggregate figures in accordance with the structure authorized in the USA FREEDOM Act of 2015.
cPanel's Responses
- “No information disclosed” reflects that cPanel objected to the validity of the demand or did not have responsive records.
- “Non-content data” refers to basic subscriber information (such as name and email address, registration information, login history and billing information) and other non-content metadata (such as the date, time, and sender/recipient of messages or files).
- “Content data” refers to the body of a message or file, as defined in 18 U.S.C. § 2510(8), and the associated metadata for that message or file.
- “Pending” indicates requests received by cPanel that are awaiting further processing.
Content permanently disabled pursuant to the DMCA.
cPanel does not control Customer content. We are not a hosting company. However, we understand that people often have questions about whether we disable Customer content, even though we do not have that ability. We cannot, and do not, disable Customer content under the DMCA. If a DMCA request is sent to us, and our records indicate who may control the content, we forward the DMCA request to that individual or entity.
Certain terminations pursuant to our Terms of Service.
During the Reporting Period, we have not terminated a Customer for a violation of our Terms of Service or website Terms of Use. This statement does not apply to terminations for failure to fulfill financial commitments, a violation of U.S. export control laws, or a material breach of contract.