Government and Law Enforcement Requests

This page describes what happens when a government or judicial authority asks Kalim for data. We publish it for two reasons: so our customers know what we do on their behalf, and so a requesting authority reaches the right path the first time.

This is a translation of the Arabic original. Where the two differ, the Arabic version governs.

1The only channel

A request must be sent in writing to privacy@kalim-ai.com or to the postal address at the foot of this page.

2What a request must contain

• The requesting authority, the name and role of the responsible officer, and official contact details we can verify against.
• The legal basis: the type of order, its number, its date, and the body that issued it.
• Identification of the person or account sought, specific enough that it cannot be read broadly.
• The period sought, with a start and an end.
• The purpose of the request.

A request missing any of these receives a written reply asking for completion, and execution does not begin before it is complete.

3Legality review

The Data Protection Officer reviews every request before anything is disclosed. The review asks three questions: is this authority competent for this request; was the order issued by a body entitled to issue it and is it still in force; and does the scope sought fall within what Egyptian law permits?

Nothing is disclosed until that review is complete and its outcome recorded.

4When we object

We object in writing, ask for the scope to be narrowed, and use the legal remedies available, in these cases:

• The legal basis is absent or insufficient.
• The scope is wider than the purpose justifies — such as demanding a company's entire archive to establish facts about one person.
• The request conflicts with another legal obligation binding on us.

We disclose nothing while an objection stands, unless the law expressly compels us to.

5What exactly we disclose

• What the order names, and only for the period it specifies.
• We do not hand over a database or a company's entire archive in response to a request about a person.

6Notifying the company whose data is sought

We notify the company whose data is concerned before responding, so it can take whatever steps it sees fit. We withhold notice only where the law or the order itself forbids it; in that case we record the prohibition and its basis, and we notify the company as soon as it lapses.

7What we record for every request

The authority · the date · the legal basis · the scope sought · the review decision and its reasoning · what was actually disclosed · who reviewed and who approved. This includes requests we refused, because a log that documents only the responses hides half the picture.

It is written into the hash-chained compliance log: editing a line breaks the chain and is detected, and a failed attempt is itself recorded as an event.

8No back door

9Transparency

As at the effective date of this version, the number of requests we have received from any government authority is zero. We update this figure in every version of this page.

10Contact