Apply your unique promo code in your account settings to receive a $100 credit.

Github Announcement Bar

Free credit active: Get started on DigitalOcean with a $100, 60-day credit for new users.

$100 60 day credit to new users

Community

Company

Contact

Products

Solutions

DigitalOcean Kubernetes: new control plane is faster and free, enable HA for 99.95% uptime SLA

Connect, share and learn

Overview

DevOps and development guides

Tutorials

Development and systems Q&A

Questions and Answers

Community-built integrations

Tools

How to Deploy a PHP Application with Kubernetes on Ubuntu 16.04

How to Build a Node.js Application with Docker

Featured Articles

Get Involved

Scalable virtual machines

Droplets

Managed Kubernetes clusters

Kubernetes

Get apps to market faster

App Platform

Serverless compute solution

Functions

Worry-free setup & maintenance

Databases

Compute

Managed Databases

Tools and Services

Storage

Networking

Featured Products

Easily and reliably host a website

Website Hosting

Quickly build and reliably run your apps

Web & Mobile Apps

Create a highly available streaming service

Video Streaming Hosting

Scale your game as fast as you want

Gaming Development

Quickly set up a fast, reliable, and easy to use VPN

Cloud VPN

Run batch and streaming big data workloads

Big Data Computing

A cloud partnership to power your startup

Startups

Build your SaaS exactly how you want

SaaS Development

Create powerful websites and applications for your clients

Agency & Web Dev Shops

We make cloud hosting simple and cost-efficient

Managed Cloud Hosting Providers

Scalable, affordable compute for your blockchain

Cloud Hosting for Blockchain

Terms of Service Agreement

DigitalOcean, LLC ("Company") has adopted the following general policy toward copyright infringement in accordance with the Digital Millennium Copyright Act ([http://lcweb.loc.gov/copyright/legislation/dmca.pdf](http://lcweb.loc.gov/copyright/legislation/dmca.pdf)) ("DMCA"). The address of the Designated Agent to Receive Notification of Claimed Infringement ("Designated Agent") is listed below.

Procedure for Reporting Copyright Infringement
----------------------------------------------

The Company responds to copyright notifications submitted under the DMCA. Section 512 of the DMCA outlines the statutory requirements necessary for formally reporting copyright infringement, as well as providing instructions on how an affected party can appeal a removal by submitting a counter-notice.

If you believe that material or content residing on or accessible through Company’s websites or services infringes a copyright, please send a notice of copyright infringement containing the following information to the Designated Agent listed below:

1.  A physical or electronic signature of a person authorized to act on behalf of the owner of the copyright that has been allegedly infringed.
2.  Identification of works or materials being infringed; this includes, at a minimum and if applicable, the URL or IP address of the link shown on the site where such material may be found, as well as the reference or link to the material or activity that you claim to be infringing, that is to be removed or access to which is to be disabled, and information reasonably sufficient to permit us to locate that reference or link, including at a minimum, if applicable, the URL or IP address of the link shown on the site where such reference or link may be found.
3.  Contact information about the notifier including address, telephone number and, if available, e-mail address.
4.  A statement that the notifier has a good faith belief that the material is not authorized by the copyright owner, its agent, or the law; include this statement in the body of the notice:
    I hereby state that I have a good faith belief that the disputed use of the copyrighted material or reference or link to such material is not authorized by the copyright owner, its agent, or the law (e.g., as a fair use).
5.  A statement made under penalty of perjury that the information provided is accurate and the notifying party is authorized to make the complaint on behalf of the copyright owner; include this statement in the body of the notice:
    I hereby state that the information in this notice is accurate and, under penalty of perjury, that I am the owner, or authorized to act on behalf of the owner, of the copyright or of an exclusive right under the copyright that is allegedly infringed.

Please contact the Designated Agent at [dmca@digitalocean.com](mailto:dmca@digitalocean.com) or at:

DigitalOcean, LLC 
Attn: Legal
101 Avenue of the Americas, 10th Floor 
New York, NY 10013

Consequences of Sending A DMCA Notice
-------------------------------------

The Company will review your notice for accuracy, validity, and completeness. If we find that it satisfies these requirements, we will forward the notice to the customer or user associated with the allegedly infringing material. If the person who posted the material believes that the notice is incorrect or that they have the right to use the material at issue, they may send a counter-notice under Section 512(g)(3) of the DMCA.

Please be aware that under 17 U.S.C. § 512(f), you may be liable for any damages, including costs and attorneys’ fees incurred by us or our users, if you knowingly materially misrepresent that material or activity is infringing. So before you send a DMCA notice, make sure that you are the actual copyright holder (or are authorized to act on behalf of the owner), that you have a good-faith belief that the material you are identifying is actually infringing, and that you understand the repercussions of submitting a false claim.

Repeat Infringer Policy
-----------------------

Consistent with the requirements of the DMCA, the Company will terminate, in appropriate circumstances, the accounts of subscribers who repeatedly infringe the copyrights of others.

DMCA Copyright Policy

Data Processing Agreement

This Acceptable Use Policy (this “AUP”) describes material and activities that are not allowed in connection with the Services offered by DigitalOcean. This AUP is not exhaustive, and DigitalOcean reserves the right to take remedial action in connection with content or uses that are not specifically described below.

You are responsible for violations of this AUP by anyone using your account with your permission or on an unauthorized basis. You are also responsible for violations of this AUP by Your Users. Your use of the Services to assist another person in an activity that would violate this AUP if performed by you is a violation of the AUP. We may modify this AUP at any time by posting a revised version on the DigitalOcean Websites and/or Services.

All capitalized and formally defined terms in this AUP have the same meaning as in the Terms of Service.

Illegal or Abusive Activity or Content
--------------------------------------

You may not use the Services for any unlawful or abusive purpose. Prohibited activities include:

*   **Illegal Activities.** Any use of the Services to engage in, further, promote, or encourage illegal conduct or activities, including the dissemination of content that has been determined by a court of competent jurisdiction to be unlawful.
*   **Fraudulent or Harmful Activities.** Engaging in activities that is deceptive or harmful to others, or that would harm DigitalOcean’s operations or reputation, including offering or disseminating fraudulent goods, services, schemes, or promotions (e.g., make-money-fast schemes, Ponzi and pyramid schemes, phishing, or pharming), deceptively impersonating another person or entity, or engaging in other fraudulent or misleading practices.
*   **Violation of Intellectual Property Rights.** Using the Services in a manner that violates, infringes on or misappropriates the intellectual property or proprietary rights of any third party, including without limitation any rights in or to copyright, patent, trademark, trade secret, privacy or publicity, and publishing content intended to assist others in unlawfully circumventing technical measures intended to protect any such rights. For more information, please see DigitalOcean’s [Copyright Policy](/legal/dmca-copyright-policy/) and [Trademark Policy](/legal/trademark-notification-policy/).
*   **Unlawful Pornography.** Disseminating child pornography or depictions of nudity or sexual activity obtained or disseminated without the consent of those depicted (e.g., “revenge pornography”).
*   **Violent, Harassing, or Abusive Content.** Content that incites or threatens violence against any person, promotes terrorism, is intended to harass, abuse or invade the privacy of any individual, creates a risk to the physical safety or health of any individual or to public safety or health, or that threatens or encourages harm on the basis of race, ethnicity, national origin, religion, caste, sexual orientation, sex, gender, gender identity, serious disease or disability, or immigration status.
*   **Controlled Substances**. Unlawfully selling or distributing controlled substances, including but not limited to any illegal or prescription drugs.

Security Violations
-------------------

You may not use the Services to violate the security or integrity of any network, computer or communications system, software application, or network or computing device (each, a “System”). Prohibited activities include:

*   **Harmful Software.** Content, software, or any other technology that may damage, interfere with, surreptitiously intercept, or expropriate any computer system, program, or data, including any viruses, malware, spyware, adware, Trojan horses, worms, or time bombs.
*   **Unauthorized Access.** Accessing or using any System without permission, including attempting to probe, scan, or test the vulnerability of a System or to breach any security or authentication measures used by a System.
*   **Interception.** Monitoring of data or traffic on a System without permission.
*   **Falsification of Origin.** Using fake or misleading TCP-IP packet headers, e-mail headers, or any part of a message describing its origin or route. This prohibition does not include the use of aliases or anonymous remailers.

Network Abuse
-------------

You may not make network connections to any users, hosts, or networks unless you have permission to communicate with them. Prohibited activities include:

*   **Monitoring or Crawling.** Monitoring or crawling of a System that impairs or disrupts the System being monitored or crawled, or other harvesting or scraping of any content of the Services.
*   **Deceitful Actions.** Introducing intentionally, knowingly or recklessly, any virus or other contaminating code into the Service, or collecting, transmitting, or using information, including email addresses, screen names or other identifiers, by deceit or covert means (such as phishing, Internet scamming, password robbery, spidering, and harvesting).
*   **Intentional Interference.** Interfering with the proper functioning of any System, including any deliberate attempt to overload a system by mail bombing, news bombing, broadcast attacks, flooding techniques, or conducting a denial of service (“DoS”) attack.
*   **Operation of Certain Network Services.** Operating open proxies, open mail relays, open recursive domain name servers, Tor exit nodes, or other similar network services.
*   **Avoiding System Restrictions.** Using manual or electronic means to avoid any use limitations placed on a System, such as access limits and storage restrictions.
*   **Retaliation Against DigitalOcean.** Any conduct that is likely to result in retaliation against DigitalOcean, including the Services, or DigitalOcean’s employees, officers or other agents, including engaging in behavior that results in any DigitalOcean server being the target of a DoS attack.
*   **Withholding Identity.** Any activity intended to withhold or cloak identity or contact information, including the omission, deletion, forgery or misreporting of any transmission or identification information, such as return mailing and IP addresses.
*   **Mining of Cryptocurrencies**. Mining any cryptocurrency, including but not limited to BitCoin or any similar currency, without explicit written permission.

E-Mail and Other Message Abuse; Spamming
----------------------------------------

You will not distribute, publish, send, or facilitate the sending of unsolicited mass e-mail or other messages, promotions, advertising, or solicitations (like “spam”), including commercial advertising and informational announcements. You will not alter or obscure mail headers or assume a sender’s identity without the sender’s explicit permission. You will not collect replies to messages sent from another internet service provider if those messages violate this AUP or the acceptable use policy of that provider. You must use reasonable efforts to secure any device or network within your control against being used in breach of the applicable laws against spam and unsolicited email, including where appropriate by the installation of antivirus software, firewall software and operating system and application software patches and updates. You will not take any action which directly or indirectly results in any of our IP addresses being listed on any abuse database (e.g., Spamhaus).

You must comply with the laws and regulations applicable to bulk or commercial email in your jurisdiction. In addition, your bulk or commercial email must meet the following requirements:

*   You must have a privacy policy or similar disclosure posted for each domain associated with the mailing;
*   You must have the means to track anonymous complaints;
*   You must not obscure the source of your e-mail in any manner;
*   You must post an email address for complaints (such as abuse@yourdomain.com) in a conspicuous place on any website associated with the email, and you must promptly respond to messages sent to that address;
*   Your intended recipients have given their consent to receive e-mail via some affirmative means, such as an opt-in procedure, and you can produce the evidence of such consent within 72 hours of receipt of a request by the recipient or DigitalOcean;
*   You must use reasonable means to ensure that the person giving consent is the owner of the e-mail address for which the consent is given;
*   You must include the recipient’s e-mail address in the body of the message or in the “TO” line of the e-mail; and
*   You must honor revocations of consent and notify recipients of the same.

These mail policies apply to messages sent using the Services, or to messages sent from any System by you or any person on your behalf that directly or indirectly refer the recipient to a site hosted via the Services. In addition, you may not use a third-party e-mail service that does not practice similar procedures for all of its customers. These requirements apply to distribution lists created by third parties to the same extent as if you created the list.

Vulnerability Testing
---------------------

You may not attempt to probe, scan, penetrate, or test the vulnerability of a DigitalOcean system or network, or to breach the DigitalOcean security or authentication measures, whether by passive or intrusive techniques, or conduct any security or malware research on or using the Services, without DigitalOcean’s prior written consent.

Excessive Use of Shared System Resources
----------------------------------------

You may not use any shared System provided by DigitalOcean in a way that unnecessarily interferes with the normal operation of the shared System, or that consumes a disproportionate share of the resources of the System. For example, we may require you to repair coding abnormalities in your cloud-hosted code if it unnecessarily conflicts with other customers’ use of the Services. You agree that we may quarantine or delete any data stored on a shared System if the data is infected with a virus, or is otherwise corrupted, and has the potential to infect or corrupt the System or other customers’ data that is stored on the same system.

Other
-----

You must have valid and current information on file with your domain name registrar for any domain hosted on the DigitalOcean network. You may only use IP addresses assigned to you by DigitalOcean in connection with your DigitalOcean Service. You agree that if you register a DNS record or zone on DigitalOcean-managed or operated DNS servers or services for a domain of which you are not the registrant or administrative contact according to the registrars’ WHOIS system, that, upon request from the registrant or administrative contact according to the registrars WHOIS system, DigitalOcean may modify, transfer, or delete such records or zones.

Our Monitoring and Enforcement
------------------------------

We reserve the right, but have no obligation, to investigate any suspected violation of this AUP or misuse of the Services about which we have actual knowledge. In connection with such investigations, we may report any activity that we suspect violates any law or regulation to appropriate law enforcement officials, regulators, or other appropriate third parties. Such reporting may include disclosing, reviewing and preserving appropriate customer information consistent with applicable law. We also may cooperate with appropriate law enforcement agencies, regulators, or other appropriate third parties to help with the investigation and prosecution of illegal conduct by providing network and systems information related to alleged violations of this AUP.

Consequences of Violation of AUP
--------------------------------

If we determine, in our discretion, that you have violated this AUP, we may remove, disable access to, or modify any content or resource and/or to suspend or terminate your use of the Services. We also may intercept or block any content or traffic belonging to you or to users where the Services are being used unlawfully or not in accordance with this AUP. Our right to suspend or terminate your use of the Services applies even if a violation is committed unintentionally or without your authorization. Such right is not an obligation on us to act at any given time or with respect to any given Subscriber, and we may exercise such right at any time within our sole discretion.

Reporting of Violations of this AUP
-----------------------------------

If you become aware of any suspected violation of this AUP, please notify us by providing a full explanation of the bases for the violation. We may request your assistance to help stop or remedy the violation. To report any violation of this AUP or make related inquiries, please contact us [here](https://www.digitalocean.com/company/contact/#abuse).

Acceptable Use Policy

### What services does DigitalOcean offer?

DigitalOcean is a cloud computing platform that provides a cloud platform to deploy, manage, and scale applications of any size. Its infrastructure and platform-as-a-service solutions provide a no DevOps required experience, allowing developers to focus their energy on creating innovative software. By combining the power of simplicity, love for the developer community, an obsession for customer service, and the advantages of open source, DigitalOcean brings software development within the technical and economic reach of anyone around the world.

### How does DigitalOcean deliver its services?

DigitalOcean delivers its services via the Internet. Customers log into DigitalOcean’s services through a website using unique usernames and passwords. DigitalOcean’s services allow for various additional authentication methods that may be activated by customers, as appropriate to their needs, such as two-factor authentication. We also serve our customers through what is known in the industry as cloud-based services architecture, which is designed for security, efficiency, availability, scalability, and rapid innovation.

### Where does DigitalOcean host Customer Data?

DigitalOcean’s services are hosted in various locations depending on customer instructions and each specific service provided. Please refer to DigitalOcean’s Trust Platform available at [https://www.digitalocean.com/trust/](https://www.digitalocean.com/trust/) for more information on our data center locations and our use of public cloud infrastructure. If you have questions, please contact [privacy@digitalocean.com](mailto:privacy@digitalocean.com)

### Does DigitalOcean comply with PIPEDA?

Yes. DigitalOcean complies with Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”) as it applies to DigitalOcean in provisioning and operating our services.

### Does PIPEDA permit the cross-border transfer of personal information?

Yes. The Office of the Privacy Commissioner of Canada’s Processing Personal Data Across Borders Guidelines (the “Guidelines”), available at [https://www.priv.gc.ca/en/privacy-topics/airports-and-borders/gl\_dab\_090127/](https://www.priv.gc.ca/en/privacy-topics/airports-and-borders/gl_dab_090127/), state that “PIPEDA does not prohibit organizations in Canada from transferring personal information to an organization in another jurisdiction for processing. However under PIPEDA, organizations are held accountable for the protection of personal information transfers under each individual outsourcing arrangement.” The Guidelines further clarify that organizations responsible for personal information must use contractual or other means to ensure a comparable level of protection for personal information after it is transferred. 

The Guidelines state that a “transfer” of personal information to another organization for processing purposes is a “use” rather than a “disclosure” of the information assuming that the transferred information is processed only for purposes consistent with the purposes for which it was originally collected. The distinction between “uses” and “disclosures” of personal information is important because disclosures of personal information require additional consent from the individual to whom the personal information relates. 

Uses of personal information by DigitalOcean are referred to throughout this FAQ as “processing.”

### Does submission of personal information to DigitalOcean’s services require the consent of the individual to whom personal information relates?

No. Submission of Canadian personal information to DigitalOcean’s services is a use, rather than a disclosure, of such information under PIPEDA. DigitalOcean’s customers solely determine what personal information is submitted to and processed by our services. In providing our services, we process personal information only in accordance with the instructions of our customers and as otherwise consistent with our Terms of Service ([https://www.digitalocean.com/legal/terms-of-service-agreement/](https://www.digitalocean.com/legal/terms-of-service-agreement/)).

### How does DigitalOcean help customers ensure compliance with PIPEDA in their use of DigitalOcean’s services?

DigitalOcean educates and empowers individuals and customers to take a proactive role in the management of their data. The DigitalOcean privacy landing page at [https://www.digitalocean.com/legal/privacy-policy/](https://www.digitalocean.com/legal/privacy-policy/) includes links to a variety of resources describing how we protect personal data, such as our customer data processing addendum ([https://www.digitalocean.com/legal/data-processing-agreement/](https://www.digitalocean.com/legal/data-processing-agreement/)), which contains (i) an obligation for DigitalOcean to use and disclose personal information in accordance with agreed processing terms; (ii) a commitment to assist customers in responding to the exercise of rights by individuals whose personal information is processed by customers on DigitalOcean services; (iii) measures related to confidentiality obligations of DigitalOcean’s personnel; (iv) obligations regarding DigitalOcean’s use of subcontractors engaged in the processing of personal data; (v) information about DigitalOcean’s security controls; (vi) security breach notification commitments; (vii) provisions governing the cross-border transfer of personal data; and (viii) details regarding DigitalOcean’s compliance with customer data deletion requests.

We incorporate privacy and data protection concepts into our product lifecycle from the design phase to the marketing of new services and features. Additionally, when a service or feature is released, it is described in product documentation and release notes so that customers can perform their own evaluations.

### How does DigitalOcean help protect Customer Data?

DigitalOcean has a robust and comprehensive privacy and security program addressing the use, disclosure, and protection of Customer Data. DigitalOcean has implemented an array of technical measures to help secure its services. A third party regularly certifies, validates, and audits DigitalOcean’s information technology and controls. For further details on DigitalOcean’s privacy and security program, please see the Trust Platform, available at [https://www.digitalocean.com/trust/](https://www.digitalocean.com/trust/).

PIPEDA FAQ

Privacy Policy

If you are a trademark owner who believes that material being hosted by a DigitalOcean customer violates your trademark rights, you can send a notification of alleged infringement. To do so, please send a notice to the Designated Agent listed below that includes all of the following information:

1.  A physical or electronic signature of a person authorized to act on behalf of the owner of the trademark that has been allegedly infringed.
2.  Identification of the trademark that is being infringed. If this is a registered trademark, you should include the registration information; if it is not a registered trademark, please provide a description or a copy of the trademark at issue.
3.  Identification of the material you believe is infringing your trademark. This should include the URL where such material may be found (if one exists), and any other information (including IP address) that will enable us to locate that material.
4.  Your contact information, including address, telephone number, and e-mail address.
5.  A statement that you have a good faith belief that the material is not authorized by the trademark owner, its agent, or the law.
6.  A statement made under penalty of perjury that the information provided is accurate and that the notifying party is authorized to make the complaint on behalf of the trademark owner.

DigitalOcean will review your notice for accuracy, validity, and completeness. If we find that it satisfies these requirements, we will forward the notice to the customer or user associated with the allegedly infringing material.

Please contact the Designated Agent at [dmca@digitalocean.com](mailto:dmca@digitalocean.com) or at:

DigitalOcean, LLC 
Attn: Legal
101 Avenue of the Americas, 10th Floor 
New York, NY 10013

Trademark Notification Policy

Overview
--------

The [General Data Protection Regulation](http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG&toc=OJ:L:2016:119:TOC) (GDPR) is the most significant legislative change in European data protection laws since the EU Data Protection Directive ([Directive 95/46/EC](https://en.wikipedia.org/wiki/Data_Protection_Directive)), introduced in 1995. The GDPR became enforceable on May 25, 2018, strengthens the security and protection of personal data in the EU and serves as a single piece of legislation for all of the EU. It replaced the EU Data Protection Directive and all the local laws relating to it.

DigitalOcean supports the GDPR and all DigitalOcean services comply with its provisions. Not only is the GDPR an important step in protecting the fundamental right of privacy for European citizens, it has raised the bar for data protection, security and compliance in the industry.

*   [FAQ](https://www.digitalocean.com/legal/gdpr-faq/)
*   [Data Processing Agreement](https://www.digitalocean.com/legal/data-processing-agreement/)
*   [Data Portability](https://www.digitalocean.com/legal/data-portability/)

GDPR

These guidelines are intended for those seeking information about a DigitalOcean account, or looking to take action against a resource hosted on our network.

Requesting DigitalOcean User Information
----------------------------------------

Safeguarding our users' data is vital to the trust our users place in our service to keep their data secure. For the most part, DigitalOcean's ability to disclose user information is governed by the Electronic Communications Privacy Act, 18 U.S.C. §2701, et seq. ("ECPA"). ECPA mandates that DigitalOcean disclose certain user information to law enforcement only in response to specific types of legal process, including subpoenas, court orders, and search warrants.

To request information for a site hosted on DigitalOcean, the site's IP address and a date range must be specifically included in the request. We can't process overly broad or vague requests. If your inquiry alerts us to a violation of our policies or Terms of Service, we will handle it via our usual abuse procedures which may include contacting the user regarding their misconduct or suspending the site entirely.

What Information Is Available?
------------------------------

Our [Privacy Policy](https://www.digitalocean.com/legal/privacy-policy/) describes the information that we collect in more detail. In general, we have:

*   The email address currently assigned to the account.
*   The IP address from which a site was created.
*   The date and time at which a site was created.
*   First name, last name, and phone number (if a user elects to provide this information).
*   The PayPal or Stripe transaction information for purchases (this does not include credit card or bank account information, but may include country code or postal code).
*   Physical address (if a user elects to provide this information).
*   The contents of the Droplet itself (if the Droplet has not been deleted by the user).

We cannot guarantee that we will have any given set of information for any particular user.

The length of time data is retained varies based on the type of information and actions of the user. Generally, Droplet contents are purged immediately upon deletion by the customer. Additionally, customers can control the format of their content (e.g. plain text, masked, or encrypted) and can delete or destroy server content whenever they choose. DigitalOcean accounts can contain various information, which is unverified and is provided at the user's discretion.

Before revealing information to anyone who is not the account owner, we require a valid subpoena, warrant, or court order that specifically requests it, unless we have a good faith belief that there is an emergency involving death or serious physical injury. See below for more details.

What Information Is Unavailable?
--------------------------------

Here are some examples of data which we are unable to provide:

*   Connection Logs.
*   Credit Card information.
*   Local and long distance telephone connection records.
*   Records of session times and durations.
*   MAC addresses.
*   Telephone or instrument numbers.

Requests from Government Agencies/Law Enforcement
-------------------------------------------------

*   Except in emergencies (see more below), DigitalOcean turns over protected user information only upon receipt of a valid subpoena, ECPA US court order, or search warrant. Additionally, we will notify affected users about any requests for their account information, unless prohibited from doing so by law or court order (see more below).
*   Upon receipt of a valid **subpoena**, if these pieces of information are available, we can provide user registration information such as the first and last names, phone number, email address, the date/time stamped IP address from which a site was created, the physical address, and the PayPal / Stripe transaction information.
*   Upon receipt of a valid **ECPA court order**, if these pieces of information are available, we can provide access logs which might reveal a user's movements over a period of time, account or private repository settings (for example, which users use certain services, etc.), security access logs other than account creation or for a specific time and date.
*   Upon receipt of a valid **search warrant**, if these pieces of information are available, we can disclose content of customer virtual machines, the content of user communications with customer support, or other forms of content data.
*   For legal requests from government agencies/law enforcement outside of the United States, we require that the request be served via (1) a United States court, (2) an enforcement agency under the procedures of an applicable mutual legal assistance treaty (MLAT), or (3) an order from a foreign government that is subject to an executive agreement that the Attorney General of the United States has determined and certified to Congress satisfies the requirements of 18 U.S.C. 2523.

Emergency Requests
------------------

As US law permits, we may disclose user information to law enforcement without a subpoena or warrant when we believe that doing so without delay is necessary to prevent death or serious physical harm to an identifiable victim. We require emergency requests to be made in writing via email and include all the information available so that we may evaluate the urgency of the request. Please see the example imminent harm request below for emergency process details.

Notification to DigitalOcean Users
----------------------------------

We notify users and provide them with a copy of any legal process regarding their account unless we are prohibited by law or court order from doing so (e.g., an order under 18 U.S.C. § 2705(b)). In those cases, we will notify users and provide them with a copy of the legal process when the non-disclosure order expires.

If a request for information is valid, we will preserve the necessary information, and then make a reasonable effort to notify any affected account owner(s) by sending a message to their verified email address. In most cases, upon notification to the user, that user will be provided with 7 calendar days to file an objection with the court or otherwise legally challenge the request. If, prior to the deadline, we receive notice from the user that he or she has filed an objection to challenge a request, no information will be delivered until that process concludes.

Preservation Requests for DigitalOcean Sites
--------------------------------------------

DigitalOcean honors requests from law enforcement to preserve information in accordance with 18 U.S.C. § 2703(f). Upon receiving a valid preservation request, DigitalOcean will preserve available account information associated with the username listed in the request in an offline file for up to 90 days and will extend the preservation for one additional 90-day period on a renewed request.

Preservation of data is restricted to what is specifically and explicitly requested. You must specify the type of data that is subject to the preservation request, including whether the request relates to subscriber/account information or server content data.

Serving Process on DigitalOcean and Making Inquires
---------------------------------------------------

Any request for user information must include a valid email address for us to return the information or contact with questions. DigitalOcean communicates only via email with a confirmed receipt.

Where permitted, DigitalOcean prefers to receive service via email to [legal@digitalocean.com](mailto:legal@digitalocean.com). Legal process can also be served by mail to:

DigitalOcean, LLC
Attn: Legal Department
101 Avenue of the Americas, 10th Floor
New York, NY 10013

Please make your requests as specific and narrow as possible, including the following information:

*   Full information about authority issuing the request for information
*   The name and badge/ID of the responsible agent
*   An official email address and contact phone number
*   The IP address, date range, domain name(s) of interest
*   The description of the types of records you need

Please allow at least two weeks for us to be able to look into your request. DigitalOcean reserves the right to make changes to any of the foregoing practices in its sole discretion.

Example form for an imminent harm request
-----------------------------------------

_(Must be on the investigating agency or department letterhead and sent from an official governmental email address. Use the email subject "Emergency Disclosure Request". Please note that DigitalOcean's policy is to notify a customer when we receive emergency law enforcement requests 90 days after the request is received.)_

I request release of records for the DigitalOcean account associated with \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ \[IP address, time range\] on an emergency basis pursuant to 18 U.S.C. § 2702(b)(8) and § 2702(c)(4).

I have provided below answers to the following questions in enough detail as I am able in order to provide a good-faith basis for releasing records on an emergency basis:

*   What is the nature of the emergency involving a danger of death or serious physical injury?
*   Whose death or serious physical injury is threatened?
*   What specific information in DigitalOcean's possession related to the emergency are you requesting?

\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Signature of Sworn Officer
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Printed Name of Sworn Officer
\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_
Agency Date

Example form for a Preservation Request
---------------------------------------

_(Must be on law enforcement department letterhead and sent from an official governmental email address)_

Dear DigitalOcean Legal Team:

The below listed account is the subject of an ongoing criminal investigation at this agency, and it is requested pursuant to 18 U.S.C. § 2703(f) that the subscriber information associated with said account be preserved pending the issuance of a search warrant or other legal process seeking disclosure of such information:

*   \[Specify IP address and date of account to be preserved\]

I understand that DigitalOcean reserves the right to delete any account that violates its Terms of Use.

If you have any questions concerning this request please contact me at \[insert e-mail address and phone contact\].

Thank you for your assistance in this matter.

Law Enforcement Guidelines

Marketplace Terms and Conditions