I’m too lazy to search for it, but they made some very open blog posts about exactly which data authorities can force them to cough up.
Some people criticized this, because they somehow think that VPNs should break the law (and get shut down) before cooperating with authorities. However, all...