In many jurisdictions, government agencies can issue secret subpoenas, such as National Security Letters (NSLs) in the United States, compelling a company to hand over user data while legally gagging them from disclosing the request.
If a privacy-focused company receives a gag order, how can they warn their users that the platform is compromised?
Enter the Warrant Canary
Named after the canaries miners used to detect toxic gases, a warrant canary is a regularly published statement confirming that a company has *not* received any secret government requests.
The mechanism relies on compelled speech doctrine. While the government can legally forbid a company from speaking (a gag order), it is generally unconstitutional to force a company to lie. Therefore, if a company receives a secret subpoena, they simply stop publishing the canary statement. The silence is the warning.
How Wispr Uses Canaries
Wispr publishes a monthly warrant canary explicitly stating that we have not received NSLs, FISA orders, or been forced to implement backdoors. If that statement is not updated on schedule, users should assume the worst.
While our zero-knowledge architecture protects the content of your messages regardless of server compromise, a canary warns against potential forced modifications to the client-side code that could compromise future encryption. This is one piece of a broader legal picture — see privacy laws in 2025 for how regulatory frameworks interact with encrypted services.
