A recipient escalated a complaint, and your email provider wants to know how you got their address
You send email for your own product, or for your customers. One recipient pushed a complaint up the chain. Here is one way that week can go, and another.
An illustration, not legal advice. The messages are ours, not any provider’s, and nobody in them is real. What a provider can ask for and do is drawn from published policies and industry guidance, listed at the end.
Thursday morning
Your email provider
A recipient has escalated an abuse complaint about mail from your account. Please tell us when and how this address was collected and the basis for their consent. To keep your account active, we'll need this within 24 hours.
Your team, meanwhile“The address is in the list, but the list is a merge of three exports.”“Double opt-in was turned on in 2023. Was this before or after?”“Marketing changed the sign-up popup twice this year. Which one did they see?”
Thursday evening
You
We're confirming the sign-up date and source for this address now and will send it shortly.
Your provider isn't being difficult. It has to protect every customer it serves from the senders who'll mail anyone, and it can't tell which kind you are until you show it.
Friday morning
Your email provider
We haven't received the details, so sending is paused while we review. Reply to this ticket with what you have and we'll take another look.
Have you been here?
Same Thursday. Every subscribe and unsubscribe was recorded as it happened, with the exact wording of the form the person used. You search the address and export its history: when they subscribed, which form, what it said, the confirmation, and no unsubscribe since. You answer the ticket within the hour.
Thursday, 8:50
Your email provider
A recipient has escalated an abuse complaint. Please tell us when and how this address was collected and the basis for their consent.
Thursday, 9:35
You
They subscribed through the newsletter form on our pricing page and confirmed by email the same day. Here's the record, with the form's exact wording on that date.
📎 subscriber-consent-record.pdf
What this can and can't do. It records what your system reports, from the day you start, and it can't rebuild what was never recorded. It doesn't record the IP address a signup came from, it doesn't see the form itself, and it can't promise the provider will accept the answer.
Asked about people who signed up before you used Redoubt Vault? Send that history in as imported, with the name of the person who vouches for it. Your packet shows it for what it is: your records, given to us now, not something we saw happen. From then on, every new signup is recorded as it happens.
Keep a record of every subscribe from now on