Where are your servers located and in which country do the operators of this service reside in? Because the .com domain is under the US jurisdiction...
the worst US courts can do is shut the domain down
In case of a serious breach of law can't they prosecute the owners of the domain and ask to hand their clients' data if the owners of Cognitive Cryptography live in US?
EDIT: OK, I see, they would have to contact the Malaysian govt. first.
We only store safe things, that would not even be a problem.