About Subtonomy REX
Lawful disclosure, built for telecom operators
Subtonomy REX is a lawful disclosure and compliance platform for telecom operators, and a product of Subtonomy AB — a Swedish telecom software company founded in 2012 and headquartered in Stockholm.
​
When an authority asks an operator for data, the request rarely arrives at a convenient moment. It might be a criminal investigation with a deadline measured in hours, or a search and rescue operation where someone is missing and the next few minutes decide the outcome. What happens next says a great deal about an operator: whether the answer is complete, whether it arrives in time, and whether it holds up afterwards.
​
REX exists to make that answer dependable. It replaces manual, fragmented handling with a single automated workflow, so operators meet their legal obligations quickly, accurately, and with a complete record of every step taken.
Balancing lawful access and subscriber privacy
Lawful access sits between two duties that pull in opposite directions: the duty to assist authorities, and the duty to protect subscriber privacy. Subtonomy REX is built for both.
Access is strictly controlled, every search must be justified, and every query is logged. That means an operator can demonstrate not only that it complied, but that it did so proportionately — disclosing what was lawfully required and nothing beyond it. In a field where trust is the product, that distinction matters as much as speed.
How REX differs from the Subtonomy platform
Subtonomy serves telecom operators in two distinct areas, and keeps them deliberately separate. The Subtonomy platform helps customer-facing teams resolve technical issues faster, using real-time network data across self-service channels, support agents and AI agents. It is judged on customer experience and resolution speed.
​
Subtonomy REX serves compliance, legal and security teams. It is judged on completeness, accuracy and legal defensibility, and its requirements are set by legislation rather than by service targets.
​
The separation is intentional. Customer support software is designed to make information easy to reach; lawful disclosure software is designed to make it hard to reach without authority, and impossible to touch without leaving a trace.
The regulations that govern lawful disclosure in the EU
Operators using REX must comply with strict European and national legal frameworks. These include the EU e-Evidence Regulation (EU) 2023/1543 and Directive (EU) 2023/1544, which have applied since 18 August 2026 and set response deadlines as short as eight hours in urgent cases; the General Data Protection Regulation (EU) 2016/679; the ePrivacy Directive 2002/58/EC; the European Electronic Communications Code (EU) 2018/1972; and national lawful interception and data retention legislation, which varies by member state.
​
REX is built so that every disclosure is logged, traceable and defensible. Speed alone is not compliance — a fast response delivered outside the mandated channel, or without an audit trail, is still a compliance failure.
Subtonomy REX consolidates the operator's own network, subscriber and location data into one auditable environment, deployed on-premise under full operator control. For architecture, supported data sources, export formats and integration detail, see the REX platform.
Recognition and results
Subtonomy REX was shortlisted together with Telia Norway for the Social Contribution Award at the World Communication Awards 2024, recognizing the platform's role in search and rescue operations.
REX is in production at telecom operators inside and outside the EU, including NATO member countries, the Nordics and Central Europe.
At Telenor Norway, reports that previously took several hours are now generated in minutes or seconds.
Every operator we have started working with is still with us. Lawful disclosure isn't something you hand over and walk away from — the regulations change, the networks change, and we work alongside our customers through all of it.
Fredrik Edwall
EVP Sales & Marketing Subtonomy
ISO 27001:2022 certification
Subtonomy demonstrates its ongoing commitment to information security with ISO 27001:2022 certification, the strictest global security standard for information security (ISMS).
​
Our ISMS scope includes our product development, and support process as well as our organization, business operation and office.
Emission reduction targets through SBTi
Subtonomy is proud to announce its commitment to reducing emissions through the Science Based Targets initiative (SBTi), aligning with the Paris Agreement’s climate goals.
​
This commitment is consistent with what’s required to keep warming to 1.5°C – the most ambitious goal of the Paris Agreement.
Frequently Asked Questions about Subtonomy REX
Subtonomy REX is a lawful disclosure and compliance platform for telecom operators, produced by Subtonomy AB, a Swedish telecom software company founded in 2012 and headquartered in Stockholm. REX automates how operators respond to lawful data requests from authorities, covering data retention, data quick freeze, IP address tracing, lawful location intelligence, case management and search and rescue operations. REX is deployed on-premise, and every request is logged and auditable.
Subtonomy AB produces two separate product lines. The Subtonomy platform provides real-time network data analysis for customer support, helping operators resolve technical issues across self-service channels, support agents and AI agents. Subtonomy REX is the company's lawful disclosure and compliance platform, used by compliance, legal and security teams to respond to lawful data requests from authorities. Both are built on the same underlying data platform, but they serve different users, different obligations and different regulatory requirements.
Subtonomy REX is owned and developed by Subtonomy AB, a Swedish telecom software company founded in 2012 by four telecom professionals and headquartered at Katarinavägen 19, Stockholm. REX is one of two Subtonomy product lines, alongside the company's customer support and service assurance software. Subtonomy is certified to ISO/IEC 27001:2022.
Subtonomy REX is deployed on-premise, inside the operator's own environment. All retained and processed data remains under the operator's control and never leaves its infrastructure, which supports data sovereignty requirements and GDPR alignment. On-premise deployment also means access control, audit logging and retention periods are governed by the operator's own policies and by the national law that applies to it.
Subtonomy REX supports compliance with the EU e-Evidence Regulation (EU) 2023/1543 and Directive (EU) 2023/1544, which have applied since 18 August 2026 and set response deadlines of 10 days for standard requests and eight hours in urgent cases. REX also supports obligations under the General Data Protection Regulation (EU) 2016/679, the ePrivacy Directive 2002/58/EC, the European Electronic Communications Code (EU) 2018/1972, and national lawful interception and data retention legislation, which varies by member state. Responses are delivered in ETSI-aligned formats, including ETSI TS 102 657, with native e-CODEX integration.
Subtonomy REX is used by mobile network operators (MNOs), internet service providers (ISPs) and communications service providers (CSPs) subject to lawful data access obligations. REX is in production at telecom operators inside and outside the EU, including NATO member countries, the Nordics and Central Europe. The platform is data-source agnostic, so it works regardless of which billing, CRM or network equipment vendors an operator uses.
Yes. Subtonomy is certified to ISO/IEC 27001:2022, the international standard for information security management systems (ISMS). The certification scope covers product development and support processes as well as the organization, business operations and office. For a lawful disclosure platform this matters because operators must be able to demonstrate that the systems handling sensitive subscriber data are themselves governed by an audited security framework.
Subtonomy REX is licensed on a subscription basis, with pricing provided on request following a scoping discussion. The subscription includes an unlimited number of users, so compliance, legal and security teams can be given access without per-seat cost. The platform is evergreen: operators receive continuous updates, including changes required by new or amended legislation, rather than paying separately for version upgrades. In a field where regulation changes regularly, this keeps an operator's compliance capability current as part of the subscription.
