We're developing a service, that encrypt e-mail with AES algorithm.
Keys are stored in our server.
We thought about having an expiration service, that is deleting the key from our server. This means that the message would become virtually unrecoverable.
It is open worldwide, but I fear of USA :) Servers are in USA, but they can easily be moved.
Is this against some internet regulation or something?