How is data, belonging to different clients, separated (logically, physically, etc.)? In the event of a subpoena, are you able to produce data for a single customer only, without inadvertently accessing or disclosing other data?

They are physically separated as the data is stored on the client infrastructure. Data for a single customer could be produced, if that client were currently connected to the App Store and had shared that data with us.