About anonymity and confidentiality

How this channel protects you, what you can do, and what this tool cannot do.

What this system does

• You are not required to give your name, email, or phone.
• Your IP address is never attached to your report. A one-way hash is kept for 10 minutes to limit spam, then discarded.
• File metadata (location, camera, author) is stripped before storage.
• Report content and any contact details you provide are encrypted at rest.
• No tracking cookies are set on this portal.

What you can do

• Use a personal device. Not one your employer provided.
• Open this page in a private window, or the Tor Browser.
• Before uploading files, remove anything that could identify you or a third party.
• Save your access code. It cannot be recovered if lost.

What this tool cannot do

• Protect you from someone you tell directly about the report.
• Protect against a compromised device (keyloggers, screen recording, malware).
• Hide your activity from your employer's network monitoring or internet service provider.

Security posture

• Report fields are encrypted at rest (AES-256-GCM via Active Record Encryption).
• Attachments are scanned for viruses before storage.
• Case handlers sign in with two-factor authentication.
• Data is hosted on EU-based infrastructure.
• Reports are deleted after the retention period set by the organization.