Safe Reporting Guide Plain steps to reduce risk.
How to report wrongdoing without exposing yourself unnecessarily. Follow these steps before you submit.
Key Rule
Do not use work devices or work internet.
Use a personal device and a non-work network.
Use the Safest Device and Network
No Work Computers
Do not use a work computer or work phone.
No Work Email
Do not use work email for any communication.
No Employer Network
Do not use employer Wi-Fi or employer VPN.
Personal Device Only
Use a personal device on a non-work network.
Use Tor If You Can
Tor helps hide where your traffic comes from.
If you have a Tor submission option, use it.
Maximum anonymity = Tor Browser + Non-work network + Personal device
Keep Your Message From Identifying You
Avoid Naming Yourself
Unless you choose to identify yourself.
Avoid Unique Job Titles
If only one person has that job, it identifies you.
Avoid Exact Shift Times
If they could identify you, be less specific.
Stick to Facts
What happened, when, where, who was involved.
Avoid Personal Writing Style
Do not include personal phrases, nicknames, habits, or writing quirks that coworkers would recognize.
Remove File Metadata
Hidden Data Can Identify You
Photos and documents can contain hidden data: location, device model, author name, timestamps.
Remove metadata before submitting files. Use metadata removal tools or screenshot documents instead of sending originals.
Do Not Steal Documents
Only submit documents you had legal access to.
Do not submit classified, sealed, or protected records. Do not break into systems or steal files.
Keep Your Own Timeline
Write Down Dates and Times
Document when events occurred as they happen.
Write Down Who Was Present
Note witnesses and participants.
Save Lawful Copies
Keep evidence outside work systems.
Keep It Updated
Add new events as they occur.
If Retaliation Starts, Do Not Wait
Some procedures have short deadlines.
Document retaliation immediately. Save emails, memos, and witness statements. Talk to your own lawyer if needed. Do not assume it will resolve itself.
What NOT to Do
Do Not Lie or Exaggerate
Stick to facts you can support. False claims destroy credibility.
Do Not Alter Evidence
Tampering with evidence is a crime and invalidates your case.
Do Not Post Publicly Without Understanding Risk
Public posts can expose you and may have legal consequences.
Do Not Assume HR Is Neutral
HR protects the organization, not you. Proceed carefully.
Do Not Email Tips From Work Systems
Work email is monitored. Use personal devices and accounts only.
Do Not Trust Verbal Promises
If it is not in writing, it did not happen. Get everything documented.
Ready to Report Safely?
Follow these steps, then submit your information through our secure portal. Your identity protected. Your courage honored.
Submit Information Securely