Create anonymous tip lines. Sources submit documents, photos, and statements through ephemeral links. No metadata trail. No persistent storage. View once, then gone.
The way most organizations handle this today is a liability.
Sources who email tips leave sender addresses, IP addresses, timestamps, and routing headers. Metadata that identifies them even if the content is vague.
Signal, WhatsApp, and SMS all leave traces on devices. Messages can be recovered forensically. Read receipts and typing indicators reveal interaction patterns.
Documents uploaded to shared drives remain indefinitely. Cloud storage providers can be subpoenaed. Deletion does not mean destruction.
A single secure channel from request to destruction.
Generates a Secretary Link, publishes it as a tip line
Clicks the link, submits documents, photos, or a written statement
Views the submission once using the receipt
Submission permanently destroyed. No server-side copies remain.
Concrete examples of Secretary Links in action.
A newsroom publishes a Secretary Link on their website. Whistleblowers submit documents without creating an account or revealing their identity.
A journalist sends a link to a known source. The source uploads leaked documents that the journalist views once before the link self-destructs.
A source at a protest submits photos and a written account of events. No camera roll syncing, no cloud backup, no metadata breadcrumbs.
Every submission is encrypted with its own unique key. Keys are separated from stored data. Add a passphrase for an additional layer only you and the source know.
Submissions are permanently destroyed after viewing. Not soft-deleted. Not archived. Purged from all storage.
Run the tip line on your newsroom domain. Sources see a familiar URL, not a third-party service.
Sources never create an account. No username, no email, no identity to subpoena.
Get early access to Secretary Links. Opening May 1, 2026.