How this platform works

Every project on this site runs the same open-source evidence kit. This page explains what it does with your data — honestly, including the parts it doesn't do well yet.

What happens to a submission

Sealed in your browser. Before anything leaves your machine, your answers are encrypted to a public key using libsodium's sealed-box encryption. The server never sees plaintext.
Stored as ciphertext. Cloudflare KV/R2 holds only sealed blobs. A database dump, a subpoena to the hosting provider, or a rogue admin exposes ciphertext.
Hashed and anchored. Records are merkle-hashed and timestamped so anyone can later prove what existed and when — without trusting the operators.
You keep a receipt. An unguessable id shown once at submit time. It is your only credential to check, change consent, or delete your submission.

Who can read your submission

State	Who can read it
Today — interim epoch	The incident operator only, using a locally-held key. There is no server-side decryption.
After representative election	k-of-n elected representatives, in a logged key ceremony. The operator's unilateral key is shredded; no single person can open submissions alone.
Sealed-private consent	No one. Not the operator, not the representatives, not by unanimous vote. You can release it later if you choose.
Revoked	Deleted from all hosted storage — record, files, escrow, public listing — replaced by a content-free tombstone. Already-decrypted organizer copies are excluded from exports.

Current state: interim epoch — the election has not happened yet. This page will update when representatives are seated.

Why not just use…

Honest answers, including where the alternatives genuinely win:

Tool	The gap	Where they win
Google Forms	No encryption, no custody — Google sees everything, and so does a subpoena to them.	Zero setup, everyone knows it.
SecureDrop / GlobaLeaks	Anonymous tips, not claims — no amounts, ledger, consent lifecycle, or wallet binding.	Tor-grade anonymity we don't match.
Stretto / Kroll / Epiq	Court-appointed claims administrators — they only exist after litigation or insolvency begins.	Court-recognized scale; we hand them the register when they arrive.
Chainalysis / TRM / Arkham	Enterprise forensics for investigators — priced for governments, not claimants.	Attribution depth nobody else has.
Page Vault / MirrorWeb	Snapshots of pages — they can't see a backend silently editing its own terms, and they don't intake claims.	Human affidavits courts recognize.
Harvey / CoCounsel	Legal AI for law firms — cloud-only, enterprise-priced, attorney-side. Your data would leave the community.	Westlaw/Lexis-grounded research depth.
Filevine / SimplyConvert	Firm-side plaintiff pipelines — the firm owns claimant data, not the community.	Polished intake UX at law-firm scale.
changedetection.io / Visualping	Change alerts — a notification isn't evidence. No custody chain, no claims context.	Cheap, mature alerting at scale.

The one-line position: forms lose custody, tip tools don't do claims, claims administrators show up after it's decided, forensics serves investigators, legal AI serves firms — and none of them let a third party verify everything without trusting the operator.

What this does not do

It is not anonymous. Clearnet TLS ends at the CDN. Sealing protects content, not your IP. If you need Tor-grade anonymity, use SecureDrop.
It is not a court affidavit. Hashes and timestamps are verifiable by anyone, but counsel may still need sworn attestations.
The receipt is the credential. Lose it and there is no account recovery — that is the price of not holding your identity.
Operators run infrastructure. Until an election seats representatives, the interim key is held by the incident operator. The design exists so that this ends — but "will end" is not "has ended."

Verify, don't trust

The claims above are checkable, not just asserted: verify a proof of any submission receipt in your browser — the merkle path and timestamps resolve offline. The full comparison against every adjacent tool lives in the open-source repo (docs/COMPETITORS.md).