Contact me in confidence
If you have information you believe should be public (documents, evidence, first-hand testimony), this page tells you how to contact me and what I can and cannot promise.
🗨️
Before you contact me
If you are sharing information that could put you at professional, legal or personal risk, think about how you are contacting me.
• Use a personal device, not a work device.
• Use a personal network, not a work network.
• Use an email address that is not tied to your work.
• Do not discuss the subject of your disclosure on any work-monitored channel before contacting me.
These precautions are your first line of protection. I cannot see what happens on your end before a message reaches me.
If you are sharing information that could put you at professional, legal or personal risk, think about how you are contacting me.
• Use a personal device, not a work device.
• Use a personal network, not a work network.
• Use an email address that is not tied to your work.
• Do not discuss the subject of your disclosure on any work-monitored channel before contacting me.
These precautions are your first line of protection. I cannot see what happens on your end before a message reaches me.
How to contact me
- Email: confidential [at] ennuination.com: delivered to an encrypted Proton Mail inbox.
- Post: physical mail can be arranged. Email confidential [at] ennuination.com first and I will confirm a postal address.
What happens to your email
The inbox is hosted on Proton Mail, a Swiss encrypted mail provider. In practice this means:
- In transit: encrypted over TLS on the way in.
- At rest on Proton’s servers: zero-access encrypted. Proton itself cannot read the contents. Only Ennui Nation® can decrypt and read them.
- End-to-end encrypted where the sender is also on Proton Mail, or where the sender uses PGP to encrypt the message before sending. I can provide a PGP public key on request.
What I commit to
- I treat your identity as confidential by default. I do not reveal a source’s identity to anyone outside the editorial process without the source’s express agreement.
- I hold identifying information only where necessary and for no longer than necessary. Once a story is published, identifying material I no longer need is deleted on a schedule.
- I store sensitive material securely on encrypted systems with limited access.
- I do not hand over source material voluntarily to any third party, including commercial partners, investors or platforms.
- I will resist legal compulsion to disclose identifying information about a source, through every reasonable step available to me.
What I cannot promise
- Absolute anonymity. Some disclosures can be de-anonymised by context: by the specific detail of what you tell me, by the systems that generated a document or by metadata on files. I will tell you, honestly, what I can and cannot protect.
- That I will publish. I verify material against other sources, I assess public interest, and sometimes I conclude a story cannot be told responsibly on the evidence available. I will explain the reasoning to you where I can.
- Shielding from employer, contractual or legal consequences. If you are considering disclosure in a situation with whistleblower protection (for example, under the UK Public Interest Disclosure Act 1998), I will suggest you take independent legal advice; I cannot give legal advice myself.
What evidence is most useful
- Primary documents: contracts, internal emails, memos, minutes, policy papers, financial records, technical logs, with enough metadata that their authenticity can be verified.
- First-hand testimony with specific dates, places, names and details.
- Pointers to verifiable public records I may not yet have found.
- Other sources who would corroborate the account.
I do not pay for information.
Contact
confidential [at] ennuination.com