Contact us in confidence
If you have information you believe should be public — documents, evidence, first-hand testimony — this page tells you how to contact me and what I can and cannot promise.
🗨️
Before you contact us
If you are sharing information that could put you at professional, legal or personal risk, think about how you are contacting us.
- Use a personal device, not a work device.
- Use a personal network, not a work network.
- Use an email address that is not tied to your work.
- Do not discuss the subject of your disclosure on any work-monitored channel before contacting us.
These precautions are your first line of protection. I cannot see what happens on your end before a message reaches me.
If you are sharing information that could put you at professional, legal or personal risk, think about how you are contacting us.
- Use a personal device, not a work device.
- Use a personal network, not a work network.
- Use an email address that is not tied to your work.
- Do not discuss the subject of your disclosure on any work-monitored channel before contacting us.
These precautions are your first line of protection. I cannot see what happens on your end before a message reaches me.
How to contact us
- Email: confidential@ennuination.com — delivered to an encrypted Proton Mail inbox.
- Post: physical mail can be arranged. Email confidential@ennuination.com first and I will confirm a postal address.
What happens to your email
The inbox is hosted on Proton Mail, a Swiss encrypted mail provider. In practice this means:
- In transit: encrypted over TLS on the way in.
- At rest on Proton's servers: zero-access encrypted. Proton itself cannot read the contents. Only Ennui Nation® can decrypt and read them.
- End-to-end encrypted where the sender is also on Proton Mail, or where the sender uses PGP to encrypt the message before sending. I can provide a PGP public key on request.
What I commit to
- I treat your identity as confidential by default. I do not reveal a source's identity to anyone outside the editorial process without the source's express agreement.
- I hold identifying information only where necessary and for no longer than necessary. Once a story is published, identifying material I no longer need is deleted on a schedule.
- I store sensitive material securely on encrypted systems with limited access.
- I do not hand over source material voluntarily to any third party, including commercial partners, investors or platforms.
- I will resist legal compulsion to disclose identifying information about a source, through every reasonable step available to me.
What I cannot promise
- Absolute anonymity. Some disclosures can be de-anonymised by context — by the specific detail of what you tell me, by the systems that generated a document, or by metadata on files. I will tell you, honestly, what I can and cannot protect.
- That I will publish. I verify material against other sources, I assess public interest, and sometimes I conclude a story cannot be told responsibly on the evidence available. I will explain the reasoning to you where I can.
- Shielding from employer, contractual or legal consequences. If you are considering disclosure in a situation with whistleblower protection (for example, under the UK Public Interest Disclosure Act 1998), I will suggest you take independent legal advice; I cannot give legal advice myself.
What evidence is most useful
- Primary documents — contracts, internal emails, memos, minutes, policy papers, financial records, technical logs — with enough metadata that their authenticity can be verified.
- First-hand testimony with specific dates, places, names and details.
- Pointers to verifiable public records I may not yet have found.
- Other sources who would corroborate the account.
I do not pay for information.