Tor-friendly · Zero identity stored · End-to-end encrypted

Candor Tips — Whistleblower & Journalist Platform

The truth needs a safe channel.

Candor Tips is the secure bridge between whistleblowers and journalists. Anonymous submissions, AI-powered document classification, and a private inbox — built on the same safety infrastructure trusted by law enforcement.

NCMEC Approved ESP

End-to-End Encrypted

Tor Network Compatible

Zero Identity Stored

The Flow

From source to story,
without a trace.

Every submission goes through a six-step pipeline designed by safety engineers, not just developers.

🕵️

Anonymous Submission

Whistleblower submits a document with no account, no login, no identity. Tor-friendly. No IP logged.

🤖

AI Classification

Claude AI scans every document for classification markings — TOP SECRET, SECRET, CONFIDENTIAL, FOUO, CUI, PROPRIETARY.

📥

Smart Routing

Clean docs go to your private inbox instantly. Classified docs are quarantined and flagged for your review with a 24hr window.

🔔

Instant Alert

You're notified the moment a submission arrives. A second warning fires at 20 hours if classified docs remain unreviewed.

⏱️

Auto-Destruction

Classified documents auto-destroy at 24 hours if not retrieved. Metadata purged. No trace remains on our servers.

📰

You Decide

From your private portal you decide what to investigate, what to publish, and what to pass to counsel. Total editorial control.

Platform Features

Built for journalists
who can't afford mistakes.

Every feature exists because a real newsroom needed it. No bloat, no gimmicks.

🔐

True Anonymity

No account required to submit. No IP address stored. No cookies. Works over Tor. Your sources are protected at the infrastructure level, not just in policy.

Privacy-first

🧠

AI Document Scanner

Every document is scanned for government and corporate classification markings before it reaches your inbox. You know what you're looking at before you open it.

⚡

24-Hour Quarantine

Classified documents are isolated and auto-destroyed after 24 hours. You get two alerts: one immediately, one at 20 hours. Designed to protect both you and your source.

Auto-destruction

📂

Private Journalist Inbox

Your secure inbox holds every clean submission. Stripe-gated access means only verified subscribers can read tips. Not stored in email — never indexed.

Stripe-gated

👥

Team Access

Newsroom and Enterprise plans support multiple journalists sharing one secure inbox with individual access controls. One submission reaches the right editor, not everyone.

Multi-user

📊

Compliance Built In

Every submission is logged with metadata. Monthly compliance reports available for legal proceedings or press freedom documentation. Built on NCMEC-approved infrastructure.

NCMEC Approved

Who It's For

If your work depends
on trusted sources.

✍️

Solo Investigative Journalists

Independent reporters covering government, corporate wrongdoing, or sensitive beats. Get a secure channel sources can actually trust — without enterprise pricing.

🏢

Digital Newsrooms

Small to mid-size outlets that need secure tip infrastructure but can't afford custom development. Up and running in minutes, not months.

⚖️

Investigative Teams

Multi-reporter teams working sensitive stories. Shared inbox, individual access, and audit trail for legal proceedings or source protection documentation.

🌐

Press Freedom Organizations

NGOs and advocacy groups supporting journalists in high-risk regions. Tor compatibility and zero-identity architecture protects sources in dangerous environments.

Security Architecture

The infrastructure behind
the promise.

We don't just say "secure." Here's exactly what we've built and what we've committed to.

✓

Zero-knowledge submission

No account, no IP, no identity required to submit a tip. The system is architecturally incapable of linking a submission to a person.

✓

Cloudflare R2 isolated storage

Submissions are stored in isolated R2 buckets with no public access. Inbox and quarantine are completely separate storage environments.

✓

Tor network compatible

Sources in high-risk environments can submit over the Tor network. No exit node correlation. No JavaScript fingerprinting on the submission endpoint.

✓

24-hour classified document TTL

Classified documents are destroyed by an automated worker at exactly 24 hours. Not archived, not backed up — permanently purged with metadata.

✓

NCMEC Approved ESP

Candor is a registered Electronic Service Provider with NCMEC. Our safety infrastructure meets federal child safety standards under 18 U.S.C. § 2258A.

✓

Stripe-gated journalist access

Your private inbox is accessible only to verified subscribers. No shared links, no public endpoints, no way to accidentally expose your sources' submissions.

NCMEC Approved

PhotoDNA Integrated

COPPA Compliant

GDPR Ready

18 U.S.C. § 2258A

Fly.io Infrastructure

Pricing

Start free for 30 days.
Cancel anytime.

Every plan includes a 30-day free trial. No commitment until you're sure it's right for your newsroom.

Solo Reporter

For independent journalists who need a secure, professional tip channel without enterprise overhead.

$29 / month

1 journalist account
Unlimited anonymous submissions
5GB private inbox storage
AI document classification
24hr classified document TTL
Instant email alerts
Tor-compatible submission link

The truth needs a safe channel.

From source to story,without a trace.

Built for journalistswho can't afford mistakes.

If your work dependson trusted sources.

The infrastructure behindthe promise.

Start free for 30 days.Cancel anytime.

Your sources are waitingfor a safe channel.

From source to story,
without a trace.

Built for journalists
who can't afford mistakes.

If your work depends
on trusted sources.

The infrastructure behind
the promise.

Start free for 30 days.
Cancel anytime.

Your sources are waiting
for a safe channel.