Permanent, tamper-evident chain of custody for environmental harm evidence: illegal logging, pollution, climate crimes. Every file is encrypted on the device itself, with strong AES-256 encryption, before anything is uploaded, so the original never leaves the reporter's hands and the server only ever sees the encrypted version. Each file is then given a unique fingerprint that becomes the spine of its chain of custody: it pins the encrypted file to permanent, undeletable storage and is timestamped on a public blockchain, so any single piece of evidence can be proven authentic later without anyone having to trust the people running the system.

The keys needed to decrypt are split across five independent trustees, any three of whom must agree, so no single party, including the people who operate the system, can open the evidence alone. The whole platform is built for whistleblower safety: no IP address is ever logged, identifying details are stripped from every request, hidden data is scrubbed from photos before they are encrypted, and figures are only ever shown in aggregate, never in a way that could single out one reporter.