Evidence handling policy

When you upload

• We accept images (JPG, PNG, WEBP, HEIC), PDF, audio (MP3, M4A, WAV, OGG) and video (MP4, MOV, WEBM), up to 25 MB each and 8 per report.
• We check what each file actually contains, not just its name. Executable files and mismatched files are refused.
• Every file is scanned for malware. Infected files are rejected and not stored.
• JPG, PNG and WEBP images are re-encoded, which removes hidden metadata such as GPS location, camera details and timestamps. Audio, video, PDF and HEIC files are not altered — remove identifying details before uploading.
• PDFs that contain scripts, embedded files or automatic actions are quarantined and only opened in a safe way by reviewers.

Storage

• Files are encrypted (AES-256-GCM) and stored under random names, outside the public website.
• There is no public link to any evidence file. We never publish evidence.
• We record a fingerprint (SHA-256) of the file as received, so its integrity can be shown later.

Access

• Only reviewers with the evidence permission — and, for investigators, only on reports assigned to them — can open files.
• Each download uses a link that expires within minutes and is re-authorised when used.
• Every view and download is recorded in a tamper-evident audit log.

Retention

Evidence is deleted together with its report under the retention schedule in our privacy policy, unless we are legally required to preserve it.