Why the classic 'insurance policy' story is dangerous

Popular descriptions say a whistleblower can deter retaliation by promising that evidence will be released if anything happens to them. That story assumes the switch is reliable, the material is verified, the recipient is safe, disclosure is lawful and the threat actor believes the claim. None of those assumptions is automatic.

Inactivity does not prove detention, harm or death. It can mean illness, travel, lost access, an email problem or a forgotten check-in. A false release can expose a source, prejudice an investigation, breach a court order or place other people at risk.

Use conditional delivery only as a supporting layer

A slower conditional delivery may be useful for preserving:

• a description of the evidence and where authoritative copies are held • the identity of a qualified lawyer or approved journalist • a chronology and verification checklist • instructions for authenticating files and checking provenance • boundaries about what must not be disclosed • a separate recovery path for the intended recipient

Do not use a consumer continuity service as a live drop box, a replacement for legal counsel, an urgent alarm or an automatic publisher.

Threat-model the recipient and every copy

Ask who can see metadata, who controls the email account, whether the recipient could be compelled or compromised, how the Private password or recovery phrase will reach them, and what happens if the service is unavailable.

Minimise the package. Encrypt files before upload, but remember that endpoint compromise, screenshots, downloaded copies and recipient actions sit outside file encryption. Do not include passwords or source identities merely because storage is encrypted.

Get specialist support before disclosure

Whistleblower protection differs by jurisdiction, employer, subject matter and disclosure route. Some regimes protect reports only when they go to specified bodies or follow particular procedures. Obtain advice from a qualified lawyer or recognised support organisation before preparing or transmitting sensitive material.

If there is an immediate personal-safety risk, use a human safety plan and emergency resources appropriate to the location. ZeroLatch's supported check-ins are not designed for urgent protection.