Confidential Document Submission
An end-to-end encrypted confidential document submission form for journalists. Journalist privilege and source protection under Swiss Art. 17 BV. Documents are encrypted in the browser before upload.
About this template
This template provides journalists and newsrooms with a secure channel for receiving confidential document submissions from sources. Documents may include contracts, internal communications, financial records, regulatory filings, or any other material that a source believes is in the public interest to share with journalists. All submitted files are encrypted end-to-end in the source's browser before upload — not even the platform can access the document contents.
What it collects
- Description of the documents and their significance
- How the source obtained the documents
- Context about the organisation or matter involved
- Whether the source believes any legal risk attaches to the documents
- Optional verification contact for the journalist to follow up
- The document files themselves (encrypted before upload)
Journalist privilege and source protection — Art. 17 BV
Confidential document submissions are protected by journalist privilege under Swiss Art. 17 of the Bundesverfassung and the Redaktionsgeheimnis. Documents submitted here are encrypted end-to-end: the newsroom holds the only decryption key. No platform employee, server operator or third party can access the contents. Sources should be aware that document metadata (author fields, tracked changes, printer steganography) may exist within the file itself and should be sanitised before submission when anonymity is critical.
How to use it
Use this template
Click 'Use template' to create a copy in your dashboard.
Restrict access to one journalist
Ensure only the designated journalist holds the decryption key. Do not share keys via email or unencrypted channels.
Publish the form link
Share the link in your publication's masthead, secure communications page, or via encrypted messaging to potential sources.
Advise sources on metadata hygiene
Add a note to your form description advising sources to review document metadata before submission if their anonymity is important.
Handling leaked documents responsibly
Receiving leaked documents creates significant editorial and legal responsibilities. Before publication, a journalist must assess: whether the documents are authentic, whether they were obtained lawfully by the source, what public interest justifies publication, whether any individuals named in the documents have been given the opportunity to respond, and whether any legal risk to the publication exists — for example, if documents are subject to a non-disclosure order.
Swiss law distinguishes between a journalist receiving documents from a source and a journalist actively soliciting the theft of documents. The former is protected by press freedom under Art. 17 BV and the Redaktionsgeheimnis; the latter may give rise to criminal liability under the Swiss Criminal Code. A passive submission channel — as opposed to active solicitation — keeps the newsroom within the protected zone.
Document metadata: the hidden risk
Every document created with standard office software contains metadata: the username of the creator, the computer name, revision history, the last save date and time, and in some cases printer-specific steganographic watermarks. These metadata fields can identify the specific person who created or printed a document even if the visible content is entirely anonymous. Sources who need to remain anonymous should use dedicated tools to strip metadata before submission — or submit photographs of printed documents rather than original digital files.
Legal framework for document receipt by journalists in Switzerland
The Swiss Federal Supreme Court has confirmed that press freedom under Art. 17 BV includes the right to receive information from confidential sources, including documents. Art. 172 StPO (Schweizerische Strafprozessordnung) provides journalists with a statutory right to refuse to testify about sources. This right extends to the documents themselves: a journalist cannot generally be compelled to surrender source documents obtained in confidence. However, these protections are not absolute — courts may in limited circumstances override them where the competing interest is of overriding public importance.
Frequently asked questions
What types of documents can be submitted?
Any document that a source believes is in the public interest. This commonly includes internal corporate communications, regulatory filings, financial records, contracts, whistleblower evidence, policy drafts, and correspondence. The journalist receiving the documents will assess the editorial and legal position before any use of the material.
What happens to documents if the journalist does not publish?
Documents submitted to the form are stored encrypted and accessible only to the designated journalist. Your retention and deletion policy should specify what happens to documents that are not used — including when and how they are securely deleted. This policy should be disclosed to sources at the point of submission.
Can the platform operator see my submitted documents?
No. All file uploads through Schweizerform are encrypted in the source's browser using the journalist's public key before leaving the device. The Schweizerform platform receives only ciphertext — it cannot decrypt or read the file contents. Only the journalist holding the corresponding private key can access the documents.