SecureDrop
Summary
An open source whistleblower submission system that media organizations and NGOs can install to securely accept documents from anonymous sources.
Parent organisation: Freedom of the Press Foundation
Type of organisation: Non-profit org
Market share: Very niche
Pricing: Free
Skills needed to set-up: Needs tool/domain expert to configure
Skills needed to use: Needs tool/domain expert to configure
Requires audience sign-in to use: Yes, sign-in compulsory
Parent organisation: Freedom of the Press Foundation
Type of organisation: Non-profit org
Market share: Very niche
Pricing: Free
Skills needed to set-up: Needs tool/domain expert to configure
Skills needed to use: Needs tool/domain expert to configure
Requires audience sign-in to use: Yes, sign-in compulsory
Pros
Open Source alternatives available
Releases new features regularly
Transparent pricing model
Clear data policies
Cons
Lacks accessibility statement
Does not share diversity data
Full Product Data Collection
Data collected January-February 2020
| Product name | SecureDrop |
| Product URL | https://securedrop.org/ |
| Parent organisation | Freedom of the Press Foundation |
| Workflow category | Collaboration & editing |
| Date product founded | 2013 |
| Product description | An open source whistleblower submission system that media organizations and NGOs can install to securely accept documents from anonymous sources. |
| What type of company or organisation is the product owned by? | Non-profit org |
| Is the company profit-making? | Not-for-profit model |
| How is this product funded? | Philanthropic foundation |
| What market share does the tool have? | Very niche |
| Is there an Open Source alternative in this product space? | Yes, GlobaLeaks |
| When did the company last release new features? | Dec-2019. In v1.2 admins can disable Source Interface document uploads, restricting their SecureDrop installation to text-only exchanges between journalists and sources. |
| Have they shared details of the product roadmap? | No |
| Is there talk of the product raising further investment? | Yes. Through direct donations to the foundation. |
| Is there talk of the product being acquired? | No |
| Have there been any newsworthy business issues or challenges in the last 12 months? | No |
| Is there a pricing model listed on the website? | Product is clearly listed as free |
| How clear & transparent is this pricing model? | Product is clearly listed as free |
| What is the range of prices offered? | N/A |
| What factors drive higher pricing? | N/A |
| What skills are needed to get this tool set up & usable? | Needs tool/domain expert to configure |
| What skills are needed to USE this tool day-to-day? | Needs tool/domain expert to configure |
| Does this tool use proprietary file formats for saving documents & outputs? | Has proprietary file formats but offers open options |
| Is the product reliant on 3rd-party APIs or interoperability to function? | No |
| Have there been any newsworthy technical issues in the last 3 years? | No |
| How clear is the Terms of Service for users (i.e. publishing customers)? | No public TOS available pre-purchase |
| Does the product have a data collection & usage policy on its website? (Can be a GDPR statement)? | Yes, topline. |
| Is their data policy “GDPR everywhere”? | No GDPR policy information available |
| Does the product require your audience to sign-in to use it? | Yes, sign-in compulsory |
| IF SIGN IN REQUIRED: Does audience sign-in use 3rd party platforms? | No 3rd party auth, just a user account |
| Does the public product website mention how to export or transfer your data to another service? | No / cannot tell |
| Does the public product website mention how to delete your data? | No / cannot find |
| Have there been any newsworthy security breaches with this product in the last 3 years? | No |
| Does the company have an accessibility statement on its website? | No / cannot find |
| Does the company release information on the diversity of the workforce? | No |