
A source trusted you with something. Where you store it matters.
Bigby gives journalists, researchers, and investigators encrypted, UK-based cloud storage built around the principle that confidential material should stay confidential. No data deals, no fine print.
Source protection is not a feature. It is a commitment.
People come to journalists and researchers because they believe their identity and their information will be protected. That belief is the foundation of the work. Without it, sources dry up, investigations stall, and important stories go untold.
The tools you use to store your work are part of that commitment, whether you think of them that way or not. Notes, documents, interview recordings, leaked materials: all of it sits somewhere. The question is whether that somewhere is a platform that can read it, scan it, or hand it over.

What standard cloud storage means for your work
The major cloud platforms were built for consumers and general business use. When you store sensitive journalistic or research material on them, you are operating under terms written for someone else entirely.
Platforms that can read your files
Standard cloud storage is not encrypted end-to-end. The provider holds your files in a form they can access, whether to scan for content moderation, serve advertising, train AI models, or comply with a legal demand. Notes identifying a source, documents received in confidence, and unpublished research are all readable by the platform unless the platform is specifically designed to prevent that.
Legal demands and disclosure
Journalists and researchers in the UK benefit from some legal protections around source confidentiality, but those protections operate at the level of what you personally hold and what you choose to disclose. A cloud provider served with a court order or other legal demand is in a different position entirely. If they can read your files, they can be compelled to hand them over. That is a meaningful distinction.
US jurisdiction and overseas exposure
The major cloud providers are US companies subject to US law. Legislation such as the CLOUD Act creates mechanisms by which US authorities can compel access to data held by those companies, including data stored in the UK. For journalists covering subjects with any international dimension, that exposure is real and worth understanding.
Terms written for consumers, not investigators
Consumer cloud services carry broad data usage rights. Content scanning, AI training provisions, and data sharing with third parties are common. For most users those terms are acceptable. For a journalist with a source to protect or a researcher handling sensitive interview material, they represent a category of risk that is worth taking seriously.
How Bigby works
Unlike the major cloud platforms, Bigby does not scan, analyse, or profit from the files you store. Here is how that works.
01. Encrypted in transit and at rest
Your files are encrypted on the way to us and while they sit on our UK servers, so they are protected in transit and never stored as readable plain text. We hold the encryption keys, which is what allows features like editing documents in your browser to work.
02. No access to file contents
Bigby does not open, scan, or read the contents of what you store. We have no business reason to and our data processing terms prohibit it.
03. No AI training or secondary use
Your stored content is not used for AI training, advertising targeting, or any analysis of any kind. The subscription fee covers the cost of running the service. That is the entire arrangement.
04. Your data stays in the UK
All data is stored on UK-based infrastructure. UK law applies. There is no transfer to US servers and no exposure to US jurisdiction. What you store with Bigby does not leave the UK.
Frequently asked questions
A source trusted you. Make sure your storage is worthy of that.
Private, encrypted, UK-based cloud storage from £3.99 per month. Built for people whose work depends on keeping confidences.
See all plansAnnual or monthly billing · All prices in GBP · UK data residency · GDPR compliant