Confidential channel

Report a Concern

Black Flag Design maintains a confidential channel for raising concerns about ethics, security, compliance, conduct, or the handling of data — whether the concern is about us, about someone we work with, or about a property we build and operate for a client.

You do not need to go through your manager

You do not need to raise it with the person the concern is about, and you do not need to be an employee. Contractors, client staff, and anyone working alongside us can use this channel. Raising something here in good faith will not be held against you.

How to report

Write to either person below. They receive reports independently — pick whichever one is further from the concern, and you do not need to copy the other.

This channel is confidential, not anonymous. Email shows the recipient the address you sent it from. Your report is treated as confidential and shared only with people who need it to look into the matter, but we are not going to tell you your identity is hidden when it is not. If you need to raise something without being identified, say so in your message, or write from an account that is not connected to you.

What to include

Send what you have. An incomplete report is better than no report — we will come back to you if we need more.

  • What happened, and roughly when.
  • Who or what is involved - a person, a system, a client property, a vendor.
  • Whether anything is still ongoing or time-sensitive.
  • Anything you have already tried, or already raised with someone else.

What happens next

  1. You get a reply within two business days. That reply is not just an acknowledgement — it tells you how long we expect resolving it to take.
  2. It is reviewed by the person you contacted. If the concern involves them, it goes to the other recipient instead.
  3. We tell you what we did, unless doing so would identify someone else who reported in confidence.

What this page is not

A security vulnerability in software we build or operate
Send it to workspace@blackflag.design with “Security” in the subject line so it routes as a vulnerability report rather than a conduct concern.
A customer or client support request
Use your normal support or account contact - this channel is not monitored as a support queue.
An emergency, or anything involving immediate risk to a person
Contact local emergency services first. This page is not monitored continuously.