Tipstaff records each report made to NCMEC's CyberTipline, starts its one-year hold the day it is made, keeps longer holds with their reasons and a locked log of every opening - and will not let preserved material go before its hold ends.
Opens in this browser with an invented platform already in it. No account, no email address, nothing installed. No reported material is ever kept in it.
The problem
The REPORT Act, signed 7 May 2024, changed 18 U.S.C. 2258A: what a provider reports to the CyberTipline must now be preserved for one year after the report, not 90 days, stored consistent with the NIST Cybersecurity Framework - and the duty to report now also covers sex trafficking of a minor and enticement.
how long reported contents must be preserved after the report - it was 90 days.
Public Law 118-59 →Not a reminder. Release refuses, naming the reason, until the report has been made with NCMEC's number, until a year has passed since it was made, while a longer hold is in force, and without a person on the staff list and a reason. A hold can be made longer, never shorter. The access log cannot be edited or cut. There is no override.
How it works
The category, when you knew, the account, and where your secure store holds it.
NCMEC's report number. The one-year hold starts that day.
Longer holds with their reasons, every opening logged, and release only when the hold is over.
What it will never do
Tipstaff holds references, account identifiers and dates, nothing more.
Pricing
For one platform.
Every report, every hold.
Monthly, per platform. Your bank statement says Tipstaff Software. Your licence key is on your screen as soon as the payment confirms.
Pay by card through Square, on Square’s own checkout page — we never see or store your card number. Or pay with bitcoin through our own bitcoin server. Either way you come back here, type your business name, and your licence key is on the screen — no email, no waiting on us.
Questions
No. Only a reference to where your secure store keeps it, the account identifier and dates. Nothing that could be seen.
Yes. Add the date and the reason - a law-enforcement request, or your own decision. It can never be made shorter.
No. It is the record and the gate in front of releasing preserved material.
The demo on this page is the whole program, running on invented records. Paying gets you a licence key — one line of text, on your screen as soon as the payment confirms: the checkout brings you back to our thank-you page, you type your business name and the key appears. Paste it into the program and from then on it keeps your own records. Until then, nothing you type into it is kept.
The key is checked inside the page, on your own machine. It never calls us, so there is still no account and nothing about your business goes anywhere. If you ever stop paying, your records stay exactly where they are, read-only, and Export still hands you every one of them.
One report's year has ended, one is held longer on a sheriff's letter, and one was known a day ago and is not yet reported.