A documentary pitch about North Korea can endanger people before a camera rolls. Names, faces, voices, family details, locations, file metadata, recipient lists and even a distinctive anecdote may identify a contributor or relative. Protecting sources therefore starts before circulation: make a written, person-by-person risk assessment; set confidentiality limits honestly; disclose only what a pitch decision requires; obtain informed, revisitable consent; and prepare a stop-work and incident plan. No blur, pseudonym, storage method or messaging tool can guarantee anonymity on its own.
Why the pitch itself is a disclosure event
Producers often treat the pitch deck as a harmless sales document and the finished film as the risky stage. For a sensitive North Korea project, that order is backwards. A deck, teaser, transcript, budget attachment, email thread, cloud folder, presentation link or file history may reach more people than the final film and may remain outside the production’s control once sent.
Exposure can occur through the obvious material—an unblurred face or a real name—but also through combinations of ordinary details. A village reference, a relative’s occupation, a travel route, an interpreter’s identity, a recognizable room, a document stamp, a voice, a time stamp or a rare biographical detail can narrow the field until someone is identifiable. A recipient may forward the file, download a copy, screenshot a slide or retain an email after the project stops.
CPJ’s guidance on journalist safety and risk assessment treats digital security and source protection as part of a written security process, not as a last-minute software choice. Apply that principle to the pitch: identify who could be harmed, how the information could become known, who might seek it and what you will do if circumstances change.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Start with a written, individual risk assessment
Do not use “North Korea risk” as a substitute for analysis. The consequences and feasible safeguards differ for a person inside the country, someone who has left, a relative who remains in contact, an interpreter, a fixer, a researcher and a staff member handling the files. Conditions can also change during development. Record the assessment, assign an owner, date it and schedule a review before each major circulation.
Inventory people who may be exposed
- Every contributor, including people whose material appears only in background footage, photographs, documents or transcripts.
- Relatives, friends, colleagues and other associates who could be identified through the contributor’s story.
- Interpreters, fixers, drivers, translators, researchers, local contacts and interview arrangers.
- Producers, editors, funders, lawyers, consultants and contractors who may receive raw material or identity information.
- Pitch recipients and likely onward recipients, including anyone who may be able to download, copy or archive the materials.
Map assets and identifying clues
List the information that could reveal a person, alone or in combination:
- Names, aliases, usernames, telephone numbers, email addresses and account identifiers.
- Faces, voices, distinctive movements, tattoos, uniforms, workplaces and recognizable interiors or landscapes.
- Exact or inferable locations, border routes, dates, travel patterns and family relationships.
- Documents, badges, screens, handwritten notes, shipping labels, vehicle plates and reflections in glass or mirrors.
- Raw audio, original video, transcripts, subtitles, captions, still frames, edit decision lists and production notes.
- File names, folder names, revision histories, embedded captions, author fields, geotags, creation times and other metadata.
- Email headers, contact lists, calendar invitations, presentation links and access logs that reveal who is involved.
Ask four questions for each person and asset
- What exists? Describe the record, image, sound, detail or relationship precisely enough that another team member can recognize it.
- Who might want it? Consider anyone with an interest in identifying the person, not only the most obvious actor. Separate evidence from assumptions.
- What could happen if it became known? Record plausible consequences for the contributor, relatives, contacts and staff. Do not reduce this to a generic severity label.
- What evidence supports the assessment? Note what the contributor reported, what the team observed and what remains uncertain. Revisit the entry when locations, audiences, political conditions or project plans change.
CPJ recommends written assessments and contingency planning. A written record also makes it possible to explain why a detail was removed, who approved a release and when the team must reassess.
Set confidentiality boundaries before making promises
“Confidential” can mean different things to a contributor, producer, editor, funder and lawyer. Before anyone promises it, agree internally on who may know an identity, which materials each person may receive, how long records will be retained and how a contributor can raise a concern. CPJ cautions journalists to weigh consequences before promising confidentiality and to understand newsroom rules for handling confidential sources.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsRank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
What you can define
- The smallest group that needs access to names and contact details.
- Whether a funder, commissioning editor, insurer, lawyer or compliance team must receive identity information.
- Which version of a deck or teaser may be circulated and whether raw files are excluded.
- How the team records approvals, objections, withdrawals and changes in intended use.
- When records will be reviewed, archived or securely deleted under the production’s documented policy.
What you cannot guarantee
You cannot control every recipient’s security, a recipient’s legal obligations, screenshots, later subpoenas, a compromised account, an accidental forwarding or risks arising from facts outside the pitch. You also cannot promise that a pseudonym, blur, altered voice or encrypted channel will defeat identification if context, relatives, location clues or raw records point back to the person.
Use plain language: explain what the production will do, who may have access, what remains uncertain and what would trigger a new conversation. Do not describe a contributor as anonymous if the team, a funder or a recipient can connect the material to a real identity. “We will limit access and remove direct identifiers” is more honest than “no one will ever know.”
Minimize what travels with the pitch
A pitch should contain enough evidence for a commissioning or funding decision, and no more. Make a redacted pitch version rather than sending the working deck and hoping recipients will ignore sensitive slides.
Question every element
- Name: Is a real name necessary, or will a role, pseudonym or contributor code support the decision?
- Image: Does the buyer need a face, or would a non-identifying frame, silhouette or representative image communicate the idea?
- Voice: Is a real voice essential? A transcript may still contain unique phrasing, so review both sound and text.
- Location: Can a broad region replace a street, neighborhood, checkpoint, workplace or route?
- Family detail: Does the relationship advance the pitch, or does it create avoidable exposure for someone who never consented?
- Documents and objects: Could a seal, date, handwriting sample, screen, uniform or background item identify a person?
- Distinctive narrative detail: Could a rare event or combination of facts identify the source even after names are removed?
- File information: Are author fields, comments, revision history, thumbnails, geotags and descriptive filenames stripped or replaced?
Separate pitch, review and production copies
Maintain a clean pitch copy and a restricted source file. Keep the identity key—any document that connects a code to a person—separate from the deck and from ordinary production folders. Give each recipient only the version and access needed for a stated purpose. Keep a current recipient log so the team knows who received which version and can notify them if a material risk is discovered.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Do not assume that exporting a PDF removes every hidden element. Inspect exported files, thumbnails, notes, embedded media, hyperlinks and document properties. Review the visible slide and the underlying file. A redacted screenshot can still preserve an original in a presentation’s media package; a renamed file can still carry identifying metadata.
Choose communications and storage from the threat assessment
There is no universally safe application, configuration or storage provider established for this project. Tool selection should follow the assessment of assets, adversaries, locations, devices, account recovery paths and who must access the material. A generic antivirus, virtual private network or messaging product is not a complete contributor-protection plan.
Use a specialist when the stakes are high
For a real high-risk production, obtain advice from a qualified digital-security or journalist-safety specialist before circulation. A specialist can examine the actual workflow—devices, accounts, backups, collaboration tools, travel, staff access and deletion practices—instead of applying a generic checklist. Confirm the adviser’s current availability, scope and eligibility; a published resource does not guarantee assistance or emergency coverage.
Control access and records
- Give identity information to the fewest people who need it, and review that list whenever roles change.
- Use named accounts and access levels rather than a single shared login where the workflow permits.
- Keep an inventory of raw recordings, transcripts, stills, notes, exports and backups.
- Record where each copy resides and how long it is retained under the production’s policy.
- Decide in advance who can revoke a link, remove a file, pause a presentation or contact recipients after an exposure.
- Train everyone handling the material to recognize forwarding, screenshot, metadata and mistaken-recipient risks.
Explain consent in the context of the pitch
Consent is not a one-time signature detached from use. WITNESS’ ethical video guidance centers the intended audience, safety, dignity, privacy and possible anonymity of people at risk. The Dart Centre Europe’s 2022 practical guide on reporting conflict-related sexual violence includes informed-consent and trauma-aware principles. These are ethical resources, not jurisdiction-specific legal advice.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Tell the contributor what is actually planned
Explain the project in language the person can understand, including that a pitch may be shown to people outside the production team. Describe the likely audience, possible distribution, the difference between a pitch and a finished film, what remains undecided and whether footage, stills, quotations or identifying details could be reused. Explain the safeguards you intend to use and their limits. If a funder, broadcaster, platform or legal reviewer may receive materials, say so when that possibility is real.
Check understanding, voluntariness and alternatives
- Ask the contributor to describe in their own words who may see the material and what could identify them.
- Make clear that participation is voluntary and that declining a particular image, quote or detail is an available choice.
- Discuss foreseeable consequences without promising that every consequence can be prevented.
- Offer a way to raise a concern privately and identify who will respond.
- Document what was agreed, what was withheld and any conditions attached to use.
Revisit consent when use changes
Seek a fresh conversation when the intended audience, territory, platform, format, identifying detail or level of access materially changes. A person who agreed to a restricted funding deck may not have agreed to a public trailer, a festival submission or a broadcaster’s internal archive. If renewed consent cannot be obtained safely, pause and reassess rather than treating the earlier agreement as unlimited.
Build a contingency and stop-work plan before circulation
Decide in advance what happens if a file goes to the wrong person, a contributor reports a new threat, a recipient requests raw material, a device is lost or the project’s audience expands. A plan turns a crisis into assigned actions instead of improvised promises.
Assign decisions and communications
- Name the person who can pause all circulation without waiting for a full production meeting.
- Name the person who controls the identity key and can determine who receives identity information.
- Keep an up-to-date recipient log with contact details and the version each recipient received.
- Prepare a factual notification process for mistaken disclosure, including link revocation where possible and a request for deletion where appropriate.
- Identify who communicates with the contributor, who documents the incident and who obtains legal or safety advice.
- Set criteria for stopping a pitch, changing the deck, withdrawing a teaser or ending a line of inquiry.
Review support and jurisdiction
Responses depend on where the filmmaker, recipient, contributor and potentially affected relatives are located. Legal duties, reporting options, device seizure risks and available emergency support vary by jurisdiction. Obtain location-specific legal and safety advice for the actual project. CPJ provides journalist safety and emergency resources, but the existence of a resource does not establish eligibility or guaranteed assistance.
Recommended Free Tools
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Compare safeguards by the risk they address
Choose measures as a package, not as a contest for the single “safest” tool. The following comparison keeps the decision tied to the threat assessment.
| Safeguard | What it can reduce | What may remain exposed | Decision checks |
|---|---|---|---|
| Pseudonym or contributor code | Immediate disclosure of a name in the deck or filename | Context, voice, face, relatives, rare facts and the identity key | Who holds the key, who can access it and whether the story remains identifying |
| Face or image alteration | Recognition from a direct visual likeness | Voice, clothing, setting, documents, reflections and distinctive events | Whether a non-face clue identifies the person and whether the alteration survives export |
| Voice alteration or transcript-only material | Recognition from an unmodified recording | Language patterns, story details, timing, background sounds and original audio files | Who retains the raw recording and whether the transcript itself is unique |
| Redacted pitch deck | Unnecessary names, locations, documents and family details reaching recipients | Residual combinations of clues, metadata, recipient copies and onward sharing | Whether every slide, attachment, hyperlink and export was inspected |
| Restricted access and recipient log | Uncontrolled internal circulation and uncertainty about who received a copy | Recipient misconduct, screenshots, compromised accounts and later legal demands | Whether access can be revoked and who can act after an incident |
| Specialist security review | Workflow weaknesses that a generic checklist may miss | Threats outside the review’s scope and risks that change later | Adviser qualifications, current availability, locations and actual systems reviewed |
A practical pre-circulation workflow
- Freeze the working set. Identify the exact deck, teaser, transcript, stills and attachments proposed for circulation. Do not review an outdated export while sending a newer file.
- Complete the person-by-person assessment. Include contributors, relatives, intermediaries, staff and identifiable people in background material. Record consequences, evidence and uncertainties.
- Decide the confidentiality boundary. Write who may know identities, which recipients may receive which version, how records are handled and what cannot be guaranteed.
- Create a minimum-necessary pitch. Replace direct identifiers where possible, remove unnecessary context and separate the identity key from the pitch files.
- Inspect every export. Check visible content, audio, captions, notes, comments, hyperlinks, embedded media, filenames, thumbnails and metadata.
- Confirm consent for this audience and use. Explain uncertainty and limits; document conditions and a route for concerns.
- Obtain a qualified security review when warranted. Give the adviser the real workflow and threat context, not only a sanitized description.
- Log the circulation. Record recipient, date, version, permitted use and access method. Avoid broad forwarding lists.
- Activate the contingency plan. Ensure the pause authority, identity-key custodian, incident contact and contributor-support contact are reachable.
- Reassess before each new audience. A funder deck, broadcaster submission, festival screener and public trailer are different disclosure events.
Common mistakes and safer corrections
- “The face is blurred, so the person is anonymous.” Correct it by reviewing voice, context, relatives, location, documents and raw files together.
- “The recipient is reputable, so forwarding is not a concern.” Correct it by limiting the version shared, logging access and planning for onward circulation.
- “Consent was signed at the interview.” Correct it by checking whether the person understood this pitch audience and any changed use.
- “We will decide what to do if something leaks.” Correct it by assigning stop-work authority, contacts, notification steps and evidence preservation before sending.
- “A secure app solves source protection.” Correct it by assessing devices, accounts, backups, metadata, recipient behavior and the broader workflow with a qualified specialist.
- “North Korea is the risk assessment.” Correct it by documenting the individual person, information, likely threats, consequences and current evidence.
What the available guidance does—and does not—establish
CPJ’s safety and risk-assessment materials support written assessment, contingency planning, careful decisions about confidentiality and access to safety resources. WITNESS and the Dart Centre provide ethical principles for consent, intended audience, dignity, privacy and trauma-aware practice. They do not provide a North Korea-specific threat assessment, a legal opinion for a particular jurisdiction or an assurance that any contributor can be made anonymous.
No directly applicable published figure establishes the probability of a contributor being exposed by a North Korea documentary pitch. Avoid borrowing an unrelated journalist-safety statistic and presenting it as a measurement of this project’s risk. The responsible conclusion must come from the project’s current facts, not a made-up precision.
Terry Anderson, a former Associated Press Middle East correspondent, is quoted in CPJ’s risk-assessment guidance: “There is no story worth getting killed for.” Treat that as a general safety principle. It does not predict the danger to a particular contributor or authorize the production to make promises it cannot keep.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Bottom line for producers
Protecting a sensitive contributor begins when the idea is first written down. Assess each person and clue, define confidentiality without overpromising, send only the minimum necessary, obtain consent for the actual audience, restrict and log access, and prepare a stop-work response before circulation. Recheck the plan whenever the project, audience or threat changes. If the consequences could be severe, bring in qualified journalist-safety and digital-security advice tailored to the real locations and workflow.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Say something about this film