About
Independent infrastructure for a newly regulated industry.
We build the channel state cannabis programs use to hear from the people closest to the problem.
Heather Carrasco
Chief Executive Officer
Brian Keegan
Chief Information Officer
Heather Carrasco, Ph.D., CPA, CEO
Heather Carrasco leads Secure Disclosure's mission to empower employees, organizations, and stakeholders to safely raise concerns and promote ethical decision-making, drawing on expertise in governance, auditing, professional judgment, and regulatory systems.
She is also an Assistant Professor of Accounting at the University of New Mexico and a Certified Public Accountant. Her research on accountability, management controls, and regulatory governance has been published in journals including Contemporary Accounting Research, Accounting, Auditing & Accountability Journal, and Accounting Horizons.
Before academia, she worked in public accounting with KPMG, gaining firsthand experience in auditing, risk assessment, compliance, and internal controls, insight she now applies to building stronger speak-up cultures.
Brian C. Keegan, Ph.D., CIO
Brian Keegan leads Secure Disclosure's technology strategy, data infrastructure, cybersecurity, and product innovation. A computational social scientist, he brings expertise in human-computer interaction, network science, and data science to understanding how people communicate and make decisions in complex digital environments.
He is an Associate Professor at the University of Colorado Boulder, previously a research associate with Harvard Business School's HBX platform and a postdoctoral researcher at Northeastern University. He holds a Ph.D. in Media, Technology, and Society from Northwestern and undergraduate degrees from MIT.
At Secure Disclosure, he applies his expertise in data systems and information flows to help organizations build trusted, secure whistleblower reporting and compliance programs.
Independence
Routing and review sit apart from any single agency's decision authority.
Neutrality
We serve reporters and regulators equally, not either side's advocate.
Transparency
Every case's process is auditable, even when identities aren't.
Disclaimer on jurisdictional scope, mandatory-reporting exceptions, and data handling; legal review required before launch.
© Secure Disclosure
AboutContact