Confidentiality engineered into every layer.
Whistleblowing software is only as good as the trust it commands. We treat reporter privacy and organizational data integrity as non-negotiable foundations.
Zero-Knowledge Anonymous Intake
Whistleblowers can submit without providing emails, phone numbers, or employee credentials. No cookies, trackers, or browser fingerprinting are employed.
Cryptographic Case Tokens
Every report generates a 12-character cryptographic token (e.g. CASE-2026-0012) enabling reporters to check for updates and respond without account credentials.
Strict Organization Data Isolation
Each organization workspace is logically partitioned. Database queries enforce strict boundary filtering to prevent cross-organization data access.
Role-Based Access Control (RBAC)
Admin, Case Manager, and Investigator roles enforce least-privilege scoping. Investigators only access reports specifically delegated to them.
Tamper-Evident Audit Logging
Every case assignment, status change, note creation, and file access is recorded with immutable timestamps and actor metadata.
Automated Statutory SLA Engine
Automated countdowns for 7-day acknowledgement and 90-day review windows mandated by the EU Whistleblower Directive (2019/1937).