User Features

  • Entirely manageable from a web administration interface
  • Support for more than 40 languages with support for Right-to-Left (RTL)
  • Support for assigning and creating case management statuses
  • Customizable look and feel (logo, colour, styles, font, text)
  • Manage multiple whistleblowing sites from a single dashboard
  • Let whistleblowers decide if and when to confidentially declare their identity
  • Exchange multimedia files with whistleblower
  • Chat with whistleblower to discuss the report
  • Advanced questionnaire builder
  • Whistleblowing system statistics
  • Simple recipient interface for receiving and analyzing reports
  • Support for the categorization of the reports with labels
  • Support for the user search of reports

Technical Features

  • Automated Software Quality Measurement and Continuous Integration Testing
  • Long-Term Support plan (LTS)
  • Built with lightweight framework technologies (AngularJS and Python Twisted)
  • Fully self-contained application (no web or application servers needed)
  • Integrated collaborative translation/localization (Transifex)
  • Embedded database – SQLite (optional support for other databases)
  • Automatic setup of Tor Onion Services Version 3
  • Integrated backup support
  • Easy integration of the platform with existing websites and intranets
  • Support for self-service signup for whistleblowing SAAS service setup
  • Support for Linux operating system (Debian/Ubuntu)
  • Deb Packaging with repository for update/upgrades
  • HTTP/2 support
  • REST API
  • Provisioning API

Security Features

  • Automatic free digital certificate enrollment (Let’s Encrypt)
  • Multiple penetration tests with full public reports
  • Conform to industry standards and best practices for application security by following OWASP Security Guidelines
  • Two-Factor authentication (2FA) support compliant with standard TOTP RFC 6238
  • Integrated network sandboxing with iptables
  • Integrated application sandboxing with AppArmor
  • Does not leave traces in browser cache
  • Complete protection against automated submissions (spam prevention)
  • Subject to continuous peer-review and periodic security audits
  • PGP support for encrypted email notifications