Skip to content
User Features
- Entirely manageable from a web administration interface
- Support for more than 40 languages with support for Right-to-Left (RTL)
- Support for assigning and creating case management statuses
- Customizable look and feel (logo, colour, styles, font, text)
- Manage multiple whistleblowing sites from a single dashboard
- Let whistleblowers decide if and when to confidentially declare their identity
- Exchange multimedia files with whistleblower
- Chat with whistleblower to discuss the report
- Advanced questionnaire builder
- Whistleblowing system statistics
- Simple recipient interface for receiving and analyzing reports
- Support for the categorization of the reports with labels
- Support for the user search of reports
Technical Features
- Automated Software Quality Measurement and Continuous Integration Testing
- Long-Term Support plan (LTS)
- Built with lightweight framework technologies (AngularJS and Python Twisted)
- Fully self-contained application (no web or application servers needed)
- Integrated collaborative translation/localization (Transifex)
- Embedded database – SQLite (optional support for other databases)
- Automatic setup of Tor Onion Services Version 3
- Integrated backup support
- Easy integration of the platform with existing websites and intranets
- Support for self-service signup for whistleblowing SAAS service setup
- Support for Linux operating system (Debian/Ubuntu)
- Deb Packaging with repository for update/upgrades
- HTTP/2 support
- REST API
- Provisioning API
Legal Features
- Ready-made questionnaires for compliance law
- Whistleblower identity conditional reporting workflow
- Manage conflict of interest in the reporting workflow
- Custodian functionality to authorize access to whistleblower identity
- GDPR configurable data retention policies
- GDPR compliant subscriber module for new users of SaaS services
- No logs of IP addresses
- Integratable with existing enterprise case management platform
- Free Software OSI Approved AGPL 3.0 License
Security Features
- Automatic free digital certificate enrollment (Let’s Encrypt)
- Multiple penetration tests with full public reports
- Conform to industry standards and best practices for application security by following OWASP Security Guidelines
- Two-Factor authentication (2FA) support compliant with standard TOTP RFC 6238
- Integrated network sandboxing with iptables
- Integrated application sandboxing with AppArmor
- Does not leave traces in browser cache
- Complete protection against automated submissions (spam prevention)
- Subject to continuous peer-review and periodic security audits
- PGP support for encrypted email notifications
