Identified reports and contact preferences

A reporter may choose to share their name, email, phone number and a preferred way to be contacted.

Where the details go

Contact details are never stored on the case. They go to a separate, encrypted identity vault linked to the report. Case handlers do not see them by default.

Who can see them

• Only people with the identity view permission, and only after writing a justification of at least 20 characters.
• If your organisation requires it, a second person must approve each request, and the approval lasts one hour and works once.
• Anyone in conflict with the case can never request the identity.

Every request is recorded in the audit log with who asked, which case and why. The log never contains the identity itself.

Email to identified reporters

Notifications to identified reporters contain no allegation content. They tell the reporter something needs attention and link them to the portal.