Features
Everything from the first report to the final fix
89 capabilities across 10 areas, built so that reporters trust the channel and case teams can prove they did the right thing.
Area 1 of 10
Anonymous reporting portal
A public channel that anyone can use without an account, designed so that people dare to use it.
Used by: Employees, contractors, suppliers and the public
No account needed
Reporters open your link, type your organisation identifier and report. Nothing to install, nothing to register.
Anonymous by default
An anonymous report holds no contact details. The reporter can choose to share their name and a way to be reached at any time.
No IP or device logging
Reports are stored without IP addresses or device identifiers, and the pages load no tracking scripts.
Reference and one-time access code
Each report gets a public reference and a 160-bit access code that is shown once. Only a hash of the code is stored.
Downloadable receipt
Reporters can copy, download or print their reference and code. The file is created in the browser, not on a server.
Anonymous two-way mailbox
Investigators can ask questions and reporters can answer, without the reporter ever being identified.
Category-specific forms
Each category can ask its own questions with six field types, required flags, help text and conditional visibility.
Smart context questions
Urgency, who the report is about, the department involved and a retaliation worry flag drive routing and protection.
File attachments
Reporters can attach up to 10 files and 100 MB per report. Types are verified against content and every file is scanned and encrypted.
Plain status labels
Reporters see simple progress labels. Internal states like triage and escalation are never revealed.
Lockout protection
Repeated wrong access codes lock the report temporarily, and failures return one generic message.
Organisation check
The portal confirms the organisation exists before sending a visitor to a form, so mistyped links do not lead to dead ends.
Area 2 of 10
Case management
Every report becomes a case with a complete, ordered record of what happened to it.
Used by: Compliance officers, case managers and investigators
Automatic case creation
A case is opened the moment a report arrives, and the reporter is acknowledged automatically.
Twelve-status workflow
Submitted to Closed, with the allowed moves enforced by the server so steps cannot be skipped.
Complete timeline
Assignments, routing decisions, status changes, approvals and messages are recorded in order, without allegation text or identity.
Notes in two layers
Internal notes for the team and investigator-only notes for sensitive thinking.
Accept or reject with a reason
Assignees accept to start the investigation or reject with a written reason, which returns the case to triage.
Assignment history
Every assignment and reassignment is kept, including who, when and why.
Four confidentiality levels
Standard, Confidential, Highly confidential and Restricted executive, raised automatically by rules or retaliation concerns.
Search and filters
Find cases by reference or title, status, priority, or only those assigned to you.
Closing with outcomes
Seven outcomes from Substantiated to Duplicate, with an approval step you can require.
Reopen with justification
A closed case can be reopened, and the reason is written to the timeline.
Case statistics
Open, critical, unassigned and awaiting-routing counts on your overview, one click from the filtered list.
Area 3 of 10
Routing and conflict-of-interest control
Cases go to the right people automatically, and never to anyone with a conflict.
Used by: Compliance leaders and administrators who design the process
Priority-ordered rules
Rules are checked lowest number first. The first match with an eligible department wins.
Rich matching
Match on category, minimum urgency, level of the person concerned, retaliation flag and implicated department.
Three department roles
Name a handling, an investigating and an approving department for each rule.
Raise confidentiality
A rule can lift a case to a higher confidentiality level the moment it is routed.
Human approval option
Hold sensitive routes until a person confirms them.
Routing simulator
Test a hypothetical report against live rules and see exactly which one wins and why, without creating a case.
Versioned rules
Editing a rule keeps the old version, so past decisions can be explained.
Decision history
Every routing decision is stored with the rule used and the departments skipped.
Automatic conflict detection
The implicated person, their reporting line and the implicated department tree can never see, receive or handle the case.
Restricted cases
Cases about executives, board members or compliance officers need a dedicated permission to view.
Escalation when no route exists
Unmatched or fully conflicted cases are escalated and flagged for manual routing, never dropped.
Workload-aware suggestions
The assign dialog ranks people by current load so work is shared fairly.
Release when someone leaves
Deactivating a user automatically frees their cases for reassignment.
Area 4 of 10
Investigation workspace
Everything an investigator needs on one screen, with decisions that stand up to review.
Used by: Investigators and reviewers
Tasks
Break the work into tasks with owners and due dates.
Interviews
Record who was interviewed, when and what was said.
Findings
State what was established, linked to the case.
Recommendations
Capture what should change and turn recommendations into corrective actions.
Second-person closure approval
Closing with an investigation outcome needs a finding, a request and approval from someone else. The approval is used up when the case closes.
Linked and related cases
Link cases as related or possible duplicates.
Duplicate suggestions
New reports are compared with existing ones using text and the people or departments involved.
Merge without loss
Merging closes the source as a duplicate, releases its assignees and keeps both histories.
Two-way reporter contact
Ask questions through the mailbox, and pause the deadline clock while you wait for answers.
Area 5 of 10
Deadlines and service levels
Meet the timelines regulators and policies expect, with the system watching the clock for you.
Used by: Case managers and compliance leaders
Acknowledgement deadline
Set 1 to 30 days. Reports are acknowledged automatically on receipt.
Feedback deadline
Set 1 to 12 months. The default of 3 months matches the EU Whistleblower Directive.
Business-day counting
Skip weekends and your own list of public holidays.
Automatic pauses
The clock pauses while a case waits for the reporter, waits for evidence or is suspended, and the lost time is added back.
Justified extensions
Extend a deadline with a written reason, up to 90 days in total, all recorded.
Early warnings
A monitor warns assignees and managers seven days before a deadline.
Breach alerts
When a deadline passes, a timeline entry is added and the assignees and managers are alerted.
Feedback tracking
Messaging the reporter or closing the case counts as feedback.
Area 6 of 10
Evidence and chain of custody
Keep files safe, prove they are unchanged and show who handled them.
Used by: Investigators, reviewers and auditors
Content-checked uploads
File extensions are confirmed against real content. Executables, archives, HTML and SVG are refused.
Scanning hook
Every file is scanned. A signature scanner is built in and a full antivirus engine can be connected.
File fingerprints
A fingerprint is recorded for every file and version.
Encrypted at rest
Files are encrypted with a key bound to your organisation.
Versioning
A new version never overwrites the original. All versions are kept.
Chain of custody
Every upload, view, download and integrity check is listed against the file.
Integrity verification
Verify a file against its recorded hash at any time.
Safe downloads
Each download recomputes the hash and refuses to release a file that no longer matches.
Reporter attachments
Reporters add files with their access code, within clear limits.
Area 7 of 10
Identity protection and anti-retaliation
Protect the people who speak up, in the system and in practice.
Used by: Compliance officers, protection staff and reporters
Separate identity vault
Identified reporters' details live in their own encrypted table, never on the case.
Justified access only
Viewing an identity needs a dedicated permission and a written reason of at least 20 characters.
Four-eyes approval
Require a second person to approve each reveal. The approval lasts one hour and works once.
Audited without exposure
The audit log records who asked, which case and why, but never the identity.
No identity for the conflicted
Anyone in conflict with a case can never request the reporter's identity.
Retaliation concerns
Reporters and staff can raise concerns about retaliation, which raise priority and confidentiality and alert protection staff.
Protective measures
Record what was done to protect the person and follow up.
Routing on retaliation
Rules can match the retaliation flag so such cases reach a dedicated team.
Area 8 of 10
Corrective actions
Show that the problem was fixed, and stayed fixed.
Used by: Case managers, action owners and the board
Owners and due dates
Every action has a named owner who is allowed to see the case, a type and a date.
Overdue alerts
When an action passes its date the owner, the author and managers are alerted once.
Cross-case tracker
One page lists actions across all the cases you can see.
Effectiveness review
Completed actions are reviewed to confirm the change worked, then frozen so the record cannot be rewritten.
Area 9 of 10
Analytics and reporting
Insight for the board and regulators that never exposes an individual.
Used by: Compliance leaders, auditors and the board
Overview dashboard
Open, critical, unassigned and needs-routing counts with recent activity.
Trends by category and outcome
See volumes, categories and outcomes across the cases you can see.
Small-group suppression
Counts for fewer than five people are hidden, plus a neighbouring figure so they cannot be worked out.
CSV export
Export for committee packs, with spreadsheet formulas neutralised.
Scoped to your access
Figures only include cases the viewer is permitted to see.
Area 10 of 10
Administration and access
Control who can do what, and make sure it stays that way.
Used by: Administrators and compliance leaders
Five system roles
Organisation Administrator, Chief Compliance Officer, Case Manager, Investigator and Read-only Auditor, ready on day one.
Custom roles
Build roles from over thirty permissions, with guards against granting what you do not hold.
Separation of duties
Administrators configure the organisation but get no access to cases, evidence, identity or audit.
Departments tree
Model your structure with nested departments, protected against cycles.
Email invitations
People set their own password through a seven-day link.
Two-step sign-in
Authenticator-app codes with single-use recovery codes.
Password reset
A one-hour single-use link that ends all sessions when used.
Session control
Revoke all sessions for a person, and deactivation ends access immediately.
Notifications
In-app bell and email for new cases, assignments, escalations, approvals, deadlines and overdue actions, with no case content in emails.
Tamper-evident audit log
A hash-chained, append-only log with a one-click integrity check.
Honest roadmap
What is not here yet
We would rather tell you than let you find out. These are on the list and are not available today.
Single sign-on (SSO)
Sign in with your identity provider.
Tenant-wide two-step sign-in
Require it for everyone, with an administrator reset for lost devices.
Retention policies and data-subject tooling
Automatic retention rules and export or erasure workflows.
Object storage for evidence
S3-compatible storage with versioning, plus a full antivirus engine, redaction and legal hold.
Language and location matching
Route by reporter language and the place an incident happened.
More channels
SMS and Microsoft Teams notifications, and per-person notification preferences.
Multilingual forms
Translated labels for categories and questions.
AI assistance
Optional, off by default, and only with a provider and data terms you approve.
Tell the SLEM Technologies team what matters most to you and it shapes what comes next.
See it working with your own process
Create your organisation, add your categories and rules, and submit a test report to watch the whole flow.