WhisTrust Documentation

Enterprise Multi-Tenant Whistleblowing Platform - Complete User Guide

Getting Started
Learn the basics of using the platform

For New Users

  • Navigate to the reporting page to submit a concern anonymously
  • Provide as much detail as possible to help investigators
  • Save your unique tracking code to monitor progress
  • Use the tracking page anytime to check your case status

What Happens Next

  • 1Your report is immediately submitted to the compliance team
  • 2Cases are reviewed within 24-48 hours
  • 3Investigators may request additional information via secure messaging
  • 4You'll receive updates as your case progresses through review stages
Anonymous Reporting
How to submit secure, confidential reports

Submitting a Report

  • Choose the appropriate category for your concern (ethics, fraud, harassment, etc.)
  • Provide a clear, detailed description of the issue
  • Include dates, locations, and names if relevant
  • Upload any supporting documents or evidence (optional)
  • Submit and save your unique tracking code

Your Privacy

  • No personal information is required to submit a report
  • Your IP address is not logged or tracked
  • All data is encrypted end-to-end
  • Only authorized investigators can access reports
  • Use your tracking code to maintain anonymity while following up
Tracking Your Case
Monitor the progress of your report

Using Your Tracking Code

  • Enter your unique tracking code on the tracking page
  • View the current status of your case (Submitted, Under Review, Investigating, Resolved, Closed)
  • See timeline of all updates and actions taken
  • Check for any messages from investigators
  • Respond to follow-up questions securely

Report Statuses Explained

SubmittedYour report has been received and is awaiting review
Under ReviewA compliance officer is evaluating your concern
InvestigatingAn investigator is actively working on your case
ResolvedThe issue has been addressed and resolved
ClosedThe case is complete with documented outcomes
For Administrators
Managing reports and your compliance team

Dashboard Overview

  • View key metrics: total reports, pending cases, resolution times
  • Monitor report volume by category and priority
  • Track SLA compliance and at-risk cases
  • Access quick actions for common workflows
  • Review recent activity and submissions

Case Management

  • Assign reports to appropriate investigators
  • Set priority levels (Low, Medium, High, Critical)
  • Add internal notes and update case status
  • Communicate with reporters via secure messaging
  • Export reports and generate compliance documentation

Team Collaboration

  • Invite team members with role-based access (Admin, Manager, Investigator)
  • Assign cases based on expertise and workload
  • Leave internal comments for team coordination
  • View audit logs of all user actions
  • Track investigator performance and case resolution

Settings & Customization

  • Customize your profile with 12 professional avatar styles
  • Update organization settings and preferences
  • Configure notification preferences and alerts
  • Manage team member profiles and permissions
  • Set up custom categories and workflows
Platform Features
Explore all available capabilities

Report Categories

Ethics & Code of ConductFraud & Financial MisconductHarassment & DiscriminationSafety & Health ViolationsData Privacy & SecurityEnvironmental IssuesConflicts of InterestOther Compliance Matters

Key Capabilities

  • Anonymous & confidential reporting
  • Secure file uploads (documents, images, audio)
  • Real-time status tracking with unique codes
  • Two-way secure messaging between reporters and investigators
  • Customizable workflows and case assignment
  • Advanced analytics and compliance reporting
  • Role-based access control (Admin, Manager, Investigator)
  • Complete audit trail of all actions

User Interface Enhancements

  • Fixed headers for easy navigation across all pages
  • Smooth scrolling documentation with interactive table of contents
  • Professional avatar system with multiple style options
  • Responsive design optimized for all devices and screen sizes
  • Real-time updates and notifications
  • Intuitive case status tracking with visual indicators
Security & Privacy
How we protect your information

Data Protection

  • End-to-end encryption for all data in transit and at rest
  • No IP address logging or tracking
  • Secure file storage with access controls
  • Regular security audits and penetration testing
  • SOC 2 and ISO 27001 compliant infrastructure

Access Controls

  • Role-based permissions ensure least-privilege access
  • Multi-factor authentication available for administrators
  • Session timeouts and automatic logout for security
  • Comprehensive audit logging of all user actions
  • Data retention policies and secure deletion

Compliance

  • GDPR, CCPA, and SOX compliance ready
  • Whistleblower protection act alignment
  • Configurable data retention policies
  • Right to access and data portability
  • Regular compliance training and documentation

Technical Security Measures

  • Built on Supabase with Row-Level Security (RLS)
  • PostgreSQL database with encrypted storage
  • Secure file uploads to private storage buckets
  • Session management with automatic timeout
  • Real-time data synchronization with encryption
  • Multi-tenant architecture with complete data isolation
Testing Workflows - Try It Yourself!
Step-by-step guides to test the platform by role

Workflow 1: Anonymous Reporter

Test the complete anonymous reporting flow

Step 1

Submit Anonymous Report

Navigate to the report submission page and create a test report.

  • • Visit /demo or your organization's report page
  • • Select category (e.g., "Ethics Violation")
  • • Write a description (minimum 50 characters)
  • • Optional: Upload a test file
  • • Optional: Provide contact information
  • • Click "Submit Report"
Step 2

Save Tracking Code

After submission, you'll receive a unique tracking code.

  • • Copy the tracking code (e.g., "TR-ABC123")
  • • Save it securely for testing
  • • You'll need this code to track your report
Step 3

Track Your Report

Use the tracking code to monitor case status.

  • • Go to the tracking page
  • • Enter your tracking code
  • • View case status, timeline, and messages
  • • Send a message to the compliance team
✓ Workflow Complete! You've tested anonymous reporting and tracking.

Workflow 2: Organization Admin

Test the admin dashboard and case management

Step 1

Login as Admin

Access the admin portal with test credentials.

  • • Navigate to /org/codesquare/login
  • • Email: admin@codesquare.com
  • • Password: CodeSquare@2024
  • • Click "Sign In"
Step 2

View Dashboard

Explore the admin dashboard and metrics.

  • • Review total reports, pending cases, resolution times
  • • Check recent submissions and activity feed
  • • View charts and analytics
Step 3

Manage Reports

Find and manage the report you created.

  • • Go to "Reports" in the sidebar
  • • Find your test report (filter by status: Submitted)
  • • Click to open case details
  • • Update status to "Under Review"
  • • Set priority (e.g., "Medium")
  • • Add an internal note
Step 4

Assign to Investigator

Assign the case to a team member.

  • • Click "Assign" button
  • • Select investigator from dropdown
  • • Add assignment notes (optional)
  • • Confirm assignment
Step 5

Message Reporter

Communicate with the anonymous reporter.

  • • Scroll to "Messages" section
  • • Type a message (e.g., "Thank you for your report. We're reviewing your concern.")
  • • Click "Send Message"
  • • Message appears in case timeline
Step 6

Explore Other Features

Test additional admin capabilities.

  • Analytics: View charts and trends
  • Users: See team members and their roles
  • Audit Logs: Review all system activity
  • Settings: Customize avatar and preferences
✓ Workflow Complete! You've tested the full admin experience.

Workflow 3: Manager Role

Test manager-level oversight and review

Step 1

Login as Manager

Access with manager credentials.

  • • Navigate to /org/codesquare/login
  • • Email: manager@codesquare.com
  • • Password: Manager@2024
  • • Click "Sign In"
Step 2

Review Dashboard & Analytics

Managers have full visibility into cases and trends.

  • • View departmental dashboard
  • • Check analytics for trends and patterns
  • • Review audit logs for compliance
  • • Can view all reports (not just assigned ones)
Step 3

Oversee Case Progress

Review cases and provide oversight.

  • • Open any case to review details
  • • Read internal notes from investigators
  • • Adjust priority if needed
  • • Add manager comments for guidance
✓ Workflow Complete! You've tested manager oversight capabilities.

Workflow 4: Investigator Role

Test case investigation and resolution

Step 1

Login as Investigator

Access with investigator credentials.

  • • Navigate to /org/codesquare/login
  • • Email: investigator@codesquare.com
  • • Password: Investigator@2024
  • • Click "Sign In"
Step 2

View Assigned Cases

Investigators only see cases assigned to them.

  • • Dashboard shows only your assigned cases
  • • Go to "Reports" to see full list
  • • Open the case assigned to you earlier
Step 3

Investigate & Document

Update case status and add investigation notes.

  • • Update status to "Investigating"
  • • Add internal notes about your investigation
  • • Review any uploaded attachments
  • • Request more information via messaging if needed
Step 4

Resolve Case

Complete investigation and mark as resolved.

  • • Update status to "Resolved"
  • • Add resolution notes summarizing findings
  • • Send final message to reporter (optional)
  • • Case moves to closed state
✓ Workflow Complete! You've tested the investigator role end-to-end.

Complete End-to-End Testing

Follow all 4 workflows in sequence to experience the complete platform lifecycle:

  1. 1Anonymous Reporter: Submit a report and save tracking code
  2. 2Admin: Review, prioritize, and assign the report
  3. 3Manager: Oversee progress and provide guidance
  4. 4Investigator: Investigate, document, and resolve
  5. 5Back to Reporter: Check tracking page to see final status

💡 Pro Tip

Use browser incognito/private windows to test multiple roles simultaneously, or log out between role changes.

Frequently Asked Questions
Common questions about using WhisTrust

Q: Is my report truly anonymous?

A: Yes, we do not collect any identifying information unless you choose to provide it. Your IP address is not logged or tracked.

Q: How long does an investigation take?

A: Most cases are resolved within 2-4 weeks, depending on complexity and the nature of the concern.

Q: Can I update my report after submission?

A: Yes, use your tracking code to add information via secure messaging. You can provide additional details anytime.

Q: Who can see my report?

A: Only authorized compliance team members assigned to your case can view your report. Access is strictly controlled.

Q: What if I need to report urgent safety concerns?

A: Mark your report as 'Critical' priority during submission for immediate attention from the compliance team.

Q: Can I attach files to my report?

A: Yes, you can upload documents, images, and audio files securely. All files are encrypted and stored privately.

Q: How do I know my case is being worked on?

A: Check your tracking page regularly for status updates and messages from investigators. You'll see a complete timeline of actions.

Q: What happens if I lose my tracking code?

A: Unfortunately, tracking codes cannot be recovered to protect anonymity. Please save your tracking code securely when you submit a report.

Built with ❤️ for secure and ethical reporting

Try the DemoBack to Home