Trust Center
Your security and privacy are our top priorities. Learn how we protect your information.
Security overview
What protects a report, from the moment it is submitted to how long it is kept.
-
Encryption in transit and at rest
All communications use TLS in transit. Data at rest is protected with industry-standard 256-bit AES encryption, ensuring your information remains private and secure.
-
Anonymous reporting
Our platform is designed to protect your identity. You can report concerns without revealing your personal information.
-
Secure infrastructure
We maintain a hardened infrastructure with multiple layers of security controls and regular security assessments.
-
Data retention
Reports are kept for a minimum of five years to meet legal and operational needs. See our Privacy Policy for the full rules.
Compliance
The frameworks the platform is designed around.
-
GDPR compliance
We are designed to support compliance with the General Data Protection Regulation (GDPR) and to protect your data rights. Consult your legal or compliance team for your organization's obligations.
-
Data protection
Our platform implements robust data protection measures in line with global privacy standards.
-
Regular audits
We conduct regular security audits and penetration testing to maintain the highest security standards.
Our security practices
How the three areas above are maintained day to day.
-
Infrastructure security
- Multi-layer security architecture
- Regular security updates and patches
- DDoS protection and mitigation
-
Data protection
- Encryption in transit and at rest for all data
- Secure data storage and transmission
- Regular data backups and recovery testing
-
Access control
- Strict access controls and authentication
- Role-based access management
- Regular access reviews and audits
Have security questions?
Our security team is here to help. Contact us for any security-related inquiries.