Complete guide to using WhisTrust - your secure digital whistleblowing system
WhisTrust is a secure, confidential digital whistleblowing system designed for organizations to receive and manage anonymous reports of misconduct, fraud, safety concerns, and policy violations.
Enable confidential reporting, secure communication, and transparent case resolution
End-to-end encryption, metadata cleaning, and compliance-ready data handling
WhisTrust uses Role-Based Access Control (RBAC). Your access depends on your assigned role:
Allows users to submit reports of misconduct, fraud, or policy violations securely and anonymously. Each submission receives a unique tracking code for follow-up.
Enables encrypted two-way communication between reporters and administrators. Messages are encrypted before storage and decrypted on display to ensure maximum privacy.
Provides administrators with a complete case management interface including case assignment, status updates, priority management, custom labels, and file access.
Ensures all uploaded files are stored securely with metadata stripped to prevent identity exposure. Files are accessible only to authorized administrators via signed URLs.
Enables authorized administrators to submit reports on behalf of individuals who cannot access the system directly. Source marked as "proxy" or "offline".
Comprehensive audit trail of all system actions (report creation, status changes, assignments, messages) and real-time notification system for admins.
user_role fieldImplements multiple security layers including client-side message encryption, metadata cleaning, role-based access control, and secure authentication.
Allows administrators to set case priorities (Low/Medium/High) and add custom labels for better organization and filtering.
WhisTrust implements comprehensive role-based access control with four distinct roles. Each role has specific permissions, sees only relevant data, and has access to appropriate features. Unauthorized routes are automatically blocked with clear access-denied messaging.
HR trying to update status: "You don't have permission to edit reports. Only Admin, Manager, and Investigator can update case status."
Non-admin trying to manage users: "Only Admin can change user roles." or "Only Admin can activate/deactivate users."
user_role_updated with old/new valuesuser_role column for each actionProvides administrators with key metrics, category breakdowns, trend analysis, and exportable reports for compliance and management purposes.
Allows Admin users to manage other admin accounts in the system. This includes changing user roles (Admin, Manager, Investigator, HR), activating or deactivating accounts, and viewing user information. All user management actions are automatically logged in the audit trail with full details including who performed the action and what changed.
Update a user's role. This immediately affects their permissions and access. Logged as user_role_updated with old and new role values.
Control user access. Deactivated users cannot log in. Logged as user_activated or user_deactivated with user details.
user_role_updated entryuser_deactivated entryuser_activated entryuser_role is captured for all actionsNo login required. Use tracking codes to access cases. Can submit reports and communicate via messages.
Full system access including user management.
Login: admin@whistrust.com
Department-based case oversight. Sees cases assigned to users in their department. Can view analytics and audit logs.
Cannot manage users or access user management page.
View and manage only assigned cases.
Cannot assign cases or view analytics.
View HR-related cases only (Workplace Conduct, Harassment, Discrimination, Bullying).
Read-only access. Cannot edit case status or priority. Cannot view analytics.
Sample Tracking Code: ABC1234
Test Categories: Fraud, Harassment, Safety, Ethical Violations
Test File Types: PDF, JPG, PNG, DOCX (max 10MB each)
Admin Login: admin@whistrust.com / Admin@123
All messages are encrypted using AES encryption before storage. Files are encrypted in transit and at rest.
Automatic removal of EXIF data, author information, and timestamps from uploaded files to prevent identity exposure.
Role-based permissions with database-level security. Only authorized admins can access specific cases.
Secure cloud storage with signed URLs for temporary file access. Full audit trail maintained for compliance.
WhisTrust is designed to meet data localization requirements and compliance standards. All data handling follows security best practices and can be hosted in compliant jurisdictions.
Make sure you're using the correct tracking code. Messages may take a moment to sync. Try refreshing the page or checking your tracking code.
Check file size (max 10MB per file), file type is supported (PDF, images, docs), and your internet connection is stable. Try uploading one file at a time.
If you provided an email during submission, you should have received the tracking code. For security, we cannot retrieve tracking codes without authentication.
All data is encrypted in transit (HTTPS) and at rest. Messages use client-side encryption, and files have metadata removed. Only authorized admins can access case data.
For additional support, please contact your organization's compliance team or system administrator. Technical issues can be reported through your organization's IT support channels.