Let people report without putting their name on it

An anonymous reporting system only works if the people who need it believe it. This is the reporter's side of CultureMonkey's anonymous reporting software: the two modes, and what a case handler can and cannot see in each.

Book a free, no-obligation product demo call with our experts.

Speak UpAnonymous
Report number
SU-2026-00013
Password
set by the reporter
Name on file
none
Email on file
none
Sample case. No identity fields exist on an anonymous report.
The choice

How does employee anonymous reporting work?

The employee picks a mode before anything else: anonymous, which is the default, or identified, where you allow it. It is the one decision they cannot undo.

  • Your call whether identified exists at all

    Identified reporting is a setting an administrator turns on or off, and it can require email OTP verification when it is on.
  • Locked at submission

    Nobody can switch a case from anonymous to identified later. There is no unmasking path, by design rather than by policy.
Anonymous
Name
not captured
Email
not captured

Nothing for a handler to reveal.

Identified
Name
to the case team
Email
to the case team

Shared deliberately, and no further.

Switch
What the team sees

What can the case team see in an anonymous employee report?

The concern and nothing else. No name or email is captured, and that is the useful way to judge an anonymous channel: by what is on the record for a handler to open, not by what it promises.

On the case recordAnonymousIdentified
Category and descriptionVisibleVisible
Guided answers and attachmentsVisibleVisible
Messages between reporter and teamVisibleVisible
Reporter nameNot capturedVisible to the case team
Reporter emailNot capturedVisible to the case team
Notification email, if one was addedNever visibleNever visible
Getting back in

How does an anonymous employee follow up without an account?

With a report number and a password, which identify the case rather than the person. Speak Up issues them in place of an account.

That pair is what keeps the conversation going, and what lets someone be emailed about a reply without the address ever reaching the case team.

  1. The report is submitted

    The reporter chooses a mode, a category, and answers the guided questions for it, attaching files if they have them.
  2. A report number is issued

    The case gets its own number, in the form SU-2026-00013. It is the case's identity, not the reporter's.
  3. The reporter sets a password

    It is never stored in a form anyone can read, so nobody at CultureMonkey and nobody in your organisation can look it up or be made to hand it over. It exists only to recognise the same reporter when they come back.
  4. Both are saved, or the case is lost

    The form offers a confirmation PDF to download. Neither the number nor the password can be recovered later, precisely because recovering them would mean identifying the reporter.
FAQ

What employees and HR teams ask first

Yes, and it is the default. In anonymous mode Speak Up captures no name and no email: the identity fields on the case are empty by design, so there is nothing for a case handler to reveal. The reporter receives a report number and sets their own password, which lets them come back, read replies and add information without ever identifying themselves.

It is complaint software, and deliberately separate from the anonymous survey product. A survey asks everyone the same question on your schedule; this waits for one person to raise something on theirs, and gives that report a number, an owner, a stage and an audit trail. The two sit in the same account but share no data: a Speak Up case never appears in survey results, and a survey response never becomes a case.

No. The reporting mode is locked at the moment of submission and cannot be changed afterwards by anyone, including administrators. There is no unmasking path built into the product, which is what makes the anonymous mode meaningful rather than a setting someone could quietly reverse.

Through the case itself. Messages are exchanged against the report number rather than a person, so a handler can ask a follow-up question and the reporter can answer, all without a name. The reporter reads and replies by logging back in with their report number and password, or by opting into an email notification that tells them something has changed.

No. A notification email is optional, stored encrypted at rest, and held in a separate table that is deliberately not linked to the case for handlers to browse. There is no screen, export, report or API response on the handler side that shows it. The system decrypts it only to send mail, and the reporter can change or delete it at any time.

They lose access to that case conversation, and the organisation cannot recover it for them. This is deliberate: any recovery process would have to identify the person asking, which would defeat the anonymity it was protecting. The submission form offers a confirmation PDF so both can be saved somewhere safe at the point they are issued.

Not through the case record, which holds no name and no email. There are real edges worth naming instead: what a reporter writes can identify them, an attachment can carry their name in its metadata or contents, and an IP address is captured at submission for abuse prevention and kept in the audit metadata rather than the reporter fields. An IP points at a network rather than a person.

Yes, if they set a password when they submit. That is what gives them a way back into the case to read and answer messages. An identified reporter who skips it still hears from the team, by email, but cannot reply inside the case, so two-way conversation needs the password in both modes.

The case team has seven days to acknowledge a report and three months to give feedback, the timelines the EU Whistleblower Directive sets. Both are set on the case automatically, and the team is flagged if either slips, whether the reporter is anonymous or not.

No, it is a setting. An administrator can turn identified reporting on or off for the organisation, and when it is on they can optionally require email OTP verification for it. Some organisations run anonymous only; others offer both and let the reporter decide case by case.

Give people a way to raise what they cannot say out loud

See the reporter's portal and the case team's side on a walkthrough with our team.

No commitment. A 30-minute walkthrough with our experts.