An anonymous reporting system only works if the people who need it believe it. This is the reporter's side of CultureMonkey's anonymous reporting software: the two modes, and what a case handler can and cannot see in each.
Book a free, no-obligation product demo call with our experts.
The employee picks a mode before anything else: anonymous, which is the default, or identified, where you allow it. It is the one decision they cannot undo.
Nothing for a handler to reveal.
Shared deliberately, and no further.
The concern and nothing else. No name or email is captured, and that is the useful way to judge an anonymous channel: by what is on the record for a handler to open, not by what it promises.
| On the case record | Anonymous | Identified |
|---|---|---|
| Category and description | Visible | Visible |
| Guided answers and attachments | Visible | Visible |
| Messages between reporter and team | Visible | Visible |
| Reporter name | Not captured | Visible to the case team |
| Reporter email | Not captured | Visible to the case team |
| Notification email, if one was added | Never visible | Never visible |
With a report number and a password, which identify the case rather than the person. Speak Up issues them in place of an account.
That pair is what keeps the conversation going, and what lets someone be emailed about a reply without the address ever reaching the case team.
Yes, and it is the default. In anonymous mode Speak Up captures no name and no email: the identity fields on the case are empty by design, so there is nothing for a case handler to reveal. The reporter receives a report number and sets their own password, which lets them come back, read replies and add information without ever identifying themselves.
It is complaint software, and deliberately separate from the anonymous survey product. A survey asks everyone the same question on your schedule; this waits for one person to raise something on theirs, and gives that report a number, an owner, a stage and an audit trail. The two sit in the same account but share no data: a Speak Up case never appears in survey results, and a survey response never becomes a case.
No. The reporting mode is locked at the moment of submission and cannot be changed afterwards by anyone, including administrators. There is no unmasking path built into the product, which is what makes the anonymous mode meaningful rather than a setting someone could quietly reverse.
Through the case itself. Messages are exchanged against the report number rather than a person, so a handler can ask a follow-up question and the reporter can answer, all without a name. The reporter reads and replies by logging back in with their report number and password, or by opting into an email notification that tells them something has changed.
No. A notification email is optional, stored encrypted at rest, and held in a separate table that is deliberately not linked to the case for handlers to browse. There is no screen, export, report or API response on the handler side that shows it. The system decrypts it only to send mail, and the reporter can change or delete it at any time.
They lose access to that case conversation, and the organisation cannot recover it for them. This is deliberate: any recovery process would have to identify the person asking, which would defeat the anonymity it was protecting. The submission form offers a confirmation PDF so both can be saved somewhere safe at the point they are issued.
Not through the case record, which holds no name and no email. There are real edges worth naming instead: what a reporter writes can identify them, an attachment can carry their name in its metadata or contents, and an IP address is captured at submission for abuse prevention and kept in the audit metadata rather than the reporter fields. An IP points at a network rather than a person.
Yes, if they set a password when they submit. That is what gives them a way back into the case to read and answer messages. An identified reporter who skips it still hears from the team, by email, but cannot reply inside the case, so two-way conversation needs the password in both modes.
The case team has seven days to acknowledge a report and three months to give feedback, the timelines the EU Whistleblower Directive sets. Both are set on the case automatically, and the team is flagged if either slips, whether the reporter is anonymous or not.
No, it is a setting. An administrator can turn identified reporting on or off for the organisation, and when it is on they can optionally require email OTP verification for it. Some organisations run anonymous only; others offer both and let the reporter decide case by case.
See the reporter's portal and the case team's side on a walkthrough with our team.