Workplace investigation software with a clock on every case
An investigation is only as good as the report it starts from and the deadline it keeps. The case side of CultureMonkey's anonymous reporting software gives every report an owner, two deadlines and a dated record of each stage, and keeps a line open to the reporter even when they stay anonymous.
Book a free, no-obligation product demo call with our experts.
How long do you have to respond to a report?
Seven days to acknowledge it and three months to give the reporter feedback, under the EU Whistleblower Directive. Most investigations do not fail on the finding. They fail on the wait: a report nobody acknowledged, or a reporter who heard nothing for months and stopped trusting the channel.
Every case carries two dates from the moment it lands, the timelines the EU Whistleblower Directive sets. Nobody has to remember to add them, and miss either one and it is flagged on the case, in the queue and in analytics.
Acknowledge the reporter
The owner confirms the report has been received and is being looked at.
Acknowledged on day 3Give the reporter feedback
What has been done about it, and what happens next, told to the reporter.
OverdueFlagged on the case, in the queue and in analyticsIllustration. Both clocks start the moment a report arrives.
Workplace investigation software with one path through every case
Five stages, the same for every category, so a harassment case and a fraud case are run the same way and reported the same way. Each move is dated on the case the moment it happens.
New
The report arrives with its category, risk level and answers, and is assigned by hand or round-robin.Triage
The owner acknowledges the reporter and decides whether it needs an investigation. A case that does not can close here.Investigation
Evidence, questions to the reporter, internal notes. Attachments open in the browser, so nobody downloads copies to read them.Concluding
The team agrees what happens next and tells the reporter, inside the 3-month window.Closed
Closed with every stage dated. A case closed too early can be reopened, and the reopening is dated too.
How do you investigate an anonymous report?
By keeping the reporter in the conversation. An anonymous report usually ends it the moment it is filed. Here the reporter keeps a report number and a password, so the case team can ask the follow-up question every investigation needs, and the reporter can answer it without ever giving a name.
Replies and the reporter's messages sit on one thread. Internal notes sit beside it and are never shown to the reporter. A report written in another language reaches the team in English, next to the original.
It was after the Thursday shift meeting both times. Two others were in the room the second time.
Written in Polish, shown in English beside the originalThank you. Could you tell us which site this was? Only answer if it would not identify you.
Shift schedules for both Thursdays requested from site HR. Interview the two witnesses once we have it.
Sample thread. The reporter answers through their report number and password, never a name.
Who can see a case while it is being investigated?
Only the people you grant it to, category by category, because an investigation is safest with the fewest people in it. Access is granted per person and per category, and it is enforced where the data is stored, so someone outside the case cannot reach it by editing a URL.
An outside investigator or your employment lawyer can join as a Speak Up-only member. They get the cases you give them and no way into anything else in CultureMonkey.
| Who | On a case in their scope |
|---|---|
| Admin | Sees every case, assigns, closes, exports |
| Member | Works it, moves its stage, closes it |
| Viewer | Reads it and replies, nothing else |
| Outside investigator | A Member or Viewer with no other access |
| Super Admin, not added | No access at all |
Show how investigations are actually run
A board does not ask whether you investigate. It asks how quickly, how many are late, and whether people trust the channel enough to use it. Analytics is on for every account.
Response times
Time to first reply and time to close, across any date range.
Overdue and due soon
The cases that have missed a clock, and the ones about to.
Monthly trend
Cases by month, by category with their risk level, and by stage.
Reports per 100 employees
Your rate from the headcount CultureMonkey already holds, and the share who stayed anonymous.
Sample figures. The median is the most widely published benchmark (NAVEX, 2025 data).
What HR and compliance teams ask about investigations
Software that runs an internal investigation from the moment a concern is raised to the moment it is closed: who owns the case, what stage it is at, what the reporter has been told, and when each step happened. In Speak Up that means a case queue with five stages, an owner, a 7-day acknowledgement and 3-month feedback deadline on every case, a dated record of each stage, and a private thread with the reporter.
Both are set automatically the moment a report arrives: seven days for the case team to acknowledge the reporter, and three months to give them feedback, the two timelines the EU Whistleblower Directive sets. A case that misses either is flagged on the case itself, in the queue and in analytics. Whether your programme complies also depends on your policy and your national law.
Yes. The reporter keeps a report number and a password they set themselves, and comes back with them to read your questions and answer. The investigation can go back and forth as many times as it needs to without a name ever being attached. If the reporter loses both, the case cannot be recovered for them, which is what keeps it anonymous.
Yes. Add them as a Speak Up-only member with the role and categories they need. They get their own sign-in to the case portal and no way into surveys, engagement results or anything else in CultureMonkey.
Reopen it. The case goes back into the workflow with its history intact, and the reopening is dated alongside every other stage change, so nothing about the first close is lost.
Yes. The reporting portal runs in any of the more than 100 languages CultureMonkey supports, and every report and message reaches the case team in English beside the original, so nothing is lost to a translation nobody can check.
Not as a single file per case. Analytics exports to a spreadsheet for reporting, and every stage change and message is recorded on the case in the product. If counsel needs to review a case, the usual route is to add them as a Speak Up-only member so they can read it where it is.
Yes. Speak Up cases sit inside the same SOC 2 and ISO 27001 scope as the rest of CultureMonkey, so a team that has already reviewed us for engagement surveys does not start a second security review for investigations.
See a case run from report to close
Walk through the clocks, the stages and the reporter thread with our team.