Branded intake
- Portal on your own subdomain or domain
- Forms per category: fraud, harassment, bribery, data breach, safety
- Works on low bandwidth and mobile
Whistleblowing and case management
Every concern heard. Every angle covered.
Whistle360 gives your staff, customers and suppliers a safe, anonymous way to speak up, and gives your team one place to investigate, act and report to the board.
- Anonymous
- Encrypted
- Audit-ready
- Multi-entity
Report through
- Web portal
- Mobile app
- USSD and SMS
- Voice hotline
How it works
Misconduct stays hidden when people don't trust the channel
Whistle360 takes a concern from first report to board report in three steps, with the reporter protected the whole way.
- 01
Report
A reporter picks a category, describes the concern and attaches evidence. File metadata such as GPS, author and EXIF data is stripped on upload.
- 02
Investigate
The report lands in your triage queue, routed by category, entity or country. If a manager is named, it goes around them automatically.
- 03
Resolve
Record findings and remediation, give the reporter feedback on time, and keep a full audit trail for the audit committee and regulators.
Anonymous by design
Reporters stay unknown. Evidence stays sealed.
People only speak up when they believe the channel will protect them. Every part of Whistle360 is built so that trust holds up.
-
No tracking
No IP addresses, device details or tracking cookies are stored against a report.
-
Private case key
Reporters follow up with a case key and password, never an email address or phone number. Nothing is pushed to their device.
-
Sealed per organisation
Each organisation's reports are encrypted with its own keys and kept apart from every other client's data.
-
Safe reporting to the board
Board and regulator packs suppress small counts, so statistics can't be used to identify a reporter.
Features
One platform for every entity you run
Each organisation gets its own branded channel and case workspace. Groups see everything in one place.
Secure reporter mailbox
- Two-way anonymous chat with the case manager
- Status updates the reporter checks with their key
Case management
- Triage queue and assignment rules
- Notes, tasks, evidence and linked cases
- SLA alerts for acknowledgement and feedback deadlines
- Redaction before sharing with legal or HR
Reporting and analytics
- Volumes, categories and time to close per entity
- Substantiation rate and trends
- Board and regulator packs as PDF
Administration
- Roles, 2FA and single sign-on with Azure AD or Google
- Workflows, templates and retention rules
Policy and awareness
- Hosted policy, FAQs and non-retaliation statement
- Poster and QR code kit for staff
- Follow-up check-ins to watch for retaliation
Who it's for
Built for organisations with a duty to listen
- Banks and microfinance banksFraud, conduct and governance concerns
- Insurers and pension schemesClaims fraud and misconduct reporting
- SACCOs and fintechsA trusted channel for staff and members
- Listed companies and state corporationsBoard and audit committee oversight
- Groups and multinationalsA separate channel per entity, one view for the group
Designed aroundISO 37002:2021EU Whistleblowing Directive 2019/1937Central bank governance guidelines
Plans
Priced by the size of your organisation
Annual subscription, hosted and supported by Smartcode Technologies. Ask us for a quote.
Essentials
Up to 250 staff
- Web portal and anonymous mailbox
- Case management
- 5 case users, 1 language
Professional
250 to 2,500 staff
- Everything in Essentials
- Single sign-on and your own domain
- 3 languages and sub-entities
- Board reports and API, 15 case users
Enterprise
2,500+ staff or groups
- Everything in Professional
- Dedicated database and your own encryption keys
- In-country hosting, unlimited users
- Group dashboards and SLA-backed support
Questions
What compliance teams ask us
Can we really not see who made a report?
If the reporter chooses to stay anonymous, no. Whistle360 stores no IP address or device details, and the reporter follows up with a case key instead of contact details. Reporters can choose to share their identity if they want to.
Where is our data hosted?
Essentials and Professional run on our secure shared platform with each organisation's data encrypted under its own keys. Enterprise clients can have a dedicated database and in-country hosting.
How long does it take to go live?
A standard setup with your branding, categories and case team can be live in under a week.
We run several companies. Do we need several subscriptions?
No. Each entity gets its own channel and case team, and group oversight users see consolidated dashboards across all of them.
Can reporters use a basic phone?
Yes. Optional USSD and SMS channels let people report without a smartphone or data bundle.
Get started
See Whistle360 set up for your organisation
We'll show you the reporter portal and case workspace with your branding and categories.
- info@smartcode.co.ke
- +254 20 3860442
- Life Ministry Building, 1st Floor, Rose Avenue, Kilimani, Nairobi