Speak Up

Anonymous and confidential whistleblowing channel with a designated adviser panel, statutory acknowledgement and feedback clocks, and an auditor-ready register.

MangoApps

Book a walkthrough Ask AI Download datasheet

Overview

Speak Up is a protected-disclosure channel built for the EU Whistleblowing Directive (2019/1937) and its national transpositions: anonymous or confidential intake open to employees and — through a public portal on your tenant's own domain — to ex-employees, contractors, suppliers, and applicants.

Reports go only to a designated adviser panel you choose. Business admins configure the channel but can never read cases — the plausible subject of a disclosure is an admin, so the usual admin-sees-everything rule is deliberately inverted. An anonymous reporter keeps a one-time reference code that opens a two-way thread: the panel asks follow-up questions, the reporter answers, and no identity is ever stored.

Statutory clocks run automatically — acknowledgement within 7 days, feedback within 3 months (both configurable) — with panel alerts on breach. Closing a case starts the retention clock; past it, content is purged while the minimal register row an auditor needs is kept. Psychosocial cases can be referred into Safety Hub as incidents with nothing identifying carried across.

Workplace Ops

Highlights

Route every report to a designated adviser panel that administrators cannot see past — every case read is logged.

Collect anonymous, confidential, or open reports from employees, and from outsiders via a public portal on your own domain.

Keep a two-way anonymous dialogue open through a one-time reference code — no account, no identity ever stored.

Run the Directive's acknowledgement and feedback clocks automatically, with panel alerts on breach.

Keep an auditor-ready register that purges content on schedule while preserving the record an auditor needs.

Refer psychosocial cases into Safety Hub as anonymous incidents feeding the shared CAPA register.

Capabilities

Intake & Anonymity

Anonymous, confidential, or open reporting modes (tenant-configurable)
Anonymous mode stores no reporter identity — ever
Public portal intake for ex-employees, contractors, suppliers, and applicants (Directive Art. 4)
One-time reference code (12-character, unambiguous alphabet) as the reporter's only credential
Mobile reporting surface — submit and follow up from a phone
The public portal runs on your own tenant web address and carries your branding
Evidence attached to a case by the panel, on open cases only
Attachments stripped of location, capture time and device before storage
The EXIF strip is not a tenant setting and cannot be switched off

Adviser Panel & Access Segregation

Designated adviser panel — the only people who can read cases
Business admins configure the channel but can never read cases
Per-case grants to bring an investigator into one case (with expiry + audit trail)
Grants are revocable at any time and every change is audited
Every read of a case body is recorded in an append-only audit trail

Statutory Clocks & Dialogue

Acknowledgement clock (default 7 days, Art. 9(1)(b)) with panel breach alerts
Feedback clock (default 3 months, Art. 9(1)(f)) with panel breach alerts
Two-way anonymous dialogue — panel asks follow-ups, reporter answers via the reference code
Retaliation flagging (Art. 19) with a 30-day follow-up cadence until the case closes

Case Handling

Nine report categories, from harassment and discrimination to fraud, data protection and environmental
A case moves new, acknowledged, investigating, then closed or referred
Closing requires a reason — substantiated, unsubstantiated, insufficient information, withdrawn, referred externally or duplicate
Named reporters follow their own reports in-app without going through the code lookup
A reporter holding a reference code keeps thread access even if the tenant later clears its panel
Breach alerts fire once per breach, and only record as sent when one actually went out

Register, Retention & Integration

Auditor-ready register (Art. 18) with step-up-verified CSV export
Retention purge — content cleared after the configured period, register row kept
Refer a case into Safety Hub as an anonymous incident with nothing identifying carried across
Referred cases feed the same corrective & preventive action (CAPA) register as physical incidents
Notifications carry category + reference only — never the report body
Step-up verification on register export is on by default and can be required by policy
Creating a Safety Hub incident on referral is a tenant setting, on by default

Limits & Specs

Reference code format: 12 characters, unambiguous alphabet (no 0/O/1/I/L)
Acknowledgement window: 7 days default, configurable 1–30
Feedback window: 90 days default, configurable 7–180
Retention after closure: 60 months default, configurable 1–240
Reporting modes: Anonymous, confidential, open (tenant-configurable)
Public intake rate limit: 5 submissions per hour per IP
Pricing: $22 per operational seat / month — included in the Safety & Compliance Pack, or licensed standalone

Use cases

Psychosocial safety reporting

Inappropriate behaviour, harassment, and bullying reports reach a confidential adviser instead of dying in a manager's inbox — and can be referred into Safety Hub so psychosocial and physical safety share one operational system.

EU Directive compliance

Companies with 50+ employees in EU member states must operate an internal reporting channel. Speak Up is that channel, on the platform your frontline already uses.

Supplier and ex-employee disclosures

The public portal on your own domain accepts reports from people who have no MangoApps login — contractors, suppliers, applicants, and former employees.

Retaliation monitoring after a report

A reporter whose hours or treatment change after speaking up flags retaliation on the open case; the panel is re-alerted every 30 days until the claim is resolved.

The audit nobody had to prepare for

A regulator or certification body asks how disclosures were handled. The register answers it directly — every case with its reference, category, dates, status and closure reason — without anyone reopening report bodies that should already have been purged.

A case that needs a specialist

A fraud disclosure needs someone from Finance who is not on the panel. A per-case grant brings them into that one case with an expiry, and revoking it later is one click — with both actions on the record.

Resources

Speak Up Datasheet (PDF)

Datasheet

Features, capabilities, licensing model, and FAQ on one downloadable sheet — share it with your compliance team.

FAQ

No. Only members of the designated adviser panel (and people they explicitly grant into a specific case) can open a case. Business admins configure the channel — the panel, the clocks, retention — but case content is never visible to them. Every read of a case body is itself logged.

Yes. In anonymous mode no user reference is stored on the case, replies carry no identity, and the reporter's only credential is a one-time reference code shown once at submission. The code travels in form posts, never URLs, and looking up a wrong code is indistinguishable from looking up a right one.

Speak Up implements the Directive's operative mechanics — acknowledgement within 7 days, feedback within 3 months, intake beyond current employees, a retained register, and retaliation flagging. National transpositions differ; confirm your configuration (especially retention) with counsel.

Surveys' anonymous feedback is a pulse channel — workload, communication, culture — read by HR with no legal clock. Speak Up is for protected disclosures: wrongdoing, harassment, retaliation. It has a designated panel, statutory deadlines, a register, and retention rules. If it could end up in front of a regulator, it belongs in Speak Up.

An automatic purge clears the report body, the message thread and any evidence, while keeping the minimal register row — reference, category, dates, status, outcome. Deleting the row would destroy the Article 18 register; keeping the content would breach retention. Sixty months is the default; confirm the right value for your jurisdictions with counsel.

Yes, through a per-case grant — an investigator or specialist gets access to that single case, never the case list. Grants carry an expiry, are revocable at any moment, and every grant, revocation and case-body read lands in an append-only audit trail.

If they filed confidentially or openly while signed in, yes — their reports appear in-app under My Reports. Anonymous reporters and anyone reporting through the public portal use the twelve-character reference code instead, which is the only credential that exists for those disclosures.

Panel members, and by default the export requires step-up verification — re-authenticating at the moment of export rather than relying on an old session. Tenants can require it by policy. Exporting is treated as a sensitive action precisely because the register is the one artefact that outlives the case content.