Document summary
This page explains reporting channels, independence, confidentiality, non-retaliation, triage, investigation, action, and escalation, separate from Support and Council.
What to report
Report suspected fraud, bribery, access abuse, concealed conflict, data violation, harassment, record manipulation, or material policy breach. Complete proof is not required for a good-faith report.
Channels
Restricted internal, management, security, and privacy channels are available by subject. When the report concerns the channel owner, it routes to a predefined alternative reviewer.
Confidentiality
We collect minimal information and share on a need-to-know basis. Absolute confidentiality is not promised where investigation or law requires disclosure, but scope is explained and identity protected where possible.
Non-retaliation
Retaliation against a good-faith reporter or investigation participant is prohibited. Employment actions close to a report are reviewed for rationale and retaliation is treated as a separate violation.
Investigation and independence
Triage assesses severity, investigator conflict, evidence at risk, and urgent protection. Evidence chain of custody is documented, relevant parties are heard, and a suitable response opportunity is provided.
Action and follow-up
Action is proportionate to facts, impact, history, and policy, with remediation separated from discipline where needed. An independent owner follows remediation and closes the case with evidence.
Versions
Change log
- Version 1.0.0
Published the first operational version with clear scope, responsibilities, rights, and escalation routes.