Whistleblower Software by Formalize is a secure, end-to-end encrypted platform that allows your organization to receive, manage, and investigate whistleblower reports.

Whether you are setting up the platform for the first time or taking over from a colleague, this guide will walk you through everything you need to get started.

As an administrator, you are responsible for configuring the platform so it works for your organization and your users.

This includes setting up your reporting channel, inviting your team, and making sure your security settings are in place before any reports come in.

Your reporting channel is the page your whistleblowers will see when they submit a report. Start here so your channel looks and works exactly the way you want before anyone uses it.

You can customize the design, add your logo, configure the form fields, set up the reporting categories, and adjust the language. Once your channel is ready, you can share the link or QR code with your organization.

Submit a test report through your reporting channel so you can see exactly what the whistleblower experience looks like. Click on open page.

Once your test report is submitted, open it from your Cases page and explore the case view. Familiarize yourself with the case details, the messaging function, the status fields, and the tools available to case handlers.

This is also a good time to test the secure chat by sending a reply to the reporter and checking what they see from their end.

Invite your team and assign the right roles and permissions. We recommend adding at least two administrators so there is always a backup if one person is unavailable.

Once users are added, set up your departments and configure which users have access to which cases. This ensures cases are routed to the right people from day one.

Before going live, there are two things to set up under Settings > Security: how your team will log in and how your data is protected.

Decide which login methods your users can use. By default, password login is enabled. If your organization uses Google or Microsoft, you can enable OAuth login in a few clicks.

If you use a dedicated identity provider such as Azure, Okta, AWS, or Ping, you will need to configure SAML 2.0 available in the Advanced plan.

If your organization manages users centrally through Microsoft Entra ID, you can connect SCIM to automatically provision and deprovision users in platform without managing them manually. Available in the Advanced plan

Whistleblower Software uses end-to-end encryption to protect all case data. By default, the encryption key is managed by Whistleblower Software on your behalf.

If your organization requires full control over the encryption key, you can choose to export and manage it yourself. Be aware that if the key is lost, case data cannot be recovered.

You can also review security logs to track system events such as logins and configuration changes, which is useful for compliance reporting, this is available on the Advanced plan.

Once everything is set up, take a few minutes to explore your dashboard and statistics view. This is where you will monitor incoming reports, track case progress, and measure activity over time.