Designed around scientifically grounded principles

People only share concerns when they trust that doing so will not have negative consequences for their position or relationships.

How Soterna applies this: a guided intake with reversible steps, the choice between reporting anonymously, confidentially or by name, intake without any IP address being recorded, and the independent Neutral Line for talking things through outside the organisation first.

People stay silent when they judge that speaking up is pointless or risky: what will it gain me, and what will it cost me?

How Soterna applies this: multiple routes via the Safe Route Advisor, visible follow-up and encrypted two-way messaging, including for anonymous reports via a SOT reference with an access code that never appears in the URL.

People judge a process above all on its fairness: consistency, impartiality, explanation and being heard.

How Soterna applies this: monitored deadlines (acknowledgement within 7 days, feedback within 90 days for formal whistleblowing reports), independent case handlers via Conflict of Interest Routing and seven validated statuses with a mandatory closure reason.

Confidentiality is only credible when who-sees-what is technically enforced, not merely promised.

How Soterna applies this: role-based access following least privilege (HR and board roles see only reports, never case content), a separate Identity Vault for the reporter's identity and an append-only log that records every access.

In a small team, the content of a report can still make someone identifiable: anonymity has to hold up in practice, not just on paper.

How Soterna applies this: the Privacy Coach flags traceable names, departments or file names before the reporter shares, and board reports are k-anonymous with a hard minimum group size of seven, including in exports.

Reporters' greatest fear is not the report itself, but what comes after: disadvantage, isolation or subtle retaliation.

How Soterna applies this: Retaliation Watch invites the reporter to a safety check-in after a few days, with fixed answer categories; a retaliation signal raises a content-free flag for the case handler, and the recorded follow-up demonstrates that the duty of care has been met.

Organisations only improve when signals are systematically translated into insight and action, not report by report.

How Soterna applies this: Trust Gap Analytics, PSA/RI&E mapping and action plans translate aggregated themes into policy, never linked to individual reports; Trust Intelligence (Enterprise) detects early signals on aggregated metadata only, with human-in-the-loop review.

Boards need information, but board access to individual case files undermines precisely the trust on which reporting depends.

How Soterna applies this: Board Safe Reporting delivers aggregated, k-anonymous insight into climate and risk; conflict cases stay out of every aggregation, and break-glass access applies only to configuration or case counts, with a stated reason and time limit, never to content or identity.