More reports arrive ready to investigate
Echo asks for missing details while the reporting channel is still open, so investigators get the information they need from the start.
Before it became a headline, it was a report.
Pav Gill has been the whistleblower, the lawyer and the investigator. Confide is that experience, built into software.
Book a demoAs seen in
“The global leaders in whistleblowing software”
From first report to final resolution.
Simple enough to use,when speaking up is hard.
9:41● ◒
1 of 2What would you like to report?
Choose the closest match.
You can change this later. Choose "Something else" if none of these fit.
◎Conflict of interest◇Harassment▣Fraud or theft+Health & safety…Something else
01 / 09Choose the type of concern
AI that works across the whole investigation.
Confide improves report quality, finds links across cases and guides your team through investigations faster.
1 / 3
Better reports.Faster investigations.More trust.
Less time spent on investigations
Confide takes care of routine casework, giving your team more time to investigate and make decisions.
A speak-up programme people trust
A simple, secure reporting experience shows employees that speaking up is safe and their concerns will be taken seriously.
Checkback rates above the industry benchmark
Clear updates and secure return access give reporters a reason to come back after they submit a concern.
See your price before the sales call.
Everything between report received and case closed.
Take reports through any channel, investigate them, query your case data and control access from one system.
Intake
Accept reports through forms, voice or API. Reporters can stay anonymous and choose their language.
- Forms, voice and API
- Anonymous reporting
- Reporter-selected language
Reporting channels
LiveFMFormsWeb and embedded
VCVoiceSecure transcription
APIAPIConnected intake
Anonymous reportingIdentity stays protected
OnReporting languageChosen by the reporter
AnyCase management
Keep the report, evidence and every anonymous message in one case file through resolution.
- One complete case file
- Evidence management
- Anonymous messenger
Case CN-2041
Under reviewEvidence
PDF
Invoice.pdfAdded to case
✓TXT
Interview notesInvestigator record
✓IMG
Supporting imageReporter upload
✓Anonymous messenger
Analytics
Ask questions in plain language, use ready-made dashboards or connect case data through the API and MCP.
- Ask your case data anything
- Ready-made dashboards
- API and MCP connectors
Ask Confide
Case dataShow cases with related people or entities
Connected casesPattern found
DashboardsAPIMCP
Security
Catch assignment conflicts, control access by role and preserve an audit trail that cannot be changed.
- Automatic conflict checks
- Role-based case access
- Immutable audit trail
ISO 27001SOC 2GDPRPDA
Case controls
ProtectedConflict detectionChecked before assignment
ClearAdvanced rolesCase-level permissions
RestrictedAudit trailEvery action recorded
ImmutableRecord verifiedJust now
Would your programme withstand scrutiny?
Start with the programme you already have. Our whistleblowing specialists review how a report moves from intake to closure, then configure Confide around your team, risk profile and goals.
Review your programmeWill people trust it enough to report?
We find the points where a reporter may hesitate, leave the process or take the concern outside.
Can your team act on what arrives?
We look for missing information and handoffs that slow an investigation before it gets moving.
Is the process consistent and audit ready?
We review how access, handoffs and decisions are recorded so each case follows a clear, repeatable process.
Whistleblowing requirements, by jurisdiction.
01 / 8
Australia
Australia has separate rules for corporate, tax and public sector reports. Where a person reports, who can see it and what happens next all matter.
Corporations Act 2001, Part 9.4AAA
Protects eligible corporate whistleblowers, limits disclosure of their identity and bans victimisation. Certain companies must also maintain a whistleblower policy.
Taxation Administration Act 1953, Part IVD
Covers qualifying disclosures about tax affairs and defines who may receive them.
Public Interest Disclosure Act 2013
Covers disclosures and investigations across Australian Government agencies, Commonwealth companies and public authorities.
02 / 8
European Union
EU organisations may need to support protected whistleblowing and complaints about human rights or environmental harm. Member states apply the rules through their own laws.
Whistleblower Directive (EU) 2019/1937
Requires many organisations to offer secure internal reporting, keep reports confidential, acknowledge receipt and respond within set timeframes.
Corporate Sustainability Due Diligence Directive
Requires organisations within scope to provide clear, accessible ways to raise concerns about human rights and environmental harm.
General Data Protection Regulation
Governs how personal data in reports and investigations is collected, accessed, stored and transferred.
03 / 8
Japan
Larger organisations in Japan must provide an internal reporting system and protect the people who use it. Further changes take effect late in 2026.
Whistleblower Protection Act
Organisations with more than 300 regular employees must have a system for receiving and handling internal reports. Smaller organisations are expected to make reasonable efforts.
2025 Whistleblower Protection Act amendment
Takes effect 1 Dec 2026Strengthens whistleblower protection and the duties placed on organisations when it takes effect on 1 December 2026.
Act on the Protection of Personal Information
Governs personal information held in reports, evidence and case records.
04 / 8
Malaysia
Malaysia protects qualifying disclosures made to enforcement agencies. Internal programmes still need clear routing, strict confidentiality and careful data handling.
Whistleblower Protection Act 2010
Provides confidentiality, immunity and protection from detrimental action when a qualifying disclosure is made to an enforcement agency.
Whistleblower Protection (Amendment) Bill 2025
Passed in 2025Passed by both houses in 2025 to revise the protection framework. Organisations should review their programmes as implementation details develop.
Personal Data Protection Act 2010
Governs how personal data is processed, secured, retained and disclosed in commercial transactions.
05 / 8
Philippines
Corporate, public sector and privacy laws all shape whistleblowing in the Philippines. The right process depends on the report.
Revised Corporation Code, Section 169
Prohibits retaliation against whistleblowers who provide truthful information about violations under the Code.
Data Privacy Act of 2012
Governs the collection, use, storage and protection of personal and sensitive information in the public and private sectors.
Anti-Graft and public sector conduct laws
Republic Acts 3019 and 6713 set conduct and integrity standards for public officials and employees.
06 / 8
Singapore
Listed company rules, workplace fairness requirements and personal data duties all affect speak-up programmes in Singapore.
Workplace Fairness Act
Targeted for end 2027Will require a grievance process for workplace discrimination and harassment, confidentiality where possible and protection against retaliation.
SGX Mainboard Rules 1207(18A) and 1207(18B)
Require listed issuers to maintain independent whistleblowing arrangements, protect confidentiality and give the audit committee oversight.
Personal Data Protection Act 2012
Governs the security, retention and transfer of personal data collected through reports and investigations.
07 / 8
United Kingdom
In Great Britain, worker protection, financial services rules and fraud prevention duties can overlap. Northern Ireland has a separate framework.
Employment Rights Act 1996 and PIDA 1998
Protect workers from unfair treatment and dismissal when they make a qualifying disclosure and meet the statutory conditions.
FCA Handbook, SYSC 18
Requires certain regulated firms to maintain effective whistleblowing arrangements, protect confidentiality, keep records and oversee outcomes.
Economic Crime and Corporate Transparency Act 2023
Its failure to prevent fraud guidance includes speak-up arrangements, investigation and follow-up within reasonable prevention procedures.
08 / 8
United States
US requirements depend on listing status, the subject of the report and the regulator involved. Different rules cover accounting complaints, external reporting and programme design.
Sarbanes-Oxley Act, Sections 301 and 806
Requires listed company audit committees to provide confidential, anonymous channels for accounting complaints and protects eligible employees from retaliation.
Dodd-Frank Act and SEC Rule 21F-17
Protect external reporting to the SEC and prohibit steps that stop a person from communicating directly with the regulator.
DOJ Evaluation of Corporate Compliance Programs
Updated Sep 2024Looks at whether people trust the reporting channel, investigations are independent and prompt, cases are tracked through to outcome and reporters are protected from retaliation.
General information only. Requirements vary by organisation, sector and location.
Answers to your questions
What makes Confide different from other whistleblowing platforms?
Confide is built by people who have done the work. Pav Gill exposed Wirecard, and the wider team has run speak-up programmes, handled investigations, and worked through the legal and operational consequences of serious reports. That hands-on experience shapes the product, including AI that strengthens reports, supports investigations, and finds links across cases.
Can reporters remain anonymous and still communicate with investigators?
Yes. Reporters can remain anonymous and continue speaking with investigators through Confide's secure two-way messenger. Investigators can ask questions and provide updates without knowing the reporter's identity.
What happens when a report does not contain enough information to investigate?
Echo reviews the report as soon as it is submitted, identifies what is missing, and asks the reporter relevant follow-up questions. This gives investigators a stronger report from the beginning and reduces the need to chase information later.
Can we tailor forms, questions, and workflows by country, business unit, or case type?
Yes. You can configure reporting forms, questions, routing, permissions, and case workflows for different jurisdictions, teams, and types of concern.
How can people make a report?
People can report through a simple online form or by voice, anonymously and in multiple languages. Reports can also enter Confide through API integrations with other systems.
How does Confide prevent conflicts of interest and unauthorised access to a case?
If a user is named in a report, Confide automatically revokes their access to that case. Advanced user roles let you control who can see or work on sensitive matters, while the immutable audit trail records every access and action.
Can we manage evidence, create investigation documents, and send them for signature?
Yes. Evidence, correspondence, and decisions stay together in the case record. Compose can turn that record into an investigation summary, board paper, audit committee paper, or warning letter. You can use your own templates, edit the document, and send it for signature without leaving Confide.
Is report or investigation data used to train AI models?
No. Every AI feature is opt in and remains off unless you choose to enable it. Customer reports, case records, and investigation data are never used to train AI models.
Which security standards, privacy controls, and data residency options does Confide support?
Confide is ISO 27001 certified and has completed SOC 2 Type II assurance. The platform supports GDPR and PDA requirements. Data is hosted in Frankfurt by default, with other deployment regions available when required.
How long does implementation take?
We work to your timeline. Confide can be live within a day when speed matters, while most large enterprises complete rollout within three to six weeks.
See the product that makes people switch.
You're on the list. See you in September.