Get a walkthrough

A hotline nobody can read.

The one place where a design shortcut costs somebody their job. So it sits apart from the rest of the platform, with its own lock on the door.

Get a walkthrough

Two people who must never meet

One platform, two front doors, and a wall between them that is built in rather than switched on.

The person reporting

Opens a page on their phone. No account, no sign-up, no name unless they choose to give one. They get a reference code so they can come back, read a reply and add to what they said.

The person investigating

Sees only the case they are assigned to. Conflicts are declared up front, and nobody — including the people who run the system — can browse cases they are not on.

How the confidentiality holds

Each of these is a consequence of a rule, not a reassuring feature.

  1. The name is locked separately

    A reporter’s identity is encrypted under its own key, apart from everything else, and never written into logs, searches or reports.

  2. We cannot read the reference code

    It exists once, on the reporter’s screen. We can check a code they give us; we cannot look one up, and we cannot be made to hand one over.

  3. There is no path from case to person

    Revealing an identity is a deliberate, recorded act under a named authority — not something anyone can look up.

  4. AI never touches it

    Cases and identities are kept out of the AI entirely. Nothing is summarised, classified or drafted from them.

What the reporter sees

The portal is specified and in build. These two screens are its design, not a released product — everything else shown on this site is the working system.

Make a report

You do not need an account, and you do not have to give your name.

I want to report Financial misconduct
Tell us what happened  
Report anonymously
Give my name in confidence
Submit report
Mobile-first, with no account and no session shared with the assurance workspace. Design in build.

Your reference

WB-4K7P-92QD

Write this down now. It is the only way back to your report, and it is not stored anywhere we can read it.

Case status Under assessment
Last response 2 days ago
Add to my report
Coming back with a reference code: status and replies, still without an account. Design in build.

Where this one is

Being honest: the hotline is specified and in build on its own track, separate from the assurance modules that are working today. Its timing depends on decisions each client needs to make about how their hotline is run.

Talk to us about your hotline.

Whether you run one today or are being asked to, we will walk you through the design and where it has got to.

Get a walkthrough