PROJECT / Custom Software
EthicSafe
EthicSafe is Code64’s ethics reporting SaaS platform for organizations. Employees and stakeholders can submit reports without creating an account and use a tracking code and password to continue communicating with authorized staff without sharing their identity.
- Category
- Custom Software
The challenge
Privacy and follow-up
Concern about being identified can make employees and stakeholders reluctant to report problems. Hidden information in uploaded files and technical records kept by the application also matter in this process.
Organizations need to route reports to authorized staff, request additional information when needed and track investigations. We developed EthicSafe to address reporter privacy and organizational case management together.
What we built
- 01
Account-free reporting
Employees and stakeholders can submit reports without creating an account. IP addresses are not stored on the anonymous reporting side, and the process is designed to reduce identifying technical traces.
- 02
Privacy-focused file processing
Metadata fields that may identify users are removed from images and Office documents, and filenames are anonymized. Files are scanned for malware.
- 03
Follow-up and anonymous communication
A tracking code and password allow reporters to return to a report, answer questions from authorized staff and add documents without sharing their identity.
- 04
Access control and accountability
Role-based permissions, audit logs and user-linked screen watermarks support the organization’s investigation process. Sensitive report content is stored encrypted.
The solution
From reporting to follow-up in one platform
Submitting a report in EthicSafe does not require an account. Users can describe an incident and attach supporting documents. A tracking code and password allow them to return to the report later.
Authorized staff can ask follow-up questions, while reporters can reply and upload new documents without sharing their identity. Each report becomes a communication channel that continues throughout the investigation.
A configurable SaaS product for organizations
We designed EthicSafe as a Code64 product that supports multiple organizations, each with its own administration area. Organizations can configure reporting categories and workflows around their needs and restrict staff access by role.
The platform has been developed with support for Turkish, English and German.
Platform scope
| Area | Scope |
|---|---|
| Reporting and follow-up | Account-free submission, tracking code and password |
| Communication | Messaging and additional documents without identity disclosure |
| File processing | Image metadata cleanup, filename anonymization, Office comment and metadata cleanup, malware scanning |
| Data protection | No IP storage on the anonymous reporting side, encrypted content and separate key management |
| Organizational accountability | Role-based access, audit logs and user-linked screen watermarks |
| Organization management | Organization-specific categories and workflow settings |
Preparing for launch
Development of EthicSafe is complete. Built on Google Cloud infrastructure, the product is being prepared for launch and commercial availability.
Let’s bring your SaaS idea to life
Let’s explore your product idea, user needs and technical requirements together.
Privacy and security layers
IP addresses are not stored on the anonymous reporting side. Traffic passes through Cloudflare, while identifying network information is kept out of the application’s report records.
EXIF and metadata fields are removed from uploaded images, and filenames are anonymized. Comments and metadata that may contain user information are removed from Office documents, and files are scanned for malware. These steps aim to reduce the risk of unintentionally sharing identifying information through files.
Sensitive report content is stored encrypted in the database. Encryption keys are managed separately from the application database through Google Cloud.
Organization-side access is restricted by role, and user actions are recorded in audit logs. User-linked watermarks on report detail screens support traceability of access to sensitive content.
Measurable impact