Skip to main content
Whistleblower Protection · Case

Receive and review a report

Updated on 5 min Open in Cenedril

Goal Take in an incoming report, acknowledge receipt on time, redact details without relevance, assign responsibility, review scope and plausibility and stay in contact with the reporting person.

The reporting office handles every report on the case page, which guides the process in six phases: Intake, Responsibility, Review of the report, Follow-up measures, Execution and Closure. This guide covers the first three: acknowledge receipt on time, check the details for relevance, assign responsibility, and establish scope and plausibility. Through the thread the reporting office stays in contact with the reporting person in every phase.

Keep track of cases

Open the case list

Open Wizards → Whistleblower Protection. As a person of the reporting office you see the state of the portal at the top, below it the figures Cases total, Open, Awaiting reply, Acknowledgement overdue and Feedback overdue, and the list of cases with channel, subject, receipt, state of the acknowledgement, feedback deadline and assigned person. The Filters narrow by Status, Assigned person and Overdue.

The case list of the reporting office: figures with the overdue deadlines, below them every case with its state.

Open a case

Click Open case in a row. The case header names the identifier, channel, receipt and state, below it the running deadline with a clock: first the acknowledgement, after it the feedback. The line below names the assigned person and the next reminder. Under the header sits the phase bar; each phase opens with a click and says at its top what is still open in it.

The header of a case with the running deadline, the assigned person and the next reminder; below it the six phases.

Acknowledge receipt

Send the acknowledgement

In the Intake phase the acknowledgement card shows the deadline. Click Acknowledge receipt. The window proposes a text you can adjust; Send acknowledgement sends it as a message to the reporting person. With the acknowledgement the feedback deadline starts.

The acknowledgement window with the prefilled text that goes to the reporting person as a message.

Check details for relevance

The Report card shows the report text, the subjects, whether the information was obtained in a professional context, the address for notifications and the person’s language. Check every detail for its connection to the reported facts. If everything is relevant, click Checked, nothing to redact; the card then carries Relevance checked. If the text holds a detail without connection, such as a name mentioned in passing, click Redact data, mark the passage, choose the reason and confirm. The same applies to every message of the person in the thread.

The redaction window: the text of the report, the marked detail and the reason. The passage then carries a mark, in the portal too.

Record named persons

In the Named persons card use Add person to record everyone who is the subject of the report, is named in it, has supported the reporting person or is connected with them. Names from this list do not leave the reporting office. If an entry points to the account of a designated person, the card reports a possible conflict of interest.

Assign responsibility

Assign the responsible person

Open the Responsibility phase. In the card Responsibility and access click Assign or Reassign and choose a person of the reporting office. They carry the case until closure. How to bring in a supporting person for a limited time is described in the guide on access.

Review the report

Establish the scope

Open the phase Review of the report. The card of the same name has two steps: 1. Scope and 2. Plausibility. Click Check scope. In the window record the kind of information and of breach, the professional context and the subjects; what the reporting person chose is prefilled. For some subjects the law asks an additional question, for others it knows priority reporting procedures. Under protected secrets you note trade secrets or confidentiality duties. As the Result choose Within the scope or Outside the scope with an exclusion ground or a reason.

The scope check window, prefilled with the reporting person's details. The legal references follow the country of the reporting office.

Establish plausibility

Once the report is within the scope, Check plausibility becomes available. A report is plausible when it is concrete (who, what, when, where), coherent in itself and offers leads that can be followed up. Record Plausible or Not plausible with a reason. Both steps then show when and by whom they were recorded and can be updated with Check again.

The completed review: within the scope with subjects and reason, plausible with reason.

Stay in contact with the reporting person

Send a message or an inquiry

Below every phase you find the section Contact with the reporting person with the Thread; the button at the bottom of the screen jumps there. Choose a Message, an Inquiry or an internal note under Type, write the text, add attachments if needed and click Send. The person reads the message in the portal; if they left an email address, they receive an email without content saying that a message is waiting. An inquiry sets the state to Awaiting reply.

The thread with the reporting person: acknowledgement and inquiry, below them type, text and attachments of the next message.

Result: Receipt is acknowledged, the details are checked for relevance, an assigned person carries the case, and scope and plausibility are recorded with reasons. The Follow-up measures phase is open; the next guide describes how to continue there. Every step appears in the Protocol at the end of the page.

Frequently asked questions

Which deadlines apply to the reporting office?

In Germany the reporting office acknowledges receipt within seven days at the latest and gives feedback within three months of the acknowledgement at the latest (§ 17 HinSchG). For another country the deadlines of its transposition act apply, for example working days or a different start. The header of every case shows the running deadline with a clock, the case list the overdue ones.

Am I reminded of deadlines?

Yes. Cenedril reminds the designated persons before the acknowledgement and the feedback are due and reports an overrun. The reminders appear under Notifications and in the protocol of the case; the case header names the next reminder.

What does “Redact data” mean?

The reporting office checks every detail of the report and the messages for its connection to the reported facts. What has no connection, such as a name mentioned in passing or a private detail, it removes with a reason. The text shows a mark in its place, the reporting person sees it in the portal too, and the protocol records when and why it was redacted.

What if I am biased?

“Biased” in the case header declares the bias with a reason. The case passes to another person of the reporting office, and your access to it ends.

What if the report does not fall under the law?

Record “Outside the scope” in the review with an exclusion ground or a reason. Follow-up measures are then locked, the case stays in the protected area of the reporting office, and after the feedback to the person you close it.