🡠Back to blog
Compliance
True anonymity in whistleblowing channels: what to consider before hiring them.
Not all anonymous channels are truly anonymous. Consider the technical criteria that distinguish serious solutions from empty promises.
Many platforms claim to be anonymous, but they store IP addresses, file metadata, or use forms hosted by providers that log the origin of the request.
A truly anonymous channel needs to remove metadata (EXIF, document author), discard IP and User-Agent information, and operate with encryption in transit and at rest.
In VCReport, not even our engineering team can technically identify a whistleblower who chooses anonymous mode — an essential requirement under Law No. 93/2021 and the GDPR.
