The platform

Everything a sensitive case needs. Nothing it shouldn't expose.

Four engines (forms, workflows, cases and a policy registry) work together so every complaint is received privately, handled consistently and recorded permanently.

Four engines

Configured by you. Enforced by the platform.

POSH, whistleblower and grievance aren't separate products. They're templates running on the same engines, so any policy you add gets the same rigour.

Form builder

Drag-and-drop complaint forms with conditional logic. Hidden fields are cleared on submit, so nothing irrelevant is stored.

Workflow engine

Stages, transitions, role permissions, guards and SLAs, versioned so live cases are never disrupted.

Case management

Evidence, notes, statements, committee, chat and timeline, all in one place and all audited.

Policy registry

Create your own policy types or clone a template. Navigation and menus update automatically.

Confidential intake

A reporting experience people actually trust.

Public forms are mobile-first, need no login and work from a link, an intranet button or a branch QR code. Reporters can identify themselves or stay anonymous, and choose a security word to follow up later.

  • Mobile-first forms that work on any phone, tested down to 375px.
  • Direct-to-vault file uploads: evidence never passes through our servers unencrypted, and is hashed on the device.
  • Instant case number (e.g. POP-2026-00042) and a private tracking link.
  • Admin-logged cases for complaints received on paper or in person.
  • Location sealed by QR for branch-handled policies. How it works

Workflow engine

A state machine for due process.

Design workflows visually: drag stages, connect transitions, set who can act and for how long. The engine makes sure every case follows the path you approved.

  • Per-stage SLAs with automatic reminders and breach alerts.
  • Guards: committee assigned, evidence uploaded, minimum days elapsed, findings recorded, required forms submitted.
  • Mandatory comments on sensitive transitions, captured in the timeline.
  • Version-locked cases: edit a template without affecting cases already in progress.
  • Atomic transitions: stage, timeline, timers and audit update together or not at all.
SubmittedIntake
Triage5 days
Ethics committeeCOI checkedCommittee assigned
Investigation90 days
FindingsReport required
ClosedProtected retention · 8 yrs

Committees & conflict of interest

The right people on every case, and nobody who shouldn't be.

Maintain tenure-based committees for each policy and location. When a case arrives, TrustToSpeak suggests the committee, runs conflict-of-interest checks against the people involved, and assigns members, with every decision recorded.

  • Hard conflicts auto-excluded: the parties themselves, their managers, reporting chain, declared conflicts, prior involvement.
  • Soft conflicts flagged: same team or close proximity, overridable with written justification.
  • Stricter rules where the law expects it: POSH and whistleblower treat soft conflicts as hard.
  • External members get time-bound access that expires automatically when the case closes.
Suggested committee · POP-2026-00142Ready
Presiding OfficerSenior woman employee · Pune PlantClear
Member · OperationsSame shift as respondentHard COI
Member · FinanceReplacement suggestedClear
Member · HRSame buildingSoft · justified
External member (NGO)Access ends at closureExternal

Evidence vault

A chain of custody you can show a judge.

Evidence is uploaded straight to encrypted storage, fingerprinted, verified and locked down. It's view-only by default; nothing leaves the vault without a reason and a record.

  • SHA-256 hash computed on the device, verified on the server, checked again on every access.
  • Short-lived view links (10 minutes) and download links (3 minutes, reason required).
  • Encrypted file names and descriptions, so even the metadata stays private.
  • Write-once sealing at archive, so archived evidence can't be altered or replaced.
Download requestReason required
Witness_statement.pdfsha256 · 3ac1…90beVerified
ReasonRequired for submission to Local Committee under Sec. 18 appeal.
Logged to audit trail · link expires in 3:00

Communication

Keep everyone informed, without exposing anyone.

Status tracking

Reporters follow progress with their private link and security word. No account, no OTP, no exposure if a link is forwarded.

Real-time secure chat

Two-way messaging between reporter and committee, live and encrypted, including fully anonymous whistleblower dialogue.

Notifications

Email and in-app alerts for assignments, stage changes and SLA breaches, from templates you can customise per stage.

Invite-based forms

Ask a witness, new joiner or manager to fill a stage form via a secure 30-day link, with no account required.

Notes & statements

Encrypted investigation notes, statements and observations, with selected notes shareable with the reporter.

Full case timeline

Every transition, comment, assignment and upload in one chronological, tamper-evident record.

Reporting & governance

Board-ready numbers. Regulator-ready records.

Because every action is structured data, reports write themselves, from case trends and SLA health to the POSH annual report for each Internal Committee.

  • POSH annual report pack, per location and per committee.
  • Case, SLA and outcome dashboards by policy, branch and period.
  • Retention per policy with automatic archival and legal lock.
  • DPDP erasure requests with multi-person approval and full audit.
POSH annual report · FY 2025–26Auto-generated
Received18
Disposed16
> 90 days0
Mumbai HQ IC7 received · 7 disposedReady
Pune Plant IC8 received · 6 disposedReady
Bengaluru IC3 received · 3 disposedReady

Coming soon
AI-assisted intake. A guided conversation that helps reporters describe what happened in their own words and fills your form for them, with sensitive identifiers pseudonymised before anything reaches the AI, and fields you mark as restricted never shared at all.

Get started

Make speaking up safe, at every branch, from day one.

See how TrustToSpeak takes a complaint from a QR scan to a closed, audit-ready case in a 30-minute walkthrough tailored to your policies.

  • 30-minute walkthrough
  • Private sandbox
  • Live in a day