How it works

What happens to a report from the moment you submit it.

1. You submit a report

Six short steps: what happened, which office, the details, any evidence, how to handle your identity, and a final review. You can stay anonymous — no account, email or phone number is needed. You receive a reference (like SUH-7KQ4-M2XD) and a private tracking code. We only ever store a scrambled (hashed) version of the tracking code, so we can't recover it if you lose it.

2. Automatic checks

Before a person reads it, the system checks for spam and abuse (for example, the same text submitted repeatedly), scans evidence files for malware, strips location data from photos, and encrypts everything. These checks only help moderators prioritise; no report is rejected or published automatically.

3. Human review

A trained moderator reads the report and may:

mark it Under review while checking details;
set it to Evidence requested and leave a note you can read with your tracking code;
link it to similar reports, or flag conflicting information;
mark it Corroborated when independent evidence or several unconnected reports support it;
record a Referral to an oversight body such as the Office of the Ombudsman;
mark it Disputed if credible information challenges it, Closed when review ends, or Rejected if it's spam or out of scope.

We never automatically forward reports to the agency named in them.

4. Redacted publication

If you allowed publication, a moderator writes a separate public version: names, ID numbers, exact addresses and anything that could identify you or an individual employee are removed, dates are reduced to the month, and the location is shown only at a level that can't single you out. Your original report is never published, and evidence files are never public.

5. Statistics

Reports (except rejected ones) count toward the dashboard and map. Any group smaller than three reports is hidden. Read the methodology.