<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Reporting-Channels on Whistleblowing Software</title><link>https://whistleblowing-software.pages.dev/tags/reporting-channels/</link><description>Recent content in Reporting-Channels on Whistleblowing Software</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 13 Apr 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://whistleblowing-software.pages.dev/tags/reporting-channels/index.xml" rel="self" type="application/rss+xml"/><item><title>Voice Hotline Intake: STT Pipeline for Sapin II Compliance</title><link>https://whistleblowing-software.pages.dev/posts/voice-hotline-intake-stt-pipeline-sapin-ii-compliance/</link><pubDate>Fri, 13 Mar 2026 00:00:00 +0000</pubDate><guid>https://whistleblowing-software.pages.dev/posts/voice-hotline-intake-stt-pipeline-sapin-ii-compliance/</guid><description>&lt;p&gt;A compliant voice hotline intake under France&amp;rsquo;s &lt;a href="https://www.legifrance.gouv.fr/jorf/id/JORFTEXT000045388745"&gt;Loi Waserman&lt;/a&gt;, the act that modernised Sapin II to transpose &lt;a href="https://eur-lex.europa.eu/eli/dir/2019/1937/oj/eng"&gt;EU Directive 2019/1937&lt;/a&gt;, is one pipeline, not three. Capture audio in the browser via the &lt;a href="https://developer.mozilla.org/en-US/docs/Web/API/MediaRecorder"&gt;MediaRecorder API&lt;/a&gt;, encrypt and upload it into the same report bundle as the text fields using libsodium &lt;a href="https://doc.libsodium.org/public-key_cryptography/sealed_boxes"&gt;SealedBox&lt;/a&gt; to the recipient&amp;rsquo;s Curve25519 public key, produce a draft transcript on the recipient side using a self-hosted STT model, and let the reporter verify, rectify, and approve through an anonymous one-time receipt code (never an email or phone re-prompt). The same five-stage pipeline satisfies Article 9(2) and Article 18 of the directive, France&amp;rsquo;s verify/rectify/approve cycle, and Italy&amp;rsquo;s &lt;a href="https://www.gazzettaufficiale.it/eli/id/2023/03/15/23G00032/sg"&gt;D.lgs. 24/2023&lt;/a&gt; oral-report rule. The only deltas across regimes are the consent UX wording and the retention period.&lt;/p&gt;</description></item><item><title>EU Directive 2019/1937: 12-Row Engineering Checklist for Channels</title><link>https://whistleblowing-software.pages.dev/posts/eu-directive-2019-1937-technical-checklist/</link><pubDate>Sun, 22 Jun 2025 00:00:00 +0000</pubDate><guid>https://whistleblowing-software.pages.dev/posts/eu-directive-2019-1937-technical-checklist/</guid><description>&lt;p&gt;&lt;a href="https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32019L1937"&gt;EU Directive 2019/1937&lt;/a&gt; obliges every private legal entity with 50 or more workers, and most public-sector entities, to operate an internal reporting channel that accepts written and oral reports, acknowledges receipt within 7 days, and gives feedback on action taken within 3 months (extendable to 6 in duly justified cases). The channel must protect the identity of the reporter and any third party named in the report, allow third-party operation under the same safeguards, support an in-person meeting on the reporter&amp;rsquo;s request, and avoid any form of retaliation as defined in Article 19. Translating those legal obligations into product requirements yields a 12-row engineering checklist that any reporting platform must satisfy before it can be considered compliant. As of April 2026, every clause below is still load-bearing under the directive&amp;rsquo;s text on EUR-Lex and the &lt;a href="https://commission.europa.eu/aid-development-cooperation-fundamental-rights/your-fundamental-rights-eu/protection-whistleblowers_en"&gt;European Commission&amp;rsquo;s transposition page&lt;/a&gt;.&lt;/p&gt;</description></item></channel></rss>