Encryption at rest
AES-256-GCM with per-tenant keys derived from a Worker secret. Report text, contacts, evidence, and case notes are encrypted before storage.
Privacy-First Whistleblower Intake & Compliance SaaS
Institutional Integrity.
Zero Compromise.
A high-assurance, privacy-first whistleblower intake and statutory compliance platform for sovereign institutions, anti-corruption bodies, and regulated enterprises. Encrypted by default, rate-limited, and deployed with a guided security review.
Private Intake & Evidence Integrity
Privacy-First Ingestion & Evidence Sanitizer
A high-assurance, zero-log data pipeline. Ingress origin, timestamps, and network history are physically purged at the edge while digital evidence is sanitized in-browser.
Live Test Sandbox
Interactive Cryptographic Voucher Minting
Test client-side pseudonymity in real-time. Generate a high-entropy tracking code without providing any personal data.
Zero user accounts • No phone, name or email required
Cryptographic Voucher Minted • Zero Personal Trace
ISO 37002 LOGICALLY ISOLATED
CV-2026-9842-XF
Store this alphanumeric key securely. Use it in the Check Status / Reply tab to read encrypted replies from statutory investigators without ever creating an account.
AES-256-GCM SEALED • ENCRYPTED SECRET STORE • PRIVACY-FIRST
Frictionless Whistleblower Journey
Minimal Steps Architecture
Designed to remove unnecessary friction: no account creation for anonymous reports, encrypted intake, and a verifiable outcome.
01
Private Reporting
Reporters submit in their preferred language. Anonymous reports require no account, email, or phone number. Raw IP addresses are not stored by the application.
02
Private Tracking Code
A server-generated case ID and high-entropy tracking code let reporters follow the case without an account.
03
Two-Way Dialogue & Resolution
Authorized compliance teams can request clarifying evidence through the tracking channel. Anonymity depends on the privacy mode the reporter chooses.
Public Incident & Accountability Directory
Public Case Registry & Stage Transparency
Real-time visibility into how submitted allegations are triaged, investigated, and verified with tamper-proof audit trails and stage indicators.
#CV-2026-082
Active Investigation
Financial Discrepancy & Fund Misappropriation
Informant submitted unbudgeted expenditure receipts with anomalous ledger variances exceeding statutory procurement thresholds.
Stage 3 of 4: Formal Statutory Investigation
75%
#CV-2026-094
Resolved & Verified
Unauthorized Procurement Tender Allocation
Allegation of vendor favoritism and split contract awards circumventing standard statutory competitive tender requirements.
Stage 4 of 4: Verifiable Resolution & Sanctions
100%
#CV-2026-107
Under Triage
Institutional Asset Declaration Discrepancy
Unreported official asset transfer reported via anonymous intake with corroborating public registry filings.
Stage 2 of 4: Institutional Evidence Triage
50%
Statutory Oversight Integration
Automated Dossier Generation for Legal Authorities
When internal compliance triages actionable malfeasance, ClearVoice instantly generates cryptographically sealed audit dossiers ready for submission to anti-corruption commissions and prosecutors.
- Tamper-evident audit records stored in the tenant database.
- Redacted informant data protecting whistleblowers from physical, administrative, or legal reprisal.
- Full compliance mapping to ISO 37002 and sovereign statutory prosecution formats.
Statutory Evidentiary Seal
SHA-256 SIGNED
Target Authority:
Commission to Investigate Corruption
SHA-256 Audit Seal:
9f8e4b2a...3c11d087
Chain of Custody:
Tamper-Evident D1 Record
Compliance Standard:
ISO 37002 Whistleblowing System
🔒 Tamper-Evident Audit: Administrative actions are appended to a per-tenant SHA-256 hash chain. Deletion is governed by retention policy and legal hold, and every access is audited.
Enterprise Security Architecture
Enterprise Security Architecture
Every layer of ClearVoice is engineered to protect informants from retaliation and support compliance integrity for sovereign bodies.
SOVEREIGN DEFENSE PROTOCOLS
Built for Sovereign Anti-Corruption Bodies
Six foundational cryptographic and statutory pillars supporting non-repudiation, informant safety, and legal chain of custody.
1.1 // PRIVACY-FIRST INGESTION
Privacy-First Edge Ingestion
Client IP telemetry, browser signatures, and device fingerprints are physically scrubbed at the edge before any database transaction occurs.
Learn more >
CLIENT_IP: DROPPED (0b) • EXIF: PURGED @ BROWSER • TCP: SCRUBBED
1.2 // PER-TENANT KEY ISOLATION
Two-Way Cryptographic Receipts
Whistleblowers receive client-minted high-entropy tracking voucher keys. Zero user accounts, emails, or phone numbers are ever persisted in memory or storage.
Learn more >
PROTOCOL: DOUBLE-RATCHET V2 • VOUCHER: CLIENT-MINTED • ACCOUNTS: ZERO
1.3 // STATUTORY CHAIN OF CUSTODY
Statutory Escalation Triage
Authorized compliance teams review evidence, generate SHA-256 hash-chained audit records, and escalate directly to statutory bodies with chain-of-custody.
Learn more >
AUDIT_SEAL: SHA-256 HASH CHAIN • ISO 37002-ALIGNED • LEGAL TENDER
1.4 // DEDICATED SECRET STORE
Dedicated Sovereign Secret Store
Per-tenant AES-256-GCM keys are derived from a Worker secret. The master key is stored in Cloudflare's encrypted secret store and is never committed to the repository.
Learn more >
AES-256-GCM • HKDF PER TENANT • SECRET STORE
1.5 // TAMPER-EVIDENT AUDIT LOG
Hash-Chained Audit Log
Hash-chained event streaming where any tampering invalidates all subsequent block hashes, supporting a tamper-evident audit trail.
Learn more >
HASH-CHAINED STREAM • SHA-256 HASH CHAIN • TAMPER-EVIDENT
1.6 // EDGE THREAT NEUTRALIZATION
Automated Threat Neutralization
Edge-native WAF and behavioral anomaly detection instantly mitigate DDoS floods, credential stuffing, and adversarial reconnaissance.
Learn more >
TURNSTILE + RATE LIMITS • EDGE PROTECTION • REDUCED ATTACK SURFACE
VERIFIED BUILD STATUS
Security Status & Verified Claims
Last verified: 5 November 2026. This table is authoritative wherever marketing copy and implementation differ.
Turnstile bot protection
Report intake requires a Cloudflare Turnstile challenge. The API fails closed in production when the secret is missing.
Security headers & CSP
HSTS, CSP, frame denial, MIME sniffing protection, referrer policy and permissions policy are enforced on the app and marketing site.
No third-party font or CDN requests
Fonts are self-hosted. Reporter-facing pages do not request Google Fonts or other third-party font CDNs.
SHA-256 evidence hashing
Evidence is hashed with SHA-256 and verified again on authorized download. Hashing was verified locally; production evidence upload awaits the R2 bucket.
Hash-chained audit log
Administrative and intake events are appended to a per-tenant SHA-256 hash chain, making silent edits detectable.
Retention & legal hold
Retention dates are stored per record and a daily cron job removes expired data unless a legal hold is set.
Token rotation & rate limits
The public default admin token is removed. Admin authentication uses a high-entropy secret with constant-time comparison and rate limiting.
Cloudflare R2 evidence storage
Evidence code is complete. R2 must be enabled in the Cloudflare dashboard before the production bucket binding can be activated.
Independent penetration test
A third-party application and cryptographic review is scheduled. Results will be published when complete.
ISO 37002 / SOC 2 / ISO 27001
The controls are designed with these frameworks in mind. ClearVoice does not claim certification until an accredited audit is complete.
100% security guarantee
No software can honestly guarantee 100% security. ClearVoice provides verifiable controls, independent testing, and a published incident process instead.
ClearVoice stores the minimum metadata needed to operate the service. Cloudflare, as the hosting provider, processes network metadata at the edge under its own terms. ClearVoice does not sell reporter data and does not use third-party advertising or analytics scripts on reporter-facing pages. Localized marketing copy is being updated to match this table; where translations differ, this English status table is authoritative.
Global Cloudflare Infrastructure
Enterprise Deployment Within Guided Deployment
Delivered on Cloudflare's serverless edge with global DDoS protection, sub-millisecond response times, and zero operational overhead.
Edge-Native D1 Database
High-performance encrypted distributed relational storage with automated geo-replication.
Automated Threat Neutralization
Enterprise WAF, bot mitigation, and SSL/TLS termination preventing brute-force intrusion.
Strict Statutory Alignment
Designed to meet ISO 37002 Whistleblowing Management Systems and national anti-corruption standards.
CIVIC & DEPARTMENTAL
Municipal Oversight
Ideal for municipal councils, state agencies, and specialized public sector departments requiring confidential whistleblower intake.
$
249
/ month
- 50 Active Cases / month capacity
- Privacy-first edge controls (IP & metadata handling documented)
- Cryptographic Voucher client receipts
- 3 Compliance Officer triage seats
- Isolated Cloudflare D1 encrypted store
RECOMMENDED FOR STATUTORY BODIES
National Statutory Enterprise
Engineered for anti-corruption commissions, national ombudsmen, and heavily regulated banking and healthcare institutions.
$
799
/ month
- Unlimited Case Intake & evidence storage
- Trilingual Localization (EN, SI, TA included)
- Statutory Dossier Export with SHA-256 seal
- Unlimited Officer Seats with role-based access
- Turnkey Guided SLA & dedicated domain
STATE MANDATE • LOGICALLY ISOLATED
Sovereign Logically Isolated
Custom architectural deployment for state defense, national intelligence oversight, central banks, and classified integrity units.
Custom Mandate
- On-Premises / Sovereign VPC logically isolated cluster
- Encrypted secret store encryption
- Custom Statutory Legal Seals & workflow schemas
- Security Clearance Vetting support & audit
- 24/7/365 Sovereign Response & dedicated architect
Deploy ClearVoice
Ready to Deploy ClearVoice for Your Organization?
Schedule an executive walkthrough or initiate a sandbox pilot tailored to your regulatory requirements.
🔒 Institutional Commitment: All procurement discussions and architectural evaluations are conducted under strict non-disclosure via end-to-end encrypted channels.