Case Study

A secure reporting channel

A mobile application and web system designed to help organisations manage workplace incidents and misconduct reports.

  • Team size7

  • IndustryAll

  • CountryPoland

  • Collaboration2024 – now

Two phones showing a whistleblowing app: a list of report categories such as finance, safety and environment, and a chat with a submitted report.

A secure reporting channel for whistleblowers

On September 25, 2024, Poland enacted the Whistleblower Protection Act, mandating organisations, including thousands of companies and public entities, to establish secure channels for reporting legal violations and develop new internal procedures. Failure to comply with these requirements may result in severe penalties.

Signalink is a mobile application and web system designed to help organisations manage workplace incidents and misconduct reports. It enables secure handling of reports and reporting of incidents and meets the requirements of the Act and the EU directive on the protection of whistleblowers. Depending on business expectations, incidents are reported anonymously or non-anonymously.

Three screens of the Signalink app: a grid of reporting categories, a company code entry screen and a PIN setup screen.

Results

  • Regulatory compliance: Signalink fully meets the requirements of the Whistleblower Protection Act, effective September 25, 2024.
  • User-friendly design: The project delivered a mobile app for iOS and Android and a web-based panel for incident handlers.
  • Rapid development: The initial phase was completed in just 1.5 months.
Screens of a whistleblowing app showing a chat about a personal data protection violation and a form for the reporter's details.

Challenges

  • Short development timeline: The project had to be completed before the bill on the protection of whistleblowers became effective.
  • Diverse target audience: The system had to cater to various sectors – from small businesses to large enterprises.
  • High data protection standards: Ensured the security of whistleblower data in compliance with GDPR.

The most important information:

Month
1,5
Categories
6
Team members
7

Signalink development process

  • Kotlin
  • TypeScript
  • MongoDB
  • AWS Services
  • React
  • Dart
  • Firebase
  • Flutter
  • Helm
  • HTML
  • Kubernetes
  • MariaDB
  • RestAPI
  • Scaleway
  • SpringBoot
  • Claudflare

Signalink: whistleblower mobile app

The Signalink mobile app enables secure and anonymous/non-anonymous reporting of workplace issues. Whistleblowers can submit reports in just a few minutes by selecting one of six predefined categories and attaching files like images or audio for credibility. Logging in via a unique code ensures complete security and control over the shared data.

Web panel for incident handlers

The handler’s panel is a web-based tool designed for efficient report management. It facilitates case review, prioritisation, status updates, and lifecycle tracking—from submission to resolution. Handlers can communicate anonymously/non-anonymously with whistleblowers to request additional information and add internal comments. Its intuitive design simplifies managing multiple reports and ensures full compliance with legal requirements.

Compliance with the Whistleblower Protection Act

  • A secure, internal reporting channel,
  • The ability to handle submissions from all channels (automatically via the mobile app and manually for other sources),
  • Categorisation and customisation of reports,
  • Support for anonymous or non-anonymous submissions,
  • GDPR-compliant protection of whistleblower data,
  • Confidential communication between whistleblowers and incident handlers, ensuring no third party has access to sensitive information,
  • An anonymous chat feature for obtaining additional information,
  • The ability to attach multimedia files for more detailed reporting and verification,
  • Comprehensive case lifecycle management—from submission to closure, within statutory deadlines,
  • Assignment of responsibility for handling specific reports.
  • Archiving of reports from all sources,
  • Automated generation of legally compliant report logs (as per Article 29).

About SWPS University

SWPS University is a university offering an interdisciplinary approach to learning. It combines an educational mission with research and implementation of innovative business solutions. Together, we also had the opportunity to work on a RESQL project, a peer violence prevention system that includes an innovative mobile application designed to prevent peer violence in schools.

Tilted screens of a whistleblowing report app showing a consent form, a category list and icon tiles, on a teal background.

Our portfolio

Contact us

Let’s talk about what you’re building next.

Whether you’re launching a new financial product, modernising existing technology or exploring AI, tell us what you’re working on. We’ll connect you with the right Speednet expert.

Michał Grela, a smiling man in a dark jacket

Michał GrelaHead of Growth

michal.grela@speednet.pl+48 600 023 843