When an employee reports wrongdoing through EthicsPro®, they’re trusting the platform with something significant: their identity, their disclosure, and in many cases their confidence that speaking up won’t come back on them.
That trust depends on security. Not security as a marketing claim — security as a verifiable, maintained, independently examined fact.
Independently verified
In May 2026, EthicsPro® underwent independent penetration testing by a leading cybersecurity firm. The result: an overall Low risk rating, with no common web application security issues identified.
This sits alongside Report It Now™’s ISO/IEC 27001:2022 accreditation — the international standard for information security management. Together they mean EthicsPro®’s security isn’t something we assert.
It’s something external specialists have examined and confirmed.
What that means in practice
Reporter identities stay protected. The majority of reports made through EthicsPro® are anonymous. Reporters are tracked through confidential ID numbers, not names, and the platform is built so that anonymity holds — technically, not just procedurally.
Case data stays confidential. Disclosures often involve allegations about colleagues, managers, or the organisation itself. EthicsPro® stores this information on secure servers with access limited to those who genuinely need it.
The system is independent. Because EthicsPro® operates outside your organisation’s own infrastructure, reports can’t be intercepted, monitored, or quietly buried internally. Independence is a security feature in its own right.
Security is maintained, not assumed. Regular independent testing and continuous certification mean the platform is examined on an ongoing basis — and improvements are made before small issues can become real ones.
Why it matters for your organisation
A reporting channel only works if people use it, and people only use it if they trust it. Research consistently shows fear of exposure is one of the biggest barriers to speaking up. A demonstrably secure platform removes that barrier — which means concerns surface earlier, while they’re still manageable.
There’s a compliance dimension too. Under the Protected Disclosures (Protection of Whistleblowers) Act 2022, organisations are expected to handle disclosures confidentially. A platform with verified security controls makes that obligation considerably easier to meet.
And there’s the simple matter of risk. With 43% of occupational fraud detected through employee tip-offs, the organisations best protected are the ones whose people feel safe to speak. Secure infrastructure is what makes that safety real.
Security you can ask about
Since 2007, Report It Now™ has handled sensitive disclosures for organisations across New Zealand, Australia, and Singapore. The security of EthicsPro® underpins all of it — and we’re always happy to walk prospective clients through our credentials in detail.