Skip to content

Creating a Report Audit Log visible to Recipients, Whistleblowers and Auditors #4085

Open
1 of 3 issues completed
Open
@evilaliv3

Description

@evilaliv3

Proposal

This ticket is to keep track of the research and development activities related to creating a Report Audit Log visible to Recipients and Whistleblowers where to show a timeline of the relevant events happened on a report.

This content updated on June 17, reflects the latest analysis of what would be valuable to implement in the context of GlobaLeaks and in general of a whistleblowing software and is based on the analysis of the requirement performed under project ANAC 2025-2026 and includes the comment provided by the community up to date.

Users till now have expressed that:

  • It would be valuable for whistleblowers to have access via their report to an audit log where to see in what happened on their report in order of date;
  • It would be valuable for recipients to have access to an audit log of the report their are handling in order to see what happened in order of data; this would be valuable especially in moments of temporary or permanent turnover among recipients;
  • It would be valuable to add a new user role dedicated to auditing (an auditor role) to have access to audit logs of every report in order to be able to perform an audit of the proper handling of reports;
  • these audit logs are intended to provide high level detail like for admin audits logs without detailing any information received on the platform (example of logs are: report added on date X, access performed by recipient to the report on date Y, message added by whistleblower on date Z)

Sub-issues

Metadata

Metadata

Assignees

Projects

Status

In progress

Relationships

None yet

Development

No branches or pull requests

Issue actions