Ethics Hotline and Whistleblowing Channel for Companies

Anonymous without a trace, with a way back to the reporter, and nobody named in a report reading it.

Talk to us on WhatsApp How it follows ISO 37002 See every service

The COX ethics hotline is a secure whistleblowing channel where employees, clients and suppliers report misconduct, anonymously or not. Each report becomes a case that is evaluated, investigated and concluded with a reason, while the reporter follows it with a code and a key, so your company can show it listened, acted and protected who spoke up.

Why a Reporting Channel Matters

Anti-money laundering frameworks across the region ask obligated entities to keep internal controls and to document unusual activity. The people closest to an operation are often the first to see what is wrong.

Earlier detection

Employees and business partners see signals no monitoring rule can: conflicts of interest, pressure to skip a control, a transaction nobody can explain.

Controls you can show

A regulator asks what happened with each report. A channel with dated stages, responsible people and justified decisions answers that question.

Protection for who speaks

People stay quiet when they fear being identified or punished. An anonymous report keeps no trace of who sent it, and the channel watches for retaliation after the case closes.

Nothing disappears

A report is never deleted. One that is not investigated is dismissed with a written justification, and that decision stays in the record.

Case Management: From Report to Conclusion

Every case goes through the same stages, and each change leaves a dated entry with who made it.

Received

The reporter gets a reference, an automatic acknowledgment and, once, a case code and a secret key to follow the case.

Under Evaluation

Admissibility with its reason, category, severity, urgency, retaliation risk and the protective measures it calls for.

In Investigation

Only after the evaluation is complete and the investigator has declared no conflict of interest. Notes, findings and messages to the reporter.

Closed or Dismissed

Closed with a result and an explanation, or dismissed with a justification. Months later, a check that the reporter suffered no retaliation.

What the Channel Includes

Anonymous without a trace

No report keeps the IP address or the browser, anonymous or not. Against abuse, the channel counts a one-way code of the connection, apart from the reports and deleted after 30 days by default.

Two-way follow-up

With the case code and the secret key, the reporter reads the status and the team's messages, answers and adds files, without an account and without giving a name.

Formal evaluation

No investigation starts without admissibility, category, severity, urgency, retaliation risk and an assigned investigator.

Conflicts of interest

Users named in a report lose access to it whatever their role, and the investigator declares having no conflict before starting.

Alternate reviewers

A report about the compliance team or the management goes to reviewers your company names outside that team, and only they read it.

Protection against retaliation

Retaliation risk and measures in the evaluation, a follow-up check after closing, and a button for the reporter to report retaliation as a new, linked, high-priority case.

Response deadlines

Days to acknowledge and months to answer the reporter, set by each company, with reminders before they expire and filters for the overdue ones.

A role of its own

Only users given the channel role in that company, as investigator or manager, read reports. No other compliance role does.

Evidence and integrity

Documents, images, audio or video with the report and in each answer. What the reporter sent cannot be edited and is sealed with a fingerprint.

Stage history

Every stage change with its date and who made it, which also gives you the times to measure how the channel performs.

Notices without the story

Designated recipients learn that a report arrived, not what it says. The narrative stays inside the case.

One channel per company

Each company has its own link, which it can switch off or rotate, and its own cases, settings and reviewers.

Built on ISO 37002:2021

The stages of the channel follow the four steps of the ISO guidelines for whistleblowing management systems (receiving, assessing, addressing and concluding) and its three principles: trust, impartiality and protection.

See it step by step

Frequently Asked Questions

Yes. An anonymous report stores no name, email or phone, and no report stores the IP address or the browser. Against abuse, the channel keeps a one-way code of the connection, apart from the reports and without the time they were sent, and deletes it after 30 days by default.

After sending the report, the reporter sees a case code and a secret key, only once. With them they open the follow-up page, where they read the status and the team's messages, answer and add files. Nobody can recover the key, not even the team. They can also leave an email only for notices, which the team cannot see.

Only the users your company gives the channel role, as investigator or manager. A user named in a report loses access to it, and a report about the compliance team or the management goes only to the alternate reviewers the company designates.

No. Reports, notes, findings, messages and the stage history cannot be deleted, and what the reporter sent cannot be edited. A report that will not be investigated is dismissed with a written justification.

From the follow-up page they report it, and that creates a new case linked to the original, with high priority and the same access restrictions. When a case closes, the channel also schedules a check, some months later, that there was no retaliation.

In the company settings: switch the channel on, give the role to the people who will handle reports, name the alternate reviewers and set the deadlines. The channel gives you a link to publish in your policies, intranet or posters.

An ethics hotline is the program a company offers so that people can raise conduct contrary to its values or to the law. The whistleblowing channel is the tool through which each report arrives and is handled. COX gives you both halves: the channel where the report comes in, and the case management behind it, from the evaluation to the conclusion.

Check what your country and sector require, approve a policy, decide who handles reports and who reviews them when the team is involved, open an anonymous channel with a way back to the reporter, set the stages and deadlines, and tell your people it exists. Our step-by-step guide covers each point.

It depends on the country, the sector and the rules that apply to your company, and it changes with each reform. Where no law names it, regulators and anti-money laundering programs still expect internal controls that let people report what is wrong. Confirm your obligation with your regulator or a qualified professional.

This page is for informational purposes only and does not constitute legal advice. Whistleblowing obligations vary by country and sector: confirm yours with a qualified professional.

Open Your Reporting Channel

Switch it on, publish the link and handle the first report with every step on record.

Talk to us on WhatsApp See every service Estimate your costs

Explore more COX solutions:

How to implement a whistleblowing channel ISO 37002 step by step Internal Reporting for LFPIORPI Mexico Employee Compliance Training Digital Onboarding Services & Pricing