Free Confidential Reporting Tool: Let Your Staff Speak Up Safely

By Robert Low, Director, Lead Auditor & BRCGS Approved Trainer

Speaking up at work is harder than it sounds. A suggestion box only works if nobody is watching who drops the note in. A phone line still means a recognisable voice on the other end. Neither really solves the problem, and if your site cannot show that concerns get heard and acted on, that is a gap.

That is why I built a free confidential reporting tool. It is live on your site in minutes, and it costs nothing.

How the Confidential Reporting Tool Works

Staff scan a QR code on their own phone, whenever they want, and submit a report. No name, no login and no device ID is attached, not even to us. The report goes straight to senior management, and they must log a response. Nothing can be quietly dismissed or deleted.

Every report and every response sits in a full audit trail that the site cannot edit, which is what keeps it trustworthy. If management does not respond, the tool chases them by email. Staff get a case code, so they can check back on their report anonymously without ever identifying themselves.

The tool also produces the posters and QR codes you need, so there is nothing to design.

Why It Matters for BRCGS

BRCGS expects a confidential route for staff to raise concerns about product safety, legality and integrity. Auditors do not just want to see that a box exists. They want evidence the channel works: that people trust it enough to use it, and that what comes in gets a response. A box on a wall does not give you that evidence. This does.

Why It Matters Beyond Certification

A confidential reporting route is good management, whatever your certificate says. Concerns about bullying, health and safety near misses, cutting corners, food fraud, falsified records or pressure to ship product that should not ship are the things you most need to hear about, and the things people are least willing to say out loud.

Customers and retailers increasingly look for a genuine worker voice channel in their own supplier audits. In the UK, workers who raise genuine concerns in the public interest also have legal protection, so a clear and documented route protects the people who use it and protects your business from finding out about a problem too late.

It also gives you a record. If a concern is raised, you can show when, what was said, who responded and what was done. That is exactly what you need if something goes wrong later.

Where Sites Get Caught Out

The most common mistake is launching it and then not telling anyone. Put the posters up, explain it at induction and in team briefings, and tell people what happens to a report. Trust is built by what happens after the first report, so respond properly and visibly, within your agreed timescale.

Getting Started

It is free and takes minutes to set up. Head to the confidential reporting sign up page and follow the steps. It is one of 17 free tools you will find on the free resources page, and if you would like help embedding it into your wider quality system, that is what my consultancy and Cornerstone eQMS are for.