EU Public Code

GlobaLeaks

GlobaLeaks is free, open source software enabling anyone to easily set up and maintain a secure whistleblowing platform

    whistleblowing
Published by
GlobaLeaks
Last release
2022-10-15 (4.10.14)
Technical contact
Giovanni Pellerano +390287186005
Type of maintenance
community
License
AGPL-3.0
Platforms
web
windows
mac
linux
ios
android
List of dependencies
None

Official website

Documentation

Source code

Roadmap

Main audience

Supported languages

GlobaLeaks is free, open souce software enabling anyone to easily set up and maintain a secure whistleblowing platform. Thanks to GlobaLeaks even non-technical people are be able to setup their own anonymous whistleblowing project. Designed to be user-friendly the software is customizable up to own needs and protects the whistleblower's privacy and submissions. GlobaLeaks targets many use cases and therefore it has been designed as a framework. Designed with flexibility in mind and translated in more than 90 languages GlobaLeaks is nowadays adopted worldwide by more than 4000 projects. The vast range of adopters includes independent media, activists, public agencies, corporations and more.

Features

  • PNRR
  • PNRR/Beneficiari/Altri enti
  • PNRR/Beneficiari/ASL
  • PNRR/Beneficiari/Comuni
  • PNRR/Beneficiari/Enti Regionali
  • PNRR/Beneficiari/Istituti di ricerca e AFAM
  • PNRR/Beneficiari/PA Centrali
  • PNRR/Beneficiari/Province
  • PNRR/Beneficiari/Scuole
  • PNRR/Beneficiari/Università
  • PNRR/Misura/1.1
  • PNRR/Misura/1.4.1
  • PNRR/Misura/1.6
  • Multi-user system with customizable user roles (whistleblower, recipient, administrator)
  • Entirely manageable from a web administration interface
  • Support for more than 90 languages with Right-to-Left (RTL)
  • Receive reports from whistleblower through structured multi-step questionnaire
  • Let whistleblowers decide if and when to confidentially declare their identity
  • Exchange multimedia files with whistleblower
  • Chat with whistleblower to discuss the report
  • Unique 16-digit receipt for the whistleblower to log back in anonymously
  • Simple recipient interface for receiving and analyzing reports
  • Support for the categorization of the reports with labels
  • Support for the user search of reports
  • Support for assigning and creating case management statuses
  • Customizable look and feel (logo, colour, styles, font, text)
  • Define multiple reporting channels/contexts (e.g. per-topic, per-department)
  • Manage multiple whistleblowing sites from a single dashboard
  • Advanced questionnaire builder
  • Whistleblowing system statistics
  • Ready-made questionnaires for compliance law
  • Bidirectional anonymous communication (comments/messages)
  • Customizable case management workflow (statuses/sub-statuses)
  • Whistleblower identity conditional reporting workflow
  • Manage conflict of interest in the reporting workflow
  • Custodian functionality to authorize access to whistleblower identity
  • GDPR privacy by design
  • GDPR configurable data retention policies
  • GDPR compliant subscriber module for new users of SaaS services
  • No logs of IP addresses
  • Integratable with existing enterprise case management platform
  • Free Software OSI Approved AGPL 3.0 License
  • Full data encryption of whistleblower reports and recipient communication
  • Digital anonymity support with Tor integration
  • Built-in HTTPS support with TLS 1.3 standard (SSLabs A+ rating)
  • Automatic free digital certificate enrollment (Let’s Encrypt)
  • Multiple penetration tests with full public reports
  • Conform to industry standards and best practices for application security (OWASP)
  • Two-Factor authentication (2FA) support compliant to standard TOTP RFC 6238
  • Integrated network sandboxing with iptables
  • Integrated application sandboxing with AppArmor
  • Complete protection against automated submissions (spam prevention)
  • Subject to continuous peer-review and periodic security audits
  • PGP support for encrypted email notifications
  • Does not leave traces on browser cache
  • Multi-site support enabling to run multiple virtual site on the same setup
  • Responsive UX made with Boostrap CSS Framework
  • Built-in Accessibility Support with WAI-ARIA compliance
  • Automated Software Quality Measurement and Continuous Integration Testing
  • Long-Term Support plan (LTS)
  • Built with lightweight framework technologies (AngularJS and Python Twisted)
  • Embedded Database - SQLite (optional support for other Databases)
  • Automatic setup of Tor Onion Services Version 3
  • Integrated backup support
  • Support for self-service signup for whistleblowing SaaS service setup
  • Support for Linux operating system (Debian/Ubuntu)
  • Deb Packaging with repository for update/upgrades
  • Fully self-contained application (no web or application servers needed)
  • Integrate collaborative translation/localization (Transifex)
  • Easy integration of the platform with existing websites and intranets
  • HTTP/2 support
  • REST API