OpenWhistle Files

Highlights

Whistleblower Experience

• Multi-step submission wizard — 5–6 step guided form (mode → location → category → description → attachments → review); Redis session stores partial state with 2-hour TTL; back/next navigation; progress indicator
• Anonymous vs. confidential mode — whistleblower chooses at step 1; confidential data (name, contact, secure email) stored encrypted with Fernet; decrypted only on the assigned admin's report detail view
• Multi-location / branch selection — Location model; selector shown only when active locations exist; full admin management at /admin/locations
• Optional secure contact email — whistleblower may provide an anonymous email; admin reply triggers a brief notification (no report content); address stored encrypted, never logged
• Deadline display for whistleblowers — status page shows 7-day acknowledgement and 3-month feedback deadlines with days remaining

Accessibility & Internationalisation

• Full German i18n — all 388 translation keys in de.json
• French language — app/locales/fr.json with 388 keys; language picker shows English / Deutsch / Français
• WCAG 2.1 AA audit — skip-to-content link, aria-label on all nav elements, aria-current="page", aria-live regions, role="alert" on errors, visible focus indicators

Database Migration

• Migration 009: creates locations table, submissionmode enum, adds location_id, submission_mode, confidential_name, confidential_contact, secure_email to reports

Full Changelog: https://github.com/openwhistle/OpenWhistle/compare/v0.3.0...v0.4.0