Handle Whistleblowing and Concerns Safely

We have a whistleblowing policy and no way for anyone to actually use it. Build me a confidential concerns app. Provide a public report form that needs no sign-in, so a concern can be raised with no account identity attached, and say clearly on the form what will happen next and who will see it. Give each report a case reference the reporter can use to check progress or add information later without signing in. Restrict access to cases to a small number of named handlers, and record every access to a case so confidentiality is demonstrable. Each case records the concern, the date received, the category, the handler, the investigation steps, the outcome and the reasoning, including where nothing was substantiated. Where the reporter left a contact route, let the handler communicate without their identity being revealed to anyone else. Track time from receipt to acknowledgement and to conclusion. Add an AI agent that helps the handler by suggesting investigation steps for the category of concern and drafting the acknowledgement and outcome communication, without ever exposing identifying details. Automate two things: an immediate acknowledgement to the reporter where contact is possible, and reminders to the handler on cases approaching a response commitment. One login: a named handler. The report form and the case-reference lookup need no sign-in, so a report carries no account identity, and state on the form that anonymity depends on what the reporter chooses to include.