Features
========

User Features
-------------

- Multi-user system with customizable user roles (whistleblower, recipient, administrator)
- Entirely manageable from a web administration interface
- Support for `more than 90 languages <https://www.transifex.com/otf/globaleaks>`_ with support for Right-to-Left (RTL)
- Let whistleblowers decide if and when to confidentially declare their identity
- Exchange multimedia files with whistleblower
- Chat with Whistleblower to discuss the report
- Unique 16-digit receipt for the whistleblower to log back in anonymously
- Simple recipient interface for receiving and analyzing reports
- Support for the categorization of the reports with labels
- Support for the user search of reports
- Support for assigning and creating case management statuses
- Customizable look and feel (logo, colour, styles, font, text)
- Define multiple reporting channels/contexts (e.g. per-topic, per-department)
- Manage multiple whistleblowing sites from a single dashboard
- Advanced questionnaire builder
- Whistleblowing system statistics

Legal Features
--------------

- Ready-made questionnaires for compliance law
- Bidirectional anonymous communication (comments/messages)
- Customizable case management workflow (statuses/sub-statuses)
- Whistleblower identity conditional reporting workflow
- Manage conflict of interest in the reporting workflow
- Custodian functionality to authorize access to whistleblower identity
- Designed in adherence with `ISO 37002 <https://www.iso.org/standard/65035.html>`_ and `EU Directive 2019/1937 <https://eur-lex.europa.eu/legal-content/en/TXT/?uri=CELEX%3A32019L1937>`_
- GDPR privacy by design
- GDPR configurable data retention policies
- GDPR compliant subscriber module for new users of SaaS services
- No logs of IP addresses
- Integratable with existing enterprise case management platform
- Free Software OSI Approved `AGPL 3.0 License <https://github.com/globaleaks/GlobaLeaks/blob/main/LICENSE>`_

Security Features
-----------------

- Full data encryption of whistleblower reports and recipient communication
- Digital anonymity support with `Tor <https://www.torproject.org/>`_ integration
- Built-in HTTPS support with `TLS 1.3 <https://tools.ietf.org/html/rfc8446>`_ standard (`SSLabs A+ <https://www.ssllabs.com/ssltest/analyze.html?d=try.globaleaks.org>`_ rating)
- Automatic free digital certificate enrollment (`Let’s Encrypt <https://letsencrypt.org/>`_)
- Multiple penetration tests with full public reports
- Conform to industry standards and best practices for application security (`OWASP <https://owasp.org/>`_)
- Two-Factor authentication (2FA) support compliant with standard `TOTP RFC 6238 <https://tools.ietf.org/html/rfc6238>`_
- Integrated network sandboxing with iptables
- Integrated application sandboxing with `AppArmor <http://wiki.apparmor.net/>`_
- Complete protection against automated submissions (spam prevention)
- Subject to continuous peer-review and periodic security audits
- PGP support for encrypted email notifications
- Does not leave traces in browser cache

Technical Features
------------------

- Multi-site support enabling to run multiple virtual site on the same setup
- Responsive UX made with `Boostrap <https://getbootstrap.com/>`_ CSS Framework
- Built-in Accessibility Support with `WAI-ARIA <https://www.w3.org/WAI/standards-guidelines/aria/>`_ compliance
- Automated Software Quality Measurement and Continuous Integration Testing
- Long-Term Support plan (LTS)
- Built with lightweight framework technologies (`AngularJS <https://angularjs.org/>`_ and `Python Twisted <https://twistedmatrix.com/trac/>`_)
- Embedded database - SQLite (optional support for other databases)
- Automatic setup of `Tor Onion Services Version 3 <https://www.torproject.org/>`_
- Integrated backup support
- Support for self-service signup for whistleblowing SaaS service setup
- Support for Linux operating system (`Debian <https://www.debian.org/>`_/`Ubuntu <https://ubuntu.com/>`_)
- Deb Packaging with repository for update/upgrades
- Fully self-contained application
- Easy integration of the platform with existing websites
- `HTTP/2 <https://tools.ietf.org/html/rfc7540>`_ support
- Rest API
