Anonymous Reporting Center

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • The Anonymous Reporting Center (ARC) enables employees to submit compliance, privacy, or AI‑related concerns without revealing their identity. Employees are automatically signed out of the Employee Center when ARC opens.

    After you report an anonymous case in ARC, a designated case analyst reviews the information and initiates an investigation. If additional clarification is required, the analyst adds comments to the report.
    Important:
    ARC generates a Report key and Report number when you submit a new case. These values are required to track progress or address comments on your case anonymously.

    Accessing Anonymous Reporting Center

    ARC is included with the following GRC applications:
    • Compliance Case Management (sn_comp_case)
    • Privacy Management (sn_privacy)
    • AI Case Management (sn_ai_case_mgmt)
    If any of these applications are already installed, no additional setup is required.

    For privacy and compliance cases, access ARC from the Risk and Compliance tab of the Employee Center.

    For AI cases, it’s available at Help center > Technology services > AI assets.

    ARC landing page

    Figure 1. ARC landing page
    Use the Anonymous Reporting Center (ARC) landing page to submit a report and track its progress anonymously.

    Use the ARC landing page to report a case anonymously or follow up on a report.

    Table 1. ARC landing page options
    Actions Description
    Submit a report anonymously Raise suspected compliance, privacy, or AI-related issues confidentially. Depending on the case type, you can choose to:
    Important:
    After submission, download a copy of your report to record the Report key and Report number.
    Follow up on a report Provide the Report key and Report number to check the case status or address investigator comments anonymously. ARC doesn't send email notifications or alerts about updates to your case. If you can't find these numbers, you have to submit a new case.

    Built-in sanitization layer

    Before an anonymous report is saved, all free‑text fields in the forms (such as case type, summary, business unit, and jurisdiction) are sanitized to:

    • Remove HTML and embedded script or style content
    • Restrict input to standard alphanumeric characters and basic punctuation
    • Trim extra whitespaces

    Sanitization reduces the risk of unsafe or malformed input.

    Review process

    All reports submitted through ARC are routed to the appropriate case management team depending on the case type. The reporters appear as guests in the application workspace where records are created. A case analyst validates the details, assesses the severity, and determines the next steps for investigation.