How a voice channel carries the richest testimony an organisation can receive
without learning who is speaking. Threat model, severance architecture, the zero-knowledge follow-up
channel — and an honest section on what anonymity cannot protect you from.
The methodology edition: exactly how we define triage latency, AI/human
agreement and severity calibration — published before the first numbers, so the numbers can be
judged against a method nobody chose after seeing them. Monthly measured editions follow.
The Saudi Central Bank’s policy setting the minimum controls financial institutions must
have to receive and process violation reports — general obligations, the independent processing
unit, reportable cases, whistleblower protection, processing stages and KPIs. Published in Arabic and
English on the SAMA Rulebook.
Saudi Central Bank (SAMA) · SAMA Rulebook · Issued August 2019 · In force
DOJ Evaluation Of Corporate Compliance Programs
The Criminal Division’s guidance for prosecutors on whether a corporate compliance program is
well designed, adequately resourced and working in practice — including how a company governs AI
and whether its reporting channel actually works.
U.S. Department of Justice · Criminal Division · Updated September 2024