Echo - Whistleblowing Tool

Echo (echo.ethicacompliance.co.ke) is a state‑of‑the‑art whistleblowing platform I developed alongside a team of seasoned legal experts to deliver maximum security, flexibility and legal compliance. From the moment you log in, role‑based dashboards (tailored for Officers, Employees, Admins and more) ensure each user sees only the reports and tools relevant to their responsibilities, streamlining workflows without compromising confidentiality.

Every report submitted to Echo is protected by end‑to‑end encryption, zero‑knowledge logging and multi‑factor authentication, creating a tamper‑proof chain of custody. I personally led a rigorous penetration‑testing campaign to validate the platform’s resilience against the latest attack vectors, confirming that our security controls hold up under real‑world adversarial conditions.

Echo’s modular architecture empowers organizations to customize reporting categories, escalation paths and audit‑trail policies to match their unique compliance requirements. Encrypted storage, immutable logs and encrypted notifications ensure full visibility for compliance officers while upholding whistle‑blower privacy and aligning with international ethics and data‑protection standards.

Under the hood, Echo runs on PHP 8.x and Laravel’s MVC framework, with Laravel Breeze handling authentication scaffolding. Role‑based authorization and detailed activity auditing are powered by Spatie’s Permission and Activitylog packages. The responsive frontend is built with Blade templates, Tailwind CSS and Alpine.js, while MySQL and Redis manage data storage and caching. Git (GitHub/GitLab) with GitHub Actions drives version control and CI/CD, Laravel Telescope and Horizon support debugging and queue processing, and deployments are served via ShujaaHost.

Demo logins are available upon request for anyone interested in evaluating Echo’s secure, legally hardened approach to whistleblowing.