Frequently asked questions

Who can use this platform?

Permanent and fixed-term employees, interns and apprentices, members of management bodies and directors of Groupe COFINA.

Clients, suppliers and communities have another channel, separate from this one.

What can I report?

Serious facts you became aware of: financial offences (corruption, money laundering, fraud, embezzlement), compliance and regulatory breaches, breaches of ethics and human rights (harassment, discrimination, occupational health and safety), data and security breaches. The list is not exhaustive: choose "Other" and describe the facts if no category fits.

Do I have to give my name?

No. You can report anonymously: the form then shows no identity field and the platform refuses any identity information sent with an anonymous report.

You can also report under your own name: your identity is then accessible only to the people in charge of your report.

How do I stay anonymous?

Use a personal device on a network that is not Cofina's, for example your mobile data or your home connection: Cofina's network and devices keep connection logs outside this platform.

In the description and attachments, avoid details that only you could know. The content of a document can identify you, not just its metadata.

The platform does not record your IP address. It uses no audience measurement and no external content. Dates about your report are kept to the day, without the time.

What happens to my attachments?

Each file is checked (real type, antivirus), then its metadata is removed: author, device, GPS position, edit history. It is then encrypted. A refused file is not kept and you are told why.

The content of the file is not changed: read it again before you send it.

What if my report is about executive management or the Board of Directors?

Answer "Yes" to the question in the form: your report then goes directly, and only, to the Audit, Compliance and ESG Committee.

How do I follow my report?

With the reference and access code given at the end, on the "Follow my report" page. There you see the status of your report, the deadlines given to you and the team's replies, and you can send messages and attachments until the report is closed.

I lost my access code.

It cannot be recovered or sent again: it is not kept anywhere in clear. Make a new report and cite your old reference in the description.

Will I be told what happens?

If you are anonymous, you receive no notification through any channel: come back and check your follow-up space.

If you reported under your own name and asked for it, a content-free email tells you there is news. It contains no reference and no detail.

What are the deadlines?

The admissibility of your report is examined in the days after you submit, and the date of first feedback is shown in your follow-up space. If an investigation is opened, its expected end date is shown too.

Am I protected against retaliation?

Yes: no sanction can be taken against you for a report made in good faith. If you suffer retaliation, say so in a message in your follow-up space while the report is open, or in a new report citing your reference if it is closed.

Nothing is shared with your entity's Human Capital team without your explicit agreement to the exact text they would receive.

Does the platform use cookies?

No cookie and no storage are used before you sign in to your follow-up space. After you sign in, one session cookie is set; it expires after 15 minutes of inactivity, and at the latest 2 hours after you signed in.