How Sigilo Profissional Built Zero-IP Logging and AI Privacy Into Its Whistleblowing Platform

·26 views

Sigilo Profissional, a Brazilian B2B SaaS platform for workplace climate surveys and whistleblowing channels, has detailed the privacy-first architecture underpinning its ISO 37002 and GDPR/LGPD-compliant system. The platform enforces tenant data isolation at two independent layers — application-level SQLAlchemy filters and PostgreSQL Row Level Security — to prevent cross-tenant data leakage even if application code contains bugs. Whistleblower anonymity is maintained through NGINX-level IP stripping and cryptographic protocol tokens, ensuring no IP addresses or session data are ever stored. To safely use large language models for report structuring and sentiment analysis, the company routes all AI requests through a LiteLLM proxy that strips personally identifiable information before prompts reach external models. Administrative actions are recorded in immutable, cryptographically hashed audit logs to meet compliance requirements without compromising user anonymity.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Pharo Smalltalk Runs in the Browser via WebAssembly

A project has been shared on Hacker News showing the Pharo programming environment running directly inside a web browser. The implementation uses WebAssembly to execute Pharo's virtual machine client-side. The demo is hosted as a web page on a personal GitHub Pages site. The post drew modest attention, with 4 points and no comments at the time of listing. The source material provides limited detail beyond the link itself.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Outlook Search Missing Emails? Check the Windows Search Index First

Help desk staff often find that Outlook search fails to show emails the user is sure exist, and the usual first step of rebuilding the Outlook profile may be unnecessary. In classic Outlook for Windows, search depends on the Windows Search index, so a paused, stalled, or corrupted index can hide messages that are still in the mailbox. Technicians can check indexing progress under File > Options > Search > Indexing Options, and confirm the WSearch service is running via PowerShell. If the problem persists, rebuilding the index from the Advanced settings is recommended, though it can take hours on large mailboxes. Finally, verifying the cached mail download range and comparing results with Outlook on the web can reveal whether the issue is local.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AML Analysts Lose Capacity When Case Retrieval Is Manual

A DEV Community post frames slow manual retrieval of case information as a major defect in anti-money laundering operations. It argues that analysts lose substantial capacity when they must gather history, links, and background themselves before reviewing an alert. The author describes a common workaround of asking a senior colleague, which fails once that person leaves the organisation. The proposed fix is to retrieve relevant sources before an analyst opens a case, present them transparently, and keep human decision-making in charge. The piece characterises this as a workflow problem rather than a model-accuracy issue.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Acceptance testing a small salon app with fake data across 61 scenarios

Before a real salon used the app, a separate AI session acted as the owner on a test computer with fake data, running 61 scenarios over four rounds. The first round uncovered 19 defects, some serious, which were all fixed, and later rounds came back clean. The scenarios targeted difficult cases such as forced password changes, lockouts after wrong passwords, messy Italian-language spreadsheets, duplicate imports, wrong time zones, data isolation between salons, large customer lists, unreliable networks, and mobile and keyboard use. The report also noted what could not be verified, such as the real booking-software export and WhatsApp messages, and left these for a supervised first session with the owner. The author now runs such an acceptance round before handing over any app, since it catches a different kind of mistake than automated tests do.

0 comments Read more at DEV Community