Every year, compliance teams are asked to make decisions about their reporting programs based on gut instinct — how many cases is "normal," how long should an investigation take, what percentage of reporters stay anonymous. Most published benchmarks are based on self-reported surveys, which introduce significant bias. Respondents overestimate their programs' maturity.
At VoiCase, we have a different data set. We process real cases. In 2025, our platform handled 1,427 workplace misconduct, whistleblowing, and compliance cases across enterprise clients in financial services, healthcare, technology, manufacturing, education, and construction. This report presents what that data actually shows.
These figures are aggregated and anonymized. No company or individual is identifiable in any of the statistics below.
What Are the Most Common Types of Workplace Reports?
The distribution of case categories in 2025 broke down as follows:
| Case Category | Share of Total Cases |
|---|---|
| Workplace harassment and bullying | 31% |
| Financial fraud and misconduct | 22% |
| Discrimination and unfair treatment | 18% |
| Data privacy violations | 12% |
| Conflicts of interest | 9% |
| Other (safety violations, retaliation, etc.) | 8% |
Harassment and bullying remains the dominant category, consistent with prior years. What surprised us in 2025 was the sharp rise in data privacy violation reports — up from 7% in 2024 to 12% in 2025. This aligns with increased employee awareness of GDPR rights and a rise in internal investigations triggered by insider data access concerns.
Financial fraud cases account for a disproportionate share of investigation hours relative to their volume. While they represent 22% of cases, they consume approximately 38% of total investigator time, driven by document review complexity.
How Long Do Workplace Investigations Actually Take?
The EU Whistleblowing Directive requires organizations to acknowledge a report within 7 days and provide feedback within 3 months. How do VoiCase clients actually perform against these thresholds?
Acknowledgment timeline (7-day requirement):
- Average time to first investigator response: 4.2 days
- 89% of cases received acknowledgment within the 7-day legal window
- 11% of cases exceeded 7 days — almost entirely in organizations that had not configured automated acknowledgment notifications
Resolution timeline (3-month target):
- Average case resolution time across all categories: 47 days
- Financial fraud cases: average 74 days
- Harassment cases: average 39 days
- Data privacy cases: average 31 days
- Cases that exceeded the 90-day threshold: 14%
The headline finding: organizations using VoiCase's automated SLA alerts resolved cases 2.3× faster than those that disabled alerts and relied on manual calendar tracking. This is the single highest-leverage configuration change any compliance team can make.
What Percentage of Reports Are Submitted Anonymously?
Anonymous reporting is the backbone of any functional speak-up program. Employees who fear retaliation will not self-identify — even when a platform is described as confidential.
In 2025, 78% of all reports submitted through VoiCase were fully anonymous. The remaining 22% were identified submissions, typically from employees in organizations with a demonstrably strong non-retaliation culture, often evidenced by visible leadership messaging.
Anonymous submission rate varied by industry:
| Industry | Anonymous Submission Rate |
|---|---|
| Financial Services | 83% |
| Healthcare | 80% |
| Technology | 71% |
| Manufacturing | 76% |
| Education | 69% |
The lower anonymity rate in education and technology sectors likely reflects smaller, higher-trust team environments where reporters feel more comfortable self-identifying. Financial services' high anonymity rate reflects a sector where retaliation risk perception is elevated.
Of all anonymous reports, 91% maintained anonymity through the full investigation cycle. In 9% of cases, reporters voluntarily disclosed their identity at some point during the follow-up communication process — typically when an investigator's questions required the reporter to provide context that would be difficult to give anonymously.
Which Industries Report the Most Cases Per 1,000 Employees?
Raw case volume tells you less than case density — the rate of reports relative to workforce size.
| Industry | Cases per 1,000 Employees (Annual) |
|---|---|
| Financial Services | 4.7 |
| Healthcare | 4.2 |
| Technology | 3.1 |
| Manufacturing | 2.8 |
| Education | 2.2 |
| Construction | 1.9 |
Higher reporting density is not a sign of a dysfunctional organization. It is typically a sign of a trusted channel. Organizations that actively communicate the availability and confidentiality of their reporting system — through onboarding, manager training, and annual reminders — consistently achieve higher per-capita reporting rates. We treat higher density as a positive signal of program health, not a risk indicator.
When Do Employees Tend to Report? Patterns in Timing
Day of week: Tuesday is the most common day for report submission, accounting for 24% of weekly volume. Friday and weekend submissions together account for only 11%, suggesting that most reporters prefer to act during focused work hours rather than impulse-submitting off-hours.
Seasonal pattern: Q1 (January through March) accounts for 31% of annual report volume — the highest of any quarter. This is consistent with a "new year reset" effect, where employees who had been sitting on a concern for months finally act after the holiday break. Q3 (July through September) is the quietest period at 19% of annual volume, likely reflecting summer leave and reduced workplace friction.
Post-event clustering: In 35% of cases involving harassment or discrimination, the submission timestamp came within 14 days of a specific triggering event — a performance review, team restructuring, or leadership change. This reinforces the importance of having a reporting channel that is consistently visible and accessible, not just deployed during compliance training.
What Percentage of Reports Are Substantiated?
"Substantiated" means an investigation concluded that the alleged conduct more likely than not occurred as reported.
In 2025, 34% of all investigated cases were fully substantiated. A further 21% were partially substantiated — the core allegation was confirmed but with significant context or mitigating factors. 45% were unsubstantiated or inconclusive.
This distribution is normal and expected. A healthy whistleblowing program is not a conviction machine — it is an early warning system. Unsubstantiated reports still provide value: they identify friction points, communication failures, and perceived unfairness that may not constitute misconduct but signal organizational health issues worth addressing.
The substantiation rate was highest in financial fraud cases (51%) and lowest in interpersonal conflict cases (22%), which aligns with the evidentiary difference between document-supported financial investigations and "he said/she said" interpersonal disputes.
What Are the Implications for EU Directive Compliance Teams?
Three findings from this data set have direct operational implications for any organization subject to the EU Whistleblowing Directive:
1. The 11% acknowledgment failure rate is entirely preventable. Every case that went unacknowledged within 7 days occurred in an organization that had not activated automated acknowledgment workflows. This is a configuration decision, not a resource constraint. If you are not using automated acknowledgment, you are accepting unnecessary regulatory exposure.
2. Anonymous reporting is the norm, not the exception. 78% anonymity means your investigation workflows must be designed to function without reporter identity. Investigators who delay action while "waiting to see if the reporter reveals themselves" are creating bottlenecks and regulatory risk. Treat every case as if it will remain anonymous throughout.
3. Q1 is your highest-risk quarter. If your compliance team is under-resourced or under-trained in January, you are under-resourced during your peak demand period. Resource planning should account for the Q1 reporting surge.
The data in this report will be updated annually as our platform grows. If you manage a whistleblowing or compliance program and want to benchmark your organization's performance against these figures, the VoiCase platform includes a built-in analytics dashboard that surfaces your own case metrics in context.