Acknowledgement
Within 5 business days
Trust Centre
Whistleblower Protection
Upstream BPO accepts whistleblower reports anonymously through our whistleblowing form and by email. We acknowledge every report within 5 business days, investigate through an independent internal team, and protect reporters from retaliation.
Key information
At-a-glance governance context
These points summarise the public scope of this page and the main contact or review context around it.
Anonymity
Anonymous submissions accepted via the form
2025 reports received
Zero
Intake owner
Cillian Conor, data protection officer
Section 1
Reporting channels
Report through the whistleblowing form or by email to dpo@upstreambpo.com. Our data protection officer, Cillian Conor, owns intake.
The form accepts anonymous submissions. Reports that identify the reporter are handled confidentially, and we limit knowledge of the reporter's identity to those conducting the investigation.
Section 2
Non-retaliation
Upstream BPO maintains documented protections against retaliation for good-faith reports. Retaliation against a reporter is itself a disciplinary offence under our Code of Conduct, and it is handled through the same disciplinary process that applies to any other material violation.
The protection attaches to a good-faith report regardless of whether the investigation substantiates the concern raised.
Section 3
Investigation process
We acknowledge every report within 5 business days of receipt. Investigation is conducted by an independent internal team, which excludes the reporter's line management, so that the people a report concerns do not investigate it.
We keep the reporter informed of investigation status at reasonable intervals through to closure, including where a report was submitted anonymously and the form supports follow-up.
Section 4
Annual reporting
We publish whistleblowing statistics annually. The 2025 figures below are our first-year baseline.
During 2025, Upstream BPO's whistleblowing channel received zero reports. This baseline is disclosed as part of our annual reporting commitment. Staff awareness of the channel is maintained through onboarding, annual Code of Conduct refresh, and internal communications; the low volume does not reflect suppression of reporting.
- Total whistleblower reports received in 2025: zero.
Section 5
What to report here
This channel receives reports of Code of Conduct violations, suspected bribery or corruption, undisclosed conflicts of interest, and any other conduct concern that falls under our governance policies.
Reviewer questions
Questions we are asked in security review
Answers are stated in full here so they are quotable directly into a security questionnaire.
Can we report anonymously?
Yes. The whistleblowing form accepts anonymous submissions. Reports that identify the reporter are handled confidentially.
How quickly is a report acknowledged?
Within 5 business days of receipt.
Who investigates a report?
An independent internal team that excludes the reporter's line management.
What protection do reporters have?
Upstream BPO maintains documented protections against retaliation for good-faith reports. Retaliation is itself a disciplinary offence under our Code of Conduct, and the protection applies whether or not the investigation substantiates the concern.
How many reports did you receive in 2025?
Zero. During 2025, Upstream BPO's whistleblowing channel received zero reports. This baseline is disclosed as part of our annual reporting commitment. Staff awareness of the channel is maintained through onboarding, annual Code of Conduct refresh, and internal communications; the low volume does not reflect suppression of reporting.
Who owns whistleblowing intake?
Cillian Conor, our data protection officer.
Related resources
Related governance and service pages
Use the connected pages below for deeper privacy, governance, service or contact context.
Code of Conduct
Behavioural standards and the disciplinary process behind them.
Open page
Anti-Bribery & Corruption
Prohibited conduct, due diligence and the bribery reporting route.
Open page
Conflicts of Interest
Declaration duties and what an undisclosed conflict looks like.
Open page
Security & Trust Contact
Reach the data protection officer and the single trust inbox.
Open page
Contact & Escalation
Submit a whistleblower report through the whistleblowing form for anonymous submission, or by email to dpo@upstreambpo.com. We acknowledge every report within 5 business days.
Next Step
Need a deeper governance review?
Send certificate requests, subprocessor list requests, incident reports and vulnerability disclosures to dpo@upstreambpo.com. We acknowledge security and trust enquiries within 3 business days.