Compliance · Whistleblowing

Confidential whistleblowing

A protected channel for raising concerns about wrongdoing at ReptoState — confidential, non-retaliatory, with a third-party intake option.

Why this matters

We build a trust-first platform. That requires a safe way for staff, investors, agents and counterparties to raise concerns when something looks wrong. This policy describes how, and the protections you have.

What you can report

Anything you reasonably believe involves: fraud or theft, bribery or corruption, breach of laws or regulations, financial misreporting, conflicts of interest, breach of our investor commitments, mistreatment of staff, or risks to investor funds.

How to report

You have two channels. Use whichever you trust:

  • Internal: email whistleblowing@reptostate.com — read only by the Compliance Officer and an independent board member.
  • Third-party intake: we are appointing an independent Pakistani law firm to receive whistleblowing reports on our behalf. Contact details will be published here once that appointment is finalised.

Reports may be made anonymously. We will still investigate to the fullest extent possible given the information provided.

Protection from retaliation

ReptoState will not tolerate retaliation against anyone who raises a concern in good faith — even if the concern turns out to be unfounded. Retaliation by a staff member is itself a disciplinary matter that may result in dismissal.

How reports are handled

Reports are logged within 24 hours of receipt. An initial assessment is completed within 5 working days. Substantive investigation timelines depend on complexity but we aim to update the reporter (where contactable) at least every 14 days. Outcomes, where appropriate, may be shared with regulators.

Last reviewed: 2026-05-01