[relaunched]

People only file complaints if they feel safe to do so and the complaints are handled appropriately.

A way to lead on transparency might be to share number of investigations, internal and external, and what the findings were. There are ways to share findings without revealing names. Additionally, a company can benefit from transparent remediation discussions, which are very important.

Transparency is easy when it comes to being transparent about things you want to get out into the world. The old humble brag approach to transparency, if you will. But, values are only values if they are upheld when it's hard.

I'm not aware of any laws that require investigation findings to be private. However, ignoring material risks has huge penalties. This isn't legal advice, but willfully violating laws, in the US, is oftentimes the basis for treble damages,

[Acatalepsy]

I've anonymously reported an incident as a GitLab employee. It was ignored. I encouraged someone else to report an incident and it was handled dreadfully by the interim Chief People Officer at the time. The person ended up leaving due to the terrible experience and real fear of retaliation.

They're now supposed to be handled by the Chief Legal Officer which I find odd.

[coralg]

Because the CPO is gone. GitLabbers - don't trust the CLO. She told us not to talk to the CPO the week she left, which is very odd too and makes us think something went wrong.

[AnonGitLabEmpl]

I didn't realize that. How sketchy and frustrating.

[GitLabber1000]

i personally know the CPO who just left would have handled your concern seriously. she really helped me and another person whom I know confided in her too.