Only the person or people with the recipient role can have access to it. The recipient role is assigned by the person who administers the organization (the person who is reported on the registration form as the technical contact). Under no circumstances can other people, not even administrators, access it.
When another recipient outside these needs to access it, only one of the recipients who was listed as the recipient at the time the alert was submitted can temporarily or permanently transfer their individual access. Therefore, it is not possible to access the content of the cases by other users who are not listed as assigned to the context in question, except for this temporary transfer mechanism.
Under no circumstances may other people who have not been determined by the entity using the service access the content.
Data encryption prevents access to the contents. You can find more information about encryption on the Globaleaks explanatory page.
Related FAQs: