How does the whistleblower system ensure that reports are not deleted by any recipient?

Everything that is done in the system is logged. This means that if a recipient performs an action, for example deleting a case, it is visible in the log when it was deleted and by whom.