A complaint that can only be heard by the people it is about is not a safeguard. It is a suggestion box with a lock.
We have invested real effort in being open to feedback. There are hotlines, complaint desks, feedback forms, and codes of conduct posted on walls and websites. The architecture looks robust. But trace where a serious concern actually travels, and a quiet flaw appears. A community member who believes they were wronged, or a staff member who sees something dangerous, is usually asked to raise it through a channel that loops straight back to the same organization, often the same managers, the concern is about. We have built oversight with no exit. The mechanism for holding power to account is owned and operated by the power being held to account, and everyone involved can feel it.
This is not a story about bad people staffing those desks. Many handle complaints with real care. The problem is structural, it is shared across the sector, and because it is structural it is ours to fix.
Why a closed loop fails
The difficulty is not effort. It is that an internal channel cannot escape its own incentives. The body receiving a serious complaint is also the body whose funding, reputation, and relationships are exposed if that complaint is upheld. We are asking an organization to investigate itself and then publish the verdict, in a sector where the next grant can depend on a clean record. Even with the best intentions, the pull is toward the answer that protects the institution, and people on the outside read that pull accurately. They learn that raising a hard concern is unlikely to change anything and might cost them the help they still need. So the most serious problems, the ones a closed system most needs to hear, are exactly the ones least likely to be spoken.
There is a sharper edge for the people we serve. A household that depends on an organization for food, shelter, or documents holds the least power in the relationship and the most to lose by complaining. Asking them to bring a grievance through that same organization, with no independent route, places the entire weight of the risk on the person with the least margin to carry it.
The cost is not only fairness. It is blindness. When the channel rarely surfaces anything serious, leaders can mistake silence for safety. The absence of complaints gets read as the absence of harm, when often it is just the absence of a route a frightened person could trust.
Building a real exit
The fix is an oversight path that does not depend on the goodwill of the body being overseen. None of this requires abandoning internal complaint handling, which still matters for the everyday. It requires adding a door that opens outward. A few moves make it concrete, and most are ones we and the people who fund this work can build together.
Create a route that bypasses the chain. People need at least one channel to raise a serious concern that does not run through their own manager or the implementing organization. That can be a shared, independent mechanism that several actors fund jointly but none controls alone, so no single institution can quietly close the file on itself.
Protect the person, in practice, not only on paper. An exit is worthless if using it is punished. The visible treatment of the first person who raises something hard sets the price for everyone watching. Anonymity where it is needed, real protection from retaliation, and a response that reports back what changed are what turn a written promise into a usable one.
Close the loop where people can see it. A concern that disappears into a process teaches everyone to stop sending concerns. A serious complaint deserves a real answer within a stated window, and a visible account of what was done, so the channel earns the trust the next person will need to use it.
Let the people who fund the work share the cost of independence. Funders carry the same interest we do in catching serious harm early, while it is still containable rather than catastrophic. An independent recourse mechanism is cheaper for everyone than the failure it prevents, and building it together keeps it from belonging to any one of us.
None of this weakens accountability. It completes it. An organization confident in its own conduct has nothing to fear from a door that opens outward, and everything to gain from catching the rare serious failure before it becomes the one no one saw coming.
The absence of complaints is not the same as the absence of harm. Often it is just the absence of a safe way to speak.
So the test is plain. If the only way to challenge our conduct runs through us, we have built the appearance of accountability, not the thing itself. Opening one honest exit, owned by no single one of us, is a build we can begin now.