Sicherheit
Die DSGVO erlaubt Übermittlungen außerhalb des EWR mit geeigneter Rechtsgrundlage und Übermittlungsmechanismus. EU-Hosting ist eine Betriebsentscheidung, keine allgemeine Rechtspflicht. Die Liste der Unterauftragsverarbeiter unterscheidet Datenarten; Abrechnung erfolgt separat.
- TLS schützt die Übertragung. Sensible Meldefelder und private Anlagen werden serverseitig mit AES-256-GCM verschlüsselt. Die Anwendung entschlüsselt für Berechtigte und die serverseitige Analyse; Betreiber mit Zugang zum Dienst und seinen Schlüsseln können ebenfalls entschlüsseln.
- Wir sind nicht nach ISO 27001 zertifiziert und haben kein SOC-2-Testat. Eine pauschale Konformität mit NIS 2 oder der KI-Verordnung garantieren wir nicht.
- Audio-Zusatzmodul – demnächst verfügbar. Audioaufnahmen und das Hochladen von Audiodateien sind nicht verfügbar. Schriftliche Meldungen und Anfragen für persönliche Treffen sind enthalten. Die Organisation richtet ihren mündlichen Meldeweg ein und organisiert angefragte Treffen nach geltendem Recht.
Data flow, keys and responsibilities
TLS protects data in transit. Sensitive report fields and private attachments use server-side AES-256-GCM encryption. The application decrypts for authorised users and server-side analysis; operators with access to the service and its keys can also decrypt.
We hold no ISO 27001 certification or SOC 2 attestation. We make no blanket guarantee of NIS 2 or AI Act compliance.
Application and database: The server is located in Stockholm, Sweden (EU/EEA) and is operated by Manpro Invest AB.
| Browser → service | TLS protects transport. The audio add-on is coming soon; new audio recording and audio-file uploads are disabled. Optional analytics does not load on reporting pages. |
|---|---|
| Application → database | Report titles, narratives, reporter contact details, chat, audio and sensitive snapshots use application-level encryption. Organisation and account data and case status are outside this field-encryption scope. |
| Attachments | Private files are encrypted before storage and decrypted after authorisation. Public branding assets are outside this scope. |
| Keys and access | The service holds keys in Vault and injects them as runtime secrets. Derived keys separate database fields, files and backups. Rotation retains old keys until data and backups have been migrated or expired. Customer-owned keys are not currently available. |
| Backup and restore | Operations jobs handle daily backups and regular restore drills. Recovery requires both the backup and its decryption keys. Database field encryption does not replace whole-backup encryption. |
| AI processing | Text can be decrypted for server-side categorisation on our own infrastructure. Audio transcription and voice distortion are unavailable. |
We publish no claim of external penetration testing or formal certification without verifiable evidence. Ask support for current security evidence.
Verified operational evidence
Checked 16 October 2026: existing report content has been migrated to field encryption. Daily database backups are encrypted as whole files before persistent storage and copied encrypted to separate storage. Restore drills before and after the data migration succeeded, including reads of protected fields. Backups expire after seven days.
This is a dated technical check, not certification or an uptime commitment. During an incident, Manpro investigates its scope, contains the impact and notifies affected controllers under the DPA. Report suspected security problems through the contact below without sending case content by ordinary email.
Supplier security evidence
Sources checked: 20 October 2026, Mailjet 22 October 2026. Evidence applies to each provider’s stated services. It does not certify Whistlechannel or Manpro’s own application and database infrastructure.
- Hetzner Online GmbH · Public ingress in Finland
SOCOTEC certificate ZN-2025-35 V 1.1 for ISO/IEC 27001:2022 covers the provider’s hosting and data centres, including Tuusula in Finland. Stated validity: 27 September 2025–26 September 2028.
- BunnyWay, informacijske storitve d.o.o. (bunny.net) · CDN and DNS
The provider reports ISO 27001 certification. Current certificate validity and scope for the services we use have not yet been verified.
- Stripe · Subscriptions and billing, no report content
The public SOC 3 report linked by Stripe at review covers payment and billing systems for 1 October 2024–30 September 2025. Newer SOC evidence and any bridge letters need to be checked in the Stripe Dashboard.
- Mailjet · Email notifications
Mailjet states storage in Germany and Belgium and ISO 27001 certification. These are public provider statements; the certificate’s current scope has not been verified. The existing account and sender domain were checked without sending mail.
Ausgerichtet an