Secure, anonymous whistleblower platform for EU companies
Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.
See the product in action
Current product views with fictional test data. Explore the flow in the public demo.
Legal requirements
Does your organization need a whistleblower channel?
National law determines which organisations need an internal reporting channel. The EU directive generally covers private entities with 50 or more workers, with sector-specific rules and public-sector provisions. Check the applicable national law and implementation dates.
What the directive requires
- Confidentiality and anonymity differ. The EU directive protects identity; national law determines duties to accept anonymous reports. A voice, attachments and report details can identify a reporter.
- Internal channels generally require acknowledgement within seven days and feedback within three months, subject to applicable legal exceptions. The organisation remains responsible for follow-up.
- Audio add-on – coming soon. Audio recording and audio-file uploads are unavailable. Written reporting and in-person meeting requests are included. The organisation arranges its oral reporting route and requested meetings under applicable law.
- Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.
How it works
Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.
1. The reporter submits a report
The reporter opens the organisation’s channel, describes the concern and chooses whether to provide a name and contact details. Supporting files can be added to the form.
2. A case handler reviews it
The organisation’s case handlers sign in to read the report, update its status and follow up the information. The organisation appoints recipients and remains responsible for handling the case.
3. The reporter follows up
An anonymous reporter receives a token and a passphrase. Both are needed to return to the dialogue, read replies and provide further information.
Features
Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.
Anonymous two-way communication
Confidentiality and anonymity differ. The EU directive protects identity; national law determines duties to accept anonymous reports. A voice, attachments and report details can identify a reporter.
Encryption in transit
TLS protects data in transit. Sensitive report fields and private attachments use server-side AES-256-GCM encryption. The application decrypts for authorised users and server-side analysis; operators with access to the service and its keys can also decrypt.
24 EU languages included
Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.
Oral reporting
Audio add-on – coming soon. Audio recording and audio-file uploads are unavailable. Written reporting and in-person meeting requests are included. The organisation arranges its oral reporting route and requested meetings under applicable law.
Audit log
Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.
EU hosted, EU owned
GDPR permits transfers outside the EU/EEA with an appropriate legal basis and transfer mechanism. EU hosting is an operational choice, not a universal legal requirement. The subprocessor list distinguishes providers and data types; billing data is handled separately.
Security
GDPR permits transfers outside the EU/EEA with an appropriate legal basis and transfer mechanism. EU hosting is an operational choice, not a universal legal requirement. The subprocessor list distinguishes providers and data types; billing data is handled separately.
- TLS protects data in transit. Sensitive report fields and private attachments use server-side AES-256-GCM encryption. The application decrypts for authorised users and server-side analysis; operators with access to the service and its keys can also decrypt.
- We hold no ISO 27001 certification or SOC 2 attestation. We make no blanket guarantee of NIS 2 or AI Act compliance.
- Audio add-on – coming soon. Audio recording and audio-file uploads are unavailable. Written reporting and in-person meeting requests are included. The organisation arranges its oral reporting route and requested meetings under applicable law.
Designed around
Frequently asked questions
Does my company need a whistleblower channel?
How is anonymity guaranteed?
Where is data stored?
Simple, transparent pricing
No long-term contracts. Cancel anytime. All plans include 24 EU languages.
Per organisation per month, excluding VAT. Try for 14 days without a card. No automatic charge.
Compliance
- 50–249 employees
- Unlimited reports
- 24 EU languages
- Priority support
Whistlechannel
Whistlechannel supports receiving and following up whistleblower reports. The organisation remains responsible for independent case handling, information, procedures and applicable legal duties.