Sécurité
Le RGPD autorise les transferts hors EEE avec une base juridique et un mécanisme appropriés. L’hébergement dans l’UE est un choix opérationnel, pas une obligation générale. La liste des sous-traitants distingue les données ; la facturation est traitée séparément.
- TLS protège les transferts. Les champs sensibles et pièces jointes privées utilisent AES-256-GCM côté serveur. L’application déchiffre pour les utilisateurs autorisés et l’analyse serveur ; les opérateurs disposant du service et des clés peuvent aussi déchiffrer.
- Nous ne disposons ni de certification ISO 27001 ni d’attestation SOC 2. Nous ne garantissons pas une conformité générale à NIS 2 ou au règlement sur l’IA.
- Option audio – bientôt disponible. L’enregistrement audio et l’importation de fichiers audio sont indisponibles. Les signalements écrits et les demandes de rencontre sont inclus. L’organisation assure son canal de signalement oral et les rencontres demandées conformément au droit applicable.
Data flow, keys and responsibilities
TLS protects data in transit. Sensitive report fields and private attachments use server-side AES-256-GCM encryption. The application decrypts for authorised users and server-side analysis; operators with access to the service and its keys can also decrypt.
We hold no ISO 27001 certification or SOC 2 attestation. We make no blanket guarantee of NIS 2 or AI Act compliance.
Application and database: The server is located in Stockholm, Sweden (EU/EEA) and is operated by Manpro Invest AB.
| Browser → service | TLS protects transport. The audio add-on is coming soon; new audio recording and audio-file uploads are disabled. Optional analytics does not load on reporting pages. |
|---|---|
| Application → database | Report titles, narratives, reporter contact details, chat, audio and sensitive snapshots use application-level encryption. Organisation and account data and case status are outside this field-encryption scope. |
| Attachments | Private files are encrypted before storage and decrypted after authorisation. Public branding assets are outside this scope. |
| Keys and access | The service holds keys in Vault and injects them as runtime secrets. Derived keys separate database fields, files and backups. Rotation retains old keys until data and backups have been migrated or expired. Customer-owned keys are not currently available. |
| Backup and restore | Operations jobs handle daily backups and regular restore drills. Recovery requires both the backup and its decryption keys. Database field encryption does not replace whole-backup encryption. |
| AI processing | Text can be decrypted for server-side categorisation on our own infrastructure. Audio transcription and voice distortion are unavailable. |
We publish no claim of external penetration testing or formal certification without verifiable evidence. Ask support for current security evidence.
Verified operational evidence
Checked 16 October 2026: existing report content has been migrated to field encryption. Daily database backups are encrypted as whole files before persistent storage and copied encrypted to separate storage. Restore drills before and after the data migration succeeded, including reads of protected fields. Backups expire after seven days.
This is a dated technical check, not certification or an uptime commitment. During an incident, Manpro investigates its scope, contains the impact and notifies affected controllers under the DPA. Report suspected security problems through the contact below without sending case content by ordinary email.
Supplier security evidence
Sources checked: 20 October 2026, Mailjet 22 October 2026. Evidence applies to each provider’s stated services. It does not certify Whistlechannel or Manpro’s own application and database infrastructure.
- Hetzner Online GmbH · Public ingress in Finland
SOCOTEC certificate ZN-2025-35 V 1.1 for ISO/IEC 27001:2022 covers the provider’s hosting and data centres, including Tuusula in Finland. Stated validity: 27 September 2025–26 September 2028.
- BunnyWay, informacijske storitve d.o.o. (bunny.net) · CDN and DNS
The provider reports ISO 27001 certification. Current certificate validity and scope for the services we use have not yet been verified.
- Stripe · Subscriptions and billing, no report content
The public SOC 3 report linked by Stripe at review covers payment and billing systems for 1 October 2024–30 September 2025. Newer SOC evidence and any bridge letters need to be checked in the Stripe Dashboard.
- Mailjet · Email notifications
Mailjet states storage in Germany and Belgium and ISO 27001 certification. These are public provider statements; the certificate’s current scope has not been verified. The existing account and sender domain were checked without sending mail.
Aligné sur