Secure whistleblower reporting system

Secure, anonymous report form, automatic notifications, an admin panel. An employee reports misconduct, your team responds, the whistleblower receives a reply without revealing their identity.

EU Whistleblower Directive (2019/1937)
GDPR & Schrems II
EU data residency, Frankfurt
Encrypted in transit and at rest
25 languages

Whistleblowing software is an easy-to-use tool. After you sign up, will prepare a dedicated reporting page customized specifically for your branding at no additional cost. You will receive a whistleblowing link that you can distribute among employees and other stakeholders. Anyone wishing to report a misconduct can then access the given report and follow three easy steps:

Reporters reach the channel via a branded web link, an embedded form on your intranet, or a printed QR code on workplace posters. Email notifies the case handlers automatically.

Describe the issue

The whistleblower fills in an anonymous and 100% safe form. This step is very straightforward.

Provide optional evidence

The whistleblower can upload attachments like files, photos, videos and provide additional information if needed. All the reporting form fields can be customized.

Submit report

All data is being encrypted and a new case report is created. Case managers assigned by you are notified and are able to respond. Case attachments are scanned for viruses. Whistleblower receives a unique password-protected link to the case for further communication.

After submitting the report, it is delivered to your panel on the WeMoral service, and the designated persons are informed about it by e-mail. The decision is then made on how to proceed with the report. At the same time, the case manager in your company can safely contact the whistleblower to obtain more information or provide company feedback. The entire process of two-way communication is encrypted and secure, maintaining the highest confidentiality standards.

How anonymity is preserved end-to-end

No identity trail

We don't log IP addresses on the reporting form, browser fingerprinting and analytics scripts are off by default on the report-submission pages, and uploaded files have their metadata (EXIF, author, revision history) stripped before they reach the case file.

GDPR-compliant by design

Lawful basis, data-subject rights, and retention controls are built into the workflow, not bolted on. Standard Contractual Clauses are available on request for Enterprise customers.

End-to-end encrypted dialogue

Two-way messages between reporter and case handler are encrypted in transit and at rest. Anonymous reporters receive a one-time case code that lets them log back in to follow up, without ever creating an account or sharing an email.

EU data residency

All case data is stored in Frankfurt, Germany, inside the European Union. No data leaves EU jurisdiction during normal operation.

Is it mandatory? Since when should my company implement a whistleblowing service?

The UE Whistleblower Directive introduces fixed deadlines from which the possession of the whistleblowing service is obligatory for individual organizations. However, this does not exclude the possibility of an earlier voluntary implementation of such a system in your company if it is not covered by the obligation. According to the UE Whistleblower Directive:

Starting from December 17th, 2021 - the new law must be transposed into national law by the EU member states. from this date each organization with at least 250 employees must be ready to comply with the new law.

Starting from December 17th, 2023 - each organization with 50 – 249 employees must be ready to comply with the new law and implement a whistleblowing service.

What imposes the obligation for having a whistleblowing service?

The new requirement comes from the Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law and it obliges every entity operating within the EU to be compliant with it.

What kind of whistleblowing channel needs to be implemented?

Internal whistleblowing channels become more important than ever. According to the Directive, employers should implement suitable internal systems in order to encourage their employees to report incidents internally, i.e. to their employer in the first place. However, it should be noted that whistleblowers will be protected by the Directive also when reporting to competent authorities or to the media.

The EU Directive places specific requirements on the nature of the whistleblowing channel to be provided. The main condition is that the system shall ensure the anonymity of the whistleblower. WeMoral is a complex solution that provides employers with compliance with all the latest requirements, and provides employees with the highest level of security and anonymity.

Can my employer identify me if I submit anonymously?

No. The reporting form does not log IP addresses or browser fingerprints, uploaded files are stripped of metadata before reaching the case file, and an anonymous submission creates no account, email link, or session that could be traced back to you. The only way back into the conversation is the one-time case code shown after submission.

Where is the data hosted, and who can see it?

All case data is stored on EU-hosted infrastructure in Frankfurt, Germany. Access is limited to the case handlers your organisation designates; every read and write is logged in an audit trail.

How fast can we go live?

The reporter-facing form is configured and ready to receive reports in under 5 minutes. Embedding the channel into your internal procedures, training case handlers, and communicating it to staff typically takes a few days.

What happens to a report after the retention period?

Once the case-handling and statutory retention period expires, the report, attachments, and message history are securely deleted from the system. Deletion is irreversible; neither your team nor we keep a copy.

Whistleblower software which is
secure, confidential and compliant.

Encrypted communication

Provide a 100% safe communication channel for whistleblowers.

Comprehensive service

Everything in one place. Intuitive case management dashboard increases productivity.

Analytics

Keep track of reports within your company from a centralized dashboard.

Permissions

Control the access and assign roles through our easy-to-use control panel.

Launch your whistleblower reporting channel in less than 5 minutes!

A ready-made reporting page compliant with the EU Whistleblower Protection Directive. Deploy it without a developer.

Try for free