Councils, agencies and public bodies

Whistleblowing platform for councils and public bodies

A whistleblowing platform for councils and public bodies has to do a little more. Public money is at stake. Decisions are set down in the minutes. And the person named in a report may be an elected member, not a member of staff.

Elected membersTenders and grantsData held in the EU
A council officer helping an older resident at a town hall service counter
Who is covered

Who counts as a worker in a public body

In a company the answer is usually the payroll. In a public body the list is longer, because the directive uses a wide meaning of worker.

Employees and officers

Everyone on the payroll, permanent or on a fixed term.

Elected and appointed members

The directive covers elected members and board appointees, even when they are not paid.

Volunteers and trainees

Covered whether or not they are paid, including unpaid placements.

Contractors and suppliers

People working under a contract with the body, and the staff they bring on site.

Agency and seasonal staff

Temporary cover for holidays, waste collection, leisure centres and the school term.

Former staff and job applicants

Former staff, and job applicants who learned of an issue while applying.

Common report topics

What gets reported to a council or an agency

Councillors and officers sitting around a table at a committee meeting

Most of these reports are about public money, decisions on the record, or duties that only a public employer has.

Tenders and contractsConflicts of interestGrants and fundingPlanning and licensing decisionsUse of public propertyResident data and recordsBullying, harassment or discriminationHealth and safety on site

Some of these cases end up in a committee paper or a public report. Keep the case record full enough to write that summary straight from it.

Twelve report categories come as standard. Rename or remove any of them, and add the ones your own code of conduct sets out.

Data residency

Where the case files are kept, and who can reach them

Buying teams ask this early, and usually in writing. Every case, message and file is stored in Frankfurt, Germany. The data does not leave the EU.

No IP address is recorded on the reporting form
Encrypted in transit and encrypted at rest
Every read and change is logged, and the reporter stays anonymous
Only the handlers you appoint can open a case

We sign a data processing agreement on request. That is what tender documents usually ask for.

Reports about members

When a report names an elected member

This is the case a public body should plan for first.

The report must not reach the person named

Name a second case handler before the page goes live. In most bodies that is internal audit, the legal adviser to the council, or a member of the audit committee.

Officers and members need separate routes

Staff may report about elected members, and elected members may report about staff. The two routes cannot share one inbox. Set up both, and record them in the policy.

The record has to outlast an election

Case handlers change after an election. You update who has access. The case list and the full history stay intact.

Frequently asked questions

Yes. The duty comes from your national whistleblowing law, the national law behind the EU Whistleblower Directive (2019/1937). Public bodies are covered. The staff count works differently for them than for companies, and some countries leave out only the smallest towns. Check the local rule.

No. They are stored in Frankfurt, Germany, and stay in the EU. Data is encrypted in transit and at rest. The list of sub-processors is written down. We sign a processing agreement on request.

That is your decision. The law covers a wide group of people who work for you. Anyone with the link can send a report. Some bodies publish the link. Others keep it to staff, members and contractors.

PRO costs €79 a month, net, with the year paid in advance. That includes unlimited reports and five panel users. The first 30 days are free, and the invoice can be settled by bank transfer rather than card.

Launch your whistleblower reporting channel in less than 5 minutes!

A ready-made reporting page compliant with the EU Whistleblower Protection Directive. Deploy it without a developer.