Whistleblower software for technology companies
Whistleblower software for technology companies is usually bought in a hurry. The duty starts at 50 people. Most software firms cross that line during a hiring round, and nobody notices until the next board meeting. Getting ahead of it takes an afternoon.
The headcount that turns this into a legal duty
The directive counts employees. Your headcount today decides what you need, and by when.
| Company size | What the law asks for | What to do about it |
|---|---|---|
|
Under 50 employees |
The directive asks for no internal channel |
No obligation yet. A channel at €79 a month avoids a rushed purchase later |
|
50 to 249 employees |
An internal channel. A reply in 7 days, and feedback in 3 months |
Open the channel. Write the procedure. Firms this size may share the work of handling reports |
|
250 employees and above |
The same duties. You may no longer share the channel |
Run your own channel. Name your handlers. Keep the audit trail |
|
Any size, in some sectors |
Financial services and a few others are covered from the first hire |
Check your national law before you trust the 50-person line |
Thresholds and dates come from your national law. Read that, not just the directive.
What a remote-first company has to solve
A distributed team breaks most of the usual advice. The same four questions come up every time, and none of them is about software.
The channel has to be where the team already works. Put the link in the handbook, the onboarding checklist and a pinned message in the company chat. Nothing gets printed.
A worker usually falls under the rules of the country they work in. One channel can serve everyone. Your written procedure names the law you follow, and what you promise the rest.
Contractors, freelancers and agency staff are protected when they report. Most have no company login. So the channel has to work from a plain public link.
In a company of eighty, a founder may be one of three people who would handle a case. Name a board member or an outside handler before that report arrives.
What gets reported inside a software company
Some of it looks like a security incident and some like an HR case, so one channel takes both.
Twelve categories ship as standard. Rewrite the list in the words your team already uses.
No model reads the report before you do
WeMoral runs no AI translation and no AI triage. What a worker writes is what a handler reads.
The form comes in 103 languages. A report is stored and shown exactly as the reporter typed it.
Frequently asked questions
When does a software company have to have a reporting channel?
It is set out in your national whistleblowing law, which brings the EU Whistleblower Directive (2019/1937) into force where you are. The line is 50 workers. Count contractors the way that law counts them, and check the date the duty began.
We are 40 people and hiring. Should we wait?
Waiting means buying this in your busiest month. The reporting page is live in under 5 minutes and PRO is €79 a month, so most teams open the channel early and leave it running.
Where is the case data stored, and who can open it?
In Frankfurt, Germany, inside the EU. Reports are encrypted in transit and at rest. Only the handlers you name can open a case, and every read and every change is logged.
Can we move off our current tool without losing open cases?
Yes. We migrate open cases with no downtime, and your audit trail on WeMoral starts on day one. The reporter carries on with the same code.