EthicsPortal

EthicsPortal is a whistleblower reporting and case management platform built to help organizations meet the internal reporting channel requirements of EU Directive 2019/1937, which applies to organizations with 50 or more employees.

Key Features & Functions:

Rapid deployment
Organizations configure their identity, report categories, and data retention period, and the reporting channel goes live instantly at a unique URL with a shareable link and QR code. No sales demo or implementation project is required to begin. 

Anonymous reporting channel
Reporters access the channel from any browser, with no account, app, or login required. Reporting is anonymous by default, with no IP logging and automatic stripping of file metadata (EXIF, GPS, author) before storage.

Case management dashboard
Handlers triage, assign, and filter cases from a single dashboard, and can log reports received by phone or in person. Reports flagging a retaliation concern under Article 19 of the Directive are flagged automatically.

Secure reporter communication
Two-way messaging between reporters and case handlers protects reporter anonymity and handler identity, and cases can be exported to PDF for legal review or audit.

Statutory deadline tracking
The Directive's 7-day acknowledgment and 3-month feedback deadlines are tracked automatically, with overdue cases flagged.

Security infrastructure
Report data is encrypted at rest and hosted in Germany. Uploaded files are scanned for malware server-side, an append-only audit trail records all case activity, and a subprocessor list and data processing agreement are published for review. 

Identity and access management
SAML 2.0 single sign-on and SCIM 2.0 provisioning are included as standard, along with TOTP-based two-factor authentication for handler and admin accounts.

Compliance reference materials
An article-by-article map of how the platform addresses each requirement of Directive 2019/1937 is published on the vendor's site.