Encrypted reporting
Submissions and storage are encrypted. Only authorised case handlers can see a report.
Whistleblowing
EU law requires a confidential channel so people can report misconduct without fear. The organisation has a duty to listen, and a record of what followed.
The duty
The person who sees something needs a route that will not cost them their position. The organisation needs to hear it while there is still time to act. A reporting channel is that obligation, made concrete, not an extra service.
The law
The EU Whistleblower Directive, and the rules that implement it locally, require a route that can be used in confidence: anonymity where the law allows, defined time limits, and a record of what was done. That is the standard. Not a policy left in a drawer.
The channel
What a proper reporting channel must be able to do, in practice, not on paper.
Submissions and storage are encrypted. Only authorised case handlers can see a report.
The person who reports can remain unnamed. Follow-up questions can be asked without revealing who spoke.
Lawful processing, defined retention, and documentation aligned with the Directive.
Receipt, assessment, follow-up and a trail of what was done, with the time limits the law sets.