The EU Whistleblower Directive (2019/1937) requires organizations with 50 or more staff to offer an internal reporting channel. Whistleblowing gives you a confidential reporting page and a place to handle the reports.
How to open the channel
- Open Whistleblowing in the organization menu.
- Under Reporting channel, turn on Channel is open.
- Write the Text on the reporting page: who handles reports, what can be reported, and other ways to report, for example to the authority.
- Save, and share the public page /report/ with staff and partners, for example on your intranet.
Who handles reports
Owners handle reports by default. To name other handlers, for example a compliance officer, give them a custom role with the whistleblowing rights. Keep this group small.
How to handle a report
Reports are numbered WB-1, WB-2 and so on. Two deadlines apply:
- Confirm receipt within 7 days.
- Give feedback within 3 months.
You get a reminder a day before the receipt deadline and a week before the feedback deadline. Missed deadlines are shown.
- Open the report.
- Write under Reply to the reporter and click Send reply. The reporter reads it with their case code. Your first reply confirms receipt.
- To keep something for the handlers only, tick Internal note (the reporter does not see it) and click Save note.
- Change the status as you go: Received, Receipt confirmed, Being looked into, Closed.
- When a report must be removed, use Delete report. This cannot be undone.
Confidentiality
- Report texts are stored encrypted.
- The reporter's IP address is not stored.
- Notifications and the audit log contain only the report number, never its content.
Tips
- Keep your answers factual and do not try to find out who an anonymous reporter is.
- Whistleblowing is included from the Professional package.