# AMODIT (Astrafox)

> AMODIT — from under €50 a month, hosting location not disclosed. Independent profile: vendor-published facts, each with its source and the date it was checked.

Canonical: https://whistleblowertools.eu/tools/amodit/
Last updated: 2026-10-23

## Notable

- The whistleblowing capability is a module on AMODIT, Astrafox's broader workflow and document-management platform, and can be run inside an existing AMODIT deployment or as a standalone whistleblowing channel.
- Vendor legal entity is Astrafox Sp. z o.o., ul. Poloneza 93, 02-826 Warsaw, Poland (office@amodit.com, +48 22 355 21 64).
- The product markets three whistleblowing channels: an online reporting form with a unique organizational link, a phone hotline (paid add-on), and email.
- Reporters choose among three modes: fully anonymous, confidential (identity withheld from the employer), and open. Anonymous reporters receive a link to follow their report and can exchange messages without revealing their identity.
- Case handling includes automatic assignment to personnel, forwarding between users and teams, status tracking, priority and deadline assignment, attachments, and a full action history per report.
- Compliance is framed against EU Directive 2019/1937 and the Polish whistleblower law ("ustawa o ochronie sygnalistow"), named descriptively without article numbers or the statute date.
- Two pricing tiers are published in PLN: Lite at 1,500 PLN per year with no customization, and Standard at 6,000 PLN per year plus a one-time 500 PLN activation fee, with paid add-ons for extra languages, data encryption, phone/email intake, and legal templates.
- The public offer page carries a validity date of 31.12.2024, so the listed figures may be out of date.
- Standard-tier customers can deploy in the cloud or on their own servers. The platform runs on Microsoft Azure, but a specific EU region was not disclosed on public pages reviewed.
- Astrafox states an independent ISO/IEC 27001 certificate (no. 4802510) and lists Azure's own ISO 27001, ISO 27018, and SOC 1/2/3 certifications for the hosting layer. The two should not be conflated: the vendor certificate is the one relevant to d19.
- Security page states TLS (SHA-256 with RSA) in transit and optional multi-factor authentication via third-party providers.
- No free trial, no self-serve online checkout, no published sub-processor list, and no API documentation for the whistleblower module were found on public pages reviewed.

## Facts

- website: https://amodit.com/whistleblower-protection/

- headquarters: Warsaw, Poland

- hosting: Microsoft Azure infrastructure (vendor-stated); Standard version can be deployed in the cloud or on customer servers; specific Azure region not disclosed on public pages reviewed

- pricing: Lite: 1,500 PLN per year (no customization). Standard: 6,000 PLN per year plus a one-time 500 PLN activation fee. Add-ons: additional reporting language 5,000 PLN each; data encryption 20% of licence value; phone/email intake 100 PLN per month readiness plus 250 PLN per report; legal document templates 1,500 PLN; legal consultation 4,500 PLN. Net prices.

- pricing note: Prices are quoted net and the public offer page carries a validity date of 31.12.2024, so figures may be out of date. Licences are annual; no self-serve online checkout or free trial was found on public pages reviewed.

- languages: 2

- domain registered: 2011-01-26

- ownership: Private, Astrafox Sp. z o.o. (Warsaw, Poland)

- product scope: suite_module

- suite name: AMODIT

- ideal for: Polish organizations, especially existing AMODIT workflow customers, wanting an EU-Directive-aligned whistleblowing channel with a cloud or on-premises deployment choice and published PLN pricing.

- last verified: 2026-10-23

- company id: VAT PL5252171560

| Capability | Published evidence |
| --- | --- |
| anonymous reporting | Yes |
| case management | Yes |
| multi channel | Yes |
| api access | Not published |
| free trial | No |
| two factor auth | Yes |
| audit log | Not published |
| uses ai | No |

## certifications

- ISO/IEC 27001:2022 (Astrafox; certificate 4802510, valid 2024-12-20 to 2027-12-19)

## national laws supported

- EU Directive 2019/1937

- Poland (Ustawa o ochronie sygnalistow)

## strengths

- map[Three whistleblowing channels:online reporting form, phone hotline, and email]

- map[Three reporter modes:anonymous, confidential, and open, with an anonymous tracking link and two-way anonymous dialogue]

- Cloud or on-premises deployment offered for the Standard version

- Full public price list in PLN for both Lite and Standard tiers plus add-ons

- Astrafox holds its own ISO/IEC 27001 certificate (no. 4802510), distinct from the Azure hosting certifications

- Multi-factor authentication supported via third-party providers (vendor-stated)

## Assessment

Base score: 28/50. Access tier: P. Reviewed: 2026-07-19.

Public pages only. No reporter submission or handler environment was reviewed.

### Is AMODIT suitable for SMEs under 250 employees?

Yes — AMODIT's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a whistleblowing channel. Lite: 1,500 PLN per year (no customization). Standard: 6,000 PLN per year plus a one-time 500 PLN activation fee. Add-ons: additional reporting language 5,000 PLN each; data encryption 20% of licence value; phone/email intake 100 PLN per month readiness plus 250 PLN per report; legal document templates 1,500 PLN; legal consultation 4,500 PLN. Net prices. Polish organizations, especially existing AMODIT workflow customers, wanting an EU-Directive-aligned whistleblowing channel with a cloud or on-premises deployment choice and published PLN pricing.

### Which national whistleblower laws does AMODIT explicitly reference?

AMODIT explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Poland (Ustawa o ochronie sygnalistow). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

### Does AMODIT process whistleblower report content with AI?

No — AMODIT does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.

## Sources

- https://amodit.com/whistleblower-protection/

- https://amodit.pl/ochrona-sygnalistow/

- https://amodit.pl/bezpieczenstwo-amodit/

- https://astrafox.com/

- https://astrafox.pl/wp-content/uploads/2025/11/Astrafox_Certyfikat_ISO_IEC_27001_2022.pdf

- https://sygnalista.amodit.com/