Elker

Australian speak-up and case-management platform, ISO 27001 certified and SOC 2 attested, marketed to Australia and New Zealand only — no EU or UK market surface.

Non-EU HQ

Non-EU headquarters — data sovereignty risk

Australia. This vendor is headquartered outside the European Union. EU personal data processed by the vendor is a cross-border transfer under GDPR Chapter V and depends on an adequacy decision, Standard Contractual Clauses, or a derogation. Non-EU providers introduce jurisdictional exposure to third-country data-access regimes. For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.

Facts

Website: elker.com(opens in new tab)
Headquarters: Australia
Hosting: Described as regional data hosting to meet local data privacy requirements. No region, country or provider is named on public pages reviewed.
Pricing: Quote-only. The vendor states pricing is tailored to organisation size, required features and compliance needs.
Every commercial route is a demo booking or a quote request; no plan names, bands or amounts are published. There is no self-serve trial.
Languages on reporting form: undisclosed
Domain registered: November 2002 elker.com
Customers: ANSTO, University of Melbourne, Stanwell and Allens named as customers (vendor claim)
Product scope: Standalone whistleblower product
Encryption posture: End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (quarantine)
DNSSEC: Signed

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication —
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✗

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO/IEC 27001
SOC 2

National laws referenced

Australia (Corporations Act, Public Interest Disclosure Act)
Australia (Work Health and Safety Act, Sex Discrimination Act, Modern Slavery Act, Aged Care Act)

Typical buyer

Australian and New Zealand employers, universities, schools and public bodies that need protected disclosures under the Corporations Act and PID Act alongside psychosocial hazard management.

Distinctive features

ISO 27001 certified and SOC 2 attested, with a Vanta trust portal published for buyer review and certificates available on request
Annual full-stack penetration testing by independent testers, staff background checks and vendor risk management are all described on the security page
SSO through Microsoft Entra and Active Directory, with role-based access control and client-visible permission management

Add-ons and conditions

Costs or terms not included in the headline price.

No pricing is published at any level and there is no self-serve route; every path is a demo or quote
The country selector offers only Australia / Global and New Zealand — there is no EU or UK market surface, and EU Directive 2019/1937 is not referenced on the pages reviewed
Hosting is described as regional without naming a region, country or provider, so EU residency cannot be established from public pages
The compliance framing is entirely Australian statute; an EU buyer would be buying outside the vendor's stated coverage

Notable

Elker is a genuine whistleblowing and case-management platform, but it is an Australian one. The compliance pages map to the Corporations Act, the Public Interest Disclosure Act, the Work Health and Safety Act, the Sex Discrimination Act, the Modern Slavery Act and the Aged Care Act. EU Directive 2019/1937 does not appear.
The country selector in the footer offers Australia / Global and New Zealand. There is no EU locale, no EU transposition page and no European office named.
Security disclosure is stronger than most of this field: ISO 27001 certification, SOC 2 attestation, a published Vanta trust portal, annual independent penetration testing, staff background checks, and AES-256 encryption in transit and at rest.
The product spans more than reporting — surveys, analytics, psychosocial hazard management, investigation workflows and an anonymous suggestion box sit in the same platform, with named use-case tracks for universities, schools, government and aged care.
Founders and board are named on the about page, with backgrounds in dispute resolution and mediation rather than compliance software, and a roster of external investigators and mediators is listed as consultants.

Status: not yet scored

Elker was added from the September 2026 AI-citation coverage audit, where assistants answering European whistleblowing questions cited it repeatedly. It is listed here so that citation can be checked against what the vendor actually sells: an Australian and New Zealand product with no European market surface. The entry carries no 25-criterion rubric score and does not appear in a country ranking, because the rubric scores products against EU Directive 2019/1937 and its transpositions, which this vendor does not claim to cover.

Frequently asked questions about Elker

Answers derived from vendor-published materials dated on this page.

Is Elker suitable for SMEs under 250 employees?

Elker does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Australian and New Zealand employers, universities, schools and public bodies that need protected disclosures under the Corporations Act and PID Act alongside psychosocial hazard management.

Which national whistleblower laws does Elker explicitly reference?

Elker explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Australia (Corporations Act, Public Interest Disclosure Act), Australia (Work Health and Safety Act, Sex Discrimination Act, Modern Slavery Act, Aged Care Act). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Elker process whistleblower report content with AI?

No — Elker does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.