# OpenBlow > OpenBlow — pricing not published, hosting location not disclosed. Independent profile: vendor-published facts, each with its source and the date it was checked. Canonical: https://whistleblowertools.eu/tools/openblow/ Last updated: 2026-09-21 ## Notable - Operated by Laser Romae s.r.l., an ICT firm based at Viale Cesare Pavese 305, Rome; sales contact and phone are published on the site. - Positioned as a whistleblowing platform to report and manage illegal conduct, available as an AgID-qualified SaaS service or as an on-premise install integrated into the customer's own infrastructure. - Compliance page states the platform is in line with D.Lgs 24/2023 (implementing EU Directive 2019/1937), D.Lgs 231/01 organizational models, and GDPR; none of these are cited with article numbers. - The product is marketed elsewhere as an open-source whistleblowing platform (its own SEO page title and third-party directories), but the vendor content pages reviewed do not name GlobaLeaks or state a specific licence. - Features page describes personalized workflow management with intermediate and final states, validation/transition logic, and phases for acceptance, first assessment, investigation, and corrective actions. - Role model implements the operational roles foreseen by the legislation, plus customizable roles and clear separation of duties. - Multi-engine architecture with plugins to connect to pre-existing systems (authorization, workflow, message-queue, and object-storage) is described; a public reporting API was not documented on pages reviewed. - Homepage lists organizational logos (including RFI) as customers; the platform is used for public and private Italian deployments. - Security posture: periodic VAPT sessions supported by security standards (ISO 27001, OWASP, CISA/CISM of ISACA); the service is provided on a Cloud Service Provider enlisted in Cloud Security Alliance STAR (CAIQ documented). No product-held ISO 27001 certificate, hosting provider, or data-centre country was named on public pages reviewed. - No public pricing, self-serve trial, or monthly-contract terms were found; the for-business page targets consultants, lawyers, and DPOs reselling to their clients under a partner program. - Encrypted transport and storage protecting report contents, documents, and whistleblower identity is stated; DPA/DPIA documentation was not found on public pages reviewed. ## Facts - website: https://www.openblow.it - headquarters: Rome, Italy - hosting: Runs on an unnamed Cloud Service Provider qualified under AgID/ACN SaaS requirements and enlisted in Cloud Security Alliance STAR (vendor-stated); on-premise install within the customer's own infrastructure is also offered. - pricing: Not published. Procurement is contact-sales with custom implementation; a partner/reseller program is offered. - pricing note: No prices, tiers, or self-serve signup shown on public pages reviewed. The for-business page targets consultants, lawyers, and DPOs reselling to their clients. - domain registered: 2021-02-24 - ownership: Private, Laser Romae s.r.l. (Italy) - product scope: standalone - ideal for: Italian public-sector bodies and companies under D.Lgs 231/01 wanting an AgID-qualified whistleblowing channel available as SaaS or on-premise. - last verified: 2026-07-19 | Capability | Published evidence | | --- | --- | | anonymous reporting | Yes | | case management | Yes | | multi channel | No | | api access | Not published | | free trial | No | | two factor auth | Not published | | audit log | Not published | | uses ai | No | ## certifications - AgID/ACN SaaS qualification (vendor-stated) - Cloud Security Alliance STAR registry (vendor-stated) ## national laws supported - EU Directive 2019/1937 - Italy (D.Lgs 24/2023) - Italy (D.Lgs 231/2001) ## strengths - AgID/ACN SaaS qualification is stated, aligning it to Italian public-sector cloud procurement - Available as SaaS or as an on-premise install inside the customer's own infrastructure - Native support for D.Lgs 24/2023, D.Lgs 231/01, and GDPR is stated - Implements the operational roles required by the law plus customizable roles and separation of duties - Customizable questionnaires, workflow states, and a multilingual web interface accessible on PC, tablet, and smartphone - Multi-instance support for corporate groups and holdings; service enlisted in Cloud Security Alliance STAR ## Assessment Base score: 21/50. Access tier: P. Reviewed: 2026-07-19. Public pages only. No reporter submission or handler environment was reviewed. ### Is OpenBlow suitable for SMEs under 250 employees? OpenBlow does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Italian public-sector bodies and companies under D.Lgs 231/01 wanting an AgID-qualified whistleblowing channel available as SaaS or on-premise. ### Which national whistleblower laws does OpenBlow explicitly reference? OpenBlow explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Italy (D.Lgs 24/2023), Italy (D.Lgs 231/2001). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly. ### Does OpenBlow process whistleblower report content with AI? No — OpenBlow does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs. ## Sources - https://www.openblow.it/language/en/ - https://www.openblow.it/language/en/features-2/ - https://www.openblow.it/language/en/compliance-2/ - https://www.openblow.it/language/en/for-business-2/