# OpenSource Hinweisgeberportal (splice digital)

> OpenSource Hinweisgeberportal — pricing not published, EU-hosted. Independent profile: vendor-published facts, each with its source and the date it was checked.

Canonical: https://whistleblowertools.eu/tools/opensource-hinweisgeberportal/
Last updated: 2026-09-21

## Notable

- Operated by splice digital GmbH, Grevenweg 80, 20537 Hamburg, Germany (Amtsgericht Hamburg HRB 175006, VAT DE352385698, managing director Karl Ludwig Weise).
- The product is a managed, hosted deployment of GlobaLeaks, the open-source whistleblowing engine developed since 2011 and stated to be used by over 30,000 organisations worldwide; it is not a bespoke platform.
- Positioned for compliance with the German Hinweisgeberschutzgesetz (HinSchG) and EU Directive 2019/1937; public pages cite specific HinSchG sections (§ 16 Abs. 3 and § 17 Abs. 1 Nr. 1).
- The delivered product is a web-based online reporting form; phone, postal, and in-person channels are discussed as separate legal options an organisation must weigh, not features of the product.
- Anonymous reporting is central, with a 16-digit receipt for anonymous status tracking, integrated two-way chat, and Tor access.
- Case management includes automated deadline management aligned to the 7-day acknowledgment and 3-month feedback duties, configurable questionnaires, and configurable retention (default 3 years) with automatic deletion.
- Over 90 reporting languages are stated, along with WCAG 2.2 accessibility alignment and the AGPL 3.0 open-source licence of the underlying engine.
- Security and compliance copy claims the solution is "designed according to" ISO 27001 and ISO 37002:2021; these are design-conformance statements, not certifications. No ISO 27001 certificate for the vendor or product was found, and ISO 37002 is a whistleblowing-management guidance standard rather than an information-security certification.
- Hosting is stated to be German data centres; the DPA (AV-Vertrag), NDA, and SLA are optional paid add-ons, and the subprocessor list is provided on request via the DPA.
- The public Datenschutz page names only website-level subprocessors (Netlify for site hosting, Plausible for analytics, Whereby for video calls), not the whistleblowing-platform hosting stack.
- Pricing is fully published: Company Bundle (EUR 49/month, EUR 39/month annual, EUR 0 setup), Professional Bundle (EUR 209/month, EUR 169/month annual, EUR 249 setup), and Enterprise (from EUR 249/month, EUR 199/month annual, from EUR 349 setup with dedicated hardware), all excluding VAT, plus itemised add-ons and training services.
- A free demo is offered; the homepage references a 30-day post-deployment money-back guarantee, but no self-serve free trial was found on public pages reviewed.

## Facts

- website: https://opensource-hinweisgeberportal.de

- headquarters: Hamburg, Germany

- hosting: German data centres (vendor-stated); managed hosting of the open-source GlobaLeaks engine

- pricing: Company Bundle EUR 49/month or EUR 39/month annual (EUR 0 setup); Professional Bundle EUR 209/month or EUR 169/month annual (EUR 249 setup); Enterprise from EUR 249/month or EUR 199/month annual (from EUR 349 setup, dedicated hardware). All prices exclude VAT.

- pricing note: Bundles are sized by storage, traffic, and hosting model, not by employee count. Paid add-ons include backups (EUR 79/month), monitoring (EUR 199/month), priority support (EUR 99/month), and SLA (from EUR 290/month); one-off setup/training services are listed separately. A free demo is offered and the homepage references a 30-day post-deployment money-back guarantee; no self-serve free trial was found on public pages reviewed.

- languages: 90

- ownership: Private (splice digital GmbH, Amtsgericht Hamburg HRB 175006, VAT DE352385698)

- product scope: standalone

- ideal for: German SMEs, public bodies, and other organisations of 50+ that want a HinSchG-compliant whistleblowing channel built on the open-source GlobaLeaks engine, hosted in German data centres, with fully published pricing.

- last verified: 2026-07-19

- company id: HRB 175006

| Capability | Published evidence |
| --- | --- |
| anonymous reporting | Yes |
| case management | Yes |
| multi channel | No |
| api access | Not published |
| free trial | No |
| two factor auth | Not published |
| audit log | Not published |
| uses ai | No |

## national laws supported

- EU Directive 2019/1937

- Germany (HinSchG)

## strengths

- Fully published pricing with monthly and annual bundles, unusual for a managed EU whistleblowing vendor

- German legal entity (splice digital GmbH, Hamburg) with public Impressum, VAT ID, and commercial-register number

- Public pages cite German transposition-law sections (HinSchG § 16 Abs. 3, § 17 Abs. 1 Nr. 1) alongside EU Directive 2019/1937

- Anonymous reporting with a 16-digit receipt and two-way anonymous follow-up, including Tor access

- Automated deadline management referencing the statutory 7-day acknowledgment and 3-month feedback duties, plus configurable retention with automatic deletion

- Over 90 reporting languages and stated WCAG 2.2 accessibility alignment

## Assessment

Base score: 33/50. Access tier: P. Reviewed: 2026-07-19.

Public pages only. No reporter submission or handler environment was reviewed.

### Is OpenSource Hinweisgeberportal suitable for SMEs under 250 employees?

OpenSource Hinweisgeberportal does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. German SMEs, public bodies, and other organisations of 50+ that want a HinSchG-compliant whistleblowing channel built on the open-source GlobaLeaks engine, hosted in German data centres, with fully published pricing.

### Which national whistleblower laws does OpenSource Hinweisgeberportal explicitly reference?

OpenSource Hinweisgeberportal explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

### Does OpenSource Hinweisgeberportal process whistleblower report content with AI?

No — OpenSource Hinweisgeberportal does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.

## Sources

- https://opensource-hinweisgeberportal.de/

- https://opensource-hinweisgeberportal.de/preise

- https://opensource-hinweisgeberportal.de/whistleblowing-software

- https://opensource-hinweisgeberportal.de/interne-meldestelle

- https://opensource-hinweisgeberportal.de/globaleaks

- https://opensource-hinweisgeberportal.de/impressum

- https://opensource-hinweisgeberportal.de/datenschutz