Skip to main content
EU Whistleblower Directory
OpenWhistle logo

OpenWhistle

Portuguese whistleblowing channel with flat per-organisation pricing and unlimited users, published from EUR 17.60/month on annual billing.

OpenWhistle homepage screenshot
Typical buyer

Portuguese SMEs and public bodies needing a Lei 93/2021 compliant whistleblowing channel with fixed, per-organisation pricing that does not scale with headcount.

Distinctive features

  • Flat per-organisation pricing with unlimited users, so cost does not rise with headcount
  • Public pricing shown on the site, including monthly and discounted annual rates
  • Anonymous two-way communication with a 16-digit receipt code for follow-up
  • Support for more than 90 reporting languages, including right-to-left scripts
  • Role-based access with named roles (whistleblower, recipient, custodian) and 2FA (TOTP RFC 6238)
  • GDPR-aligned privacy policy citing specific GDPR article bases and EU data storage

Add-ons and conditions

Costs or terms not included in the headline price.

  • Only one plan is published; larger-organisation or managed-service options are demo-led
  • No free trial; every call to action is a demo request rather than self-serve signup
  • ISO 27001:2022, ISO 37002:2021 and CSA STAR are cited as "designed in accordance with", not as held certifications; no certification evidence on public pages reviewed
  • Privacy policy states data may be transferred to cloud providers outside the EEA under GDPR safeguards, despite EU-storage messaging; hosting country and a named subprocessor list are not published
  • The included plan covers interface configuration in up to 3 languages at setup; further languages are self-managed afterward

Notable

  • OpenWhistle is a brand of Canelinfinita, Unipessoal Lda, a Portuguese company (NIPC 518494128) with its registered office in Porto and a contact address in Águas Santas, Maia.
  • Positioned as a whistleblowing channel for companies in compliance with Portugal’s Lei 93/2021, the GDPR, and EU Directive 2019/1937; the copy references the MENAC and RGPC obligation for organisations with 50 or more employees.
  • Pricing is flat per organisation with unlimited users: EUR 22/month, or EUR 17.60/month billed annually (EUR 211.20/year), with VAT added on top. The vendor states the monthly fee stays the same whether the organisation has 30 or 300 employees.
  • The included plan covers one configured form, initial setup with up to 5 recipients, custom branding, interface in up to 3 languages, hosting, maintenance and updates, and email support within one business day; additional recipients, forms and languages are self-managed afterward.
  • The feature set is characteristic of the GlobaLeaks open-source platform: a 16-digit anonymous receipt, a custodian role authorising access to a whistleblower’s identity, Tor support, PGP email notifications, more than 90 languages, and an OSI-approved AGPL 3.0 licence are all listed.
  • The platform is described as designed in accordance with ISO 27001:2022, ISO 37002:2021, CSA STAR and OWASP recommendations; these are framed as design references, not as held certifications, and no certification evidence was found on public pages reviewed.
  • Security claims include full encryption of reports and communications, TLS 1.3, AES-256 at rest, RBAC, 2FA (TOTP RFC 6238), no IP address registration, and periodic penetration tests.
  • The home page states data is stored within the European Union, while the privacy policy notes data may be transferred to cloud providers based outside the EEA under GDPR safeguards; no specific hosting country or named subprocessor list is published.
  • The how-it-works page mentions submission via web, secure email or telephone, but the dedicated channel list shows only a web portal, so multi-channel intake beyond the online reporting form was not clearly confirmed.
  • Onboarding is demo-led: pricing is public but every call to action routes to a demo request, and no free trial was found on public pages reviewed.
  • The privacy policy cites specific GDPR legal bases (Art. 6(1)(b), (c) and (f)) and lists retention periods, but no separate DPA download or DPIA support was found on public pages reviewed.

Similar to OpenWhistle

Other platforms in the directory with overlapping pricing model, certifications, or procurement path.

Frequently asked questions about OpenWhistle

Answers derived from vendor-published materials dated on this page.

Is OpenWhistle suitable for SMEs under 250 employees?
Yes — OpenWhistle's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Single plan: EUR 22/month, or EUR 17.60/month billed annually (EUR 211.20/year, described as 20% saving). VAT added on top. Price is per organisation with unlimited users. Portuguese SMEs and public bodies needing a Lei 93/2021 compliant whistleblowing channel with fixed, per-organisation pricing that does not scale with headcount.
Which national whistleblower laws does OpenWhistle explicitly reference?
OpenWhistle explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Portugal (Lei 93/2021). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.
Does OpenWhistle process whistleblower report content with AI?
No — OpenWhistle does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.

Compare OpenWhistle with another platform

Direct side-by-side comparisons against other tools in this directory.

See alternatives to OpenWhistle →