# whistlebox > whistlebox — from under €50 a month, EU-hosted. Independent profile: vendor-published facts, each with its source and the date it was checked. Canonical: https://whistleblowertools.eu/tools/whistlebox/ Last updated: 2026-10-18 ## Notable - whistlebox is a digital whistleblowing reporting system marketed to the German Mittelstand for implementing the EU Whistleblowing Directive and HinSchG (German Whistleblower Protection Act). - The Impressum names DSM-Online GmbH (Fraunhoferstrasse 9, 85221 Dachau, Germany; managing directors Mirko Tasch and Oliver Sauer; VAT DE312905465; HRB 234478, Amtsgericht Muenchen); the "Ueber uns" page describes whistlebox as a product of DSM-Online GmbH while the site copyright credits CPExperts GmbH. - Reporting is anonymous and end-to-end encrypted, with an anonymous two-way live chat so handlers can request follow-up information while preserving anonymity; reporters can voluntarily waive anonymity. - Handlers get a central dashboard showing new, ongoing and closed cases with filter functions, status changes, PDF export, multi-tenant support, and customisable branding and questions. - Reporters can upload documents, images and other evidence, and two-factor authentication is listed among the technical security measures. - Deadline handling is supported through a calendar function that tracks cases against the Directive's statutory deadlines, and processors are notified when new reports arrive. - Reporter intake is stated in 12 languages: German, English, French, Spanish, Italian, Turkish, Dutch, Norwegian, Greek, Polish, Hungarian and Ukrainian. - Pricing is published by headcount and billed annually: EUR 69 (up to 50), EUR 249 (51-250), EUR 499 (251-500) and EUR 999 (501-1,000) per year, with 1,000+ employees quote-only; contracts run 12 months with automatic renewal and a four-week cancellation notice. - A 14-day free self-serve test account is available (first name, last name and email) with no automatic renewal; a live demo/consultation is also offered. - Hosting is stated to be in a German data centre with daily backups and described as ISO 27001 certified; this certification is attributed to the data centre, not to the vendor, and the hosting provider is not named on public pages reviewed. No ISO 27001 vendor certification, configurable retention with automatic deletion, role-based access control, internal handler notes, or API access were found on the public pages reviewed. ## Facts - website: https://www.whistlebox.de - headquarters: Dachau, Germany - hosting: German data centre (vendor-stated); hosting provider not named on public pages reviewed - pricing: Up to 50 employees EUR 69/year; 51-250 EUR 249/year; 251-500 EUR 499/year; 501-1,000 EUR 999/year; 1,000+ quote-only. Prices are annual on a 12-month contract. - pricing note: Billed annually on a 12-month contract with automatic renewal and a four-week cancellation notice. A 14-day free self-serve test account is offered with no automatic renewal and no credit card required at signup; a live demo/consultation is also available. - languages: 12 - ownership: Private - DSM-Online GmbH (Dachau, Germany); the site also brands whistlebox as a product of CPExperts GmbH - product scope: standalone - ideal for: German SMEs (Mittelstand) wanting an HinSchG- and EU-Directive-compliant whistleblowing channel with anonymous two-way chat, German data-centre hosting, and low published entry pricing. - last verified: 2026-10-18 - legal entity: DSM-Online GmbH - company id: HRB 234478 | Capability | Published evidence | | --- | --- | | anonymous reporting | Yes | | case management | Yes | | multi channel | No | | api access | Not published | | free trial | Yes | | two factor auth | Yes | | audit log | Not published | | uses ai | No | ## national laws supported - EU Directive 2019/1937 - Germany (HinSchG) ## strengths - Public headcount pricing from EUR 69/year, with only the 1,000+ tier left quote-only - 14-day self-serve free test account with no automatic renewal - Anonymous, end-to-end encrypted reporting with an anonymous two-way live chat - Reporter intake stated in 12 languages including German, English, French, Spanish, Italian, Dutch, Greek, Polish and Hungarian - Positioned as HinSchG- and GDPR-compliant, implementing EU Directive 2019/1937, with German data-centre hosting ## Assessment Base score: 24/50. Access tier: P. Reviewed: 2026-07-19. Public pages only. No reporter submission or handler environment was reviewed. ### Is whistlebox suitable for SMEs under 250 employees? Yes — whistlebox's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a whistleblowing channel. Up to 50 employees EUR 69/year; 51-250 EUR 249/year; 251-500 EUR 499/year; 501-1,000 EUR 999/year; 1,000+ quote-only. Prices are annual on a 12-month contract. German SMEs (Mittelstand) wanting an HinSchG- and EU-Directive-compliant whistleblowing channel with anonymous two-way chat, German data-centre hosting, and low published entry pricing. ### Which national whistleblower laws does whistlebox explicitly reference? whistlebox explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly. ### Does whistlebox process whistleblower report content with AI? No — whistlebox does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs. ## Sources - https://www.whistlebox.de/ - https://www.whistlebox.de/funktionen/ - https://www.whistlebox.de/hinweisgebersystem_software/ - https://www.whistlebox.de/kostenloser-testaccount/ - https://www.whistlebox.de/ueber-uns/ - https://www.whistlebox.de/impressum/ - https://www.whistlebox.de/datenschutz/