whistlebox
German whistleblowing channel from DSM-Online GmbH aimed at the Mittelstand, with public headcount pricing from EUR 69/year and a 14-day self-serve trial.

Typical buyer
German SMEs (Mittelstand) wanting an HinSchG- and EU-Directive-compliant reporting channel with anonymous two-way chat, German data-centre hosting, and low published entry pricing.
Distinctive features
- Public headcount pricing from EUR 69/year, with only the 1,000+ tier left quote-only
- 14-day self-serve free test account with no automatic renewal
- Anonymous, end-to-end encrypted reporting with an anonymous two-way live chat
- Reporter intake stated in 12 languages including German, English, French, Spanish, Italian, Dutch, Greek, Polish and Hungarian
- Positioned as HinSchG- and GDPR-compliant, implementing EU Directive 2019/1937, with German data-centre hosting
Add-ons and conditions
Costs or terms not included in the headline price.
- Contracts run 12 months with automatic renewal and a four-week cancellation notice; no month-to-month option was found
- The 1,000+ employee tier is quote-only
- ISO 27001 is attributed to the data centre, not to the vendor, on public pages reviewed
- The hosting provider is not named and no whistleblowing sub-processor list was found on public pages reviewed
- The Impressum names DSM-Online GmbH while the site's copyright credits CPExperts GmbH
Notable
- whistlebox is a digital whistleblowing reporting system marketed to the German Mittelstand for implementing the EU Whistleblowing Directive and HinSchG (German Whistleblower Protection Act).
- The Impressum names DSM-Online GmbH (Fraunhoferstrasse 9, 85221 Dachau, Germany; managing directors Mirko Tasch and Oliver Sauer; VAT DE312905465; HRB 234478, Amtsgericht Muenchen); the “Ueber uns” page describes whistlebox as a product of DSM-Online GmbH while the site copyright credits CPExperts GmbH.
- Reporting is anonymous and end-to-end encrypted, with an anonymous two-way live chat so handlers can request follow-up information while preserving anonymity; reporters can voluntarily waive anonymity.
- Handlers get a central dashboard showing new, ongoing and closed cases with filter functions, status changes, PDF export, multi-tenant support, and customisable branding and questions.
- Reporters can upload documents, images and other evidence, and two-factor authentication is listed among the technical security measures.
- Deadline handling is supported through a calendar function that tracks cases against the Directive’s statutory deadlines, and processors are notified when new reports arrive.
- Reporter intake is stated in 12 languages: German, English, French, Spanish, Italian, Turkish, Dutch, Norwegian, Greek, Polish, Hungarian and Ukrainian.
- Pricing is published by headcount and billed annually: EUR 69 (up to 50), EUR 249 (51-250), EUR 499 (251-500) and EUR 999 (501-1,000) per year, with 1,000+ employees quote-only; contracts run 12 months with automatic renewal and a four-week cancellation notice.
- A 14-day free self-serve test account is available (first name, last name and email) with no automatic renewal; a live demo/consultation is also offered.
- Hosting is stated to be in a German data centre with daily backups and described as ISO 27001 certified; this certification is attributed to the data centre, not to the vendor, and the hosting provider is not named on public pages reviewed. No ISO 27001 vendor certification, configurable retention with automatic deletion, role-based access control, internal handler notes, or API access were found on the public pages reviewed.
Similar to whistlebox
Other platforms in the directory with overlapping pricing model, certifications, or procurement path.
EticAlert Spanish self-service whistleblowing channel from FONCAD GROUP for SMEs under Ley 2/2023, with published pricing from EUR 9/month and EU hosting.
whizzla German cloud whistleblowing channel from lexato GmbH with plug-and-play deployment and published monthly tiers from EUR 49 net.
EasyWhistle
Finnish whistleblowing channel from Easywhistle Oy with self-signup pricing from EUR 39/month on annual billing or EUR 69 month-to-month.Lumgo Swedish whistleblowing SaaS from Lumgo AB with EU-only hosting, Microsoft 365 / Google Workspace sign-in, and published per-employee pricing from SEK 4,500/year.
Frequently asked questions about whistlebox
Answers derived from vendor-published materials dated on this page.
Is whistlebox suitable for SMEs under 250 employees?
Yes — whistlebox's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Up to 50 employees EUR 69/year; 51-250 EUR 249/year; 251-500 EUR 499/year; 501-1,000 EUR 999/year; 1,000+ quote-only. Prices are annual on a 12-month contract. German SMEs (Mittelstand) wanting an HinSchG- and EU-Directive-compliant reporting channel with anonymous two-way chat, German data-centre hosting, and low published entry pricing.
Which national whistleblower laws does whistlebox explicitly reference?
whistlebox explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.
Does whistlebox process whistleblower report content with AI?
No — whistlebox does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.
Compare whistlebox with another platform
Direct side-by-side comparisons against other tools in this directory.