# Whistlelink

> Whistlelink — from €50–100 a month, EU-hosted. Independent profile: vendor-published facts, each with its source and the date it was checked.

Canonical: https://whistleblowertools.eu/tools/whistlelink/
Last updated: 2026-10-18

## Notable

- Signup provisions a working handler account in minutes. The `register/` form asks for name, work email, phone, country, language, company, and password; after email confirmation the handler picks a subdomain (`companyname.whistlelink.com`) and a reporter-site language, and the dashboard opens immediately with a six-step start guide.
- The handler admin exposes the pieces buyers check in procurement, not just a brochure. `Settings / Compliance` configures **retention time** (default 12 months) and **default case deadline** (default 3 months). The dashboard has tiles for **New cases**, **Open cases**, **Cases with new messages**, **Cases near deadline**, and **Cases to be deleted** — the retention and deadline timers are observable on the landing page.
- `Settings / Automations` is a priority-ordered rules engine for auto-assignment; the default rule ships as `Assign users with role Owner`.
- `User Management` exposes a real five-role RBAC grid (`Owner`, `Administrator`, `Case handler`, `Content Manager`, `Viewer`) plus a per-user MFA status column and an org-wide `Enforce two factor authentication` toggle.
- Sub-processors are named at the consent point. `Settings / Case Handling` offers two opt-in AI features: `Automatic Translation` names `DeepL (Germany)` as a new sub-processor; `AI: Case Summary` names `Mistral (France)`. Both are off by default.
- `Settings / Action log` records who changed what, when, with before-after values — timestamped and user-attributed.
- Romania-specific materials remain visible. Reporter-site language selector includes Romanian; the prior handler review found Romanian compliance categories out of the box (`Achiziții`, `Mită, corupție, conflict de interese`, `Hărțuire sexuală`, `Economie, finanțe, bani, spălare de bani`, etc.); public pages still include Romanian pricing, Law 361/2022 guidance, local territory-manager details, an AmCham offer page, and a Sun Wave Pharma Romania case study.

## Scoring review - 2026-05-24

Scored under the [25-criterion rubric v2](https://whistleblowertools.eu/methodology/) at access tier **P+H** (prior hands-on handler account plus 2026-05-24 public-page refresh; reporter portal was provisioned previously but a test submission was not filed).

**Base score: 39 / 50. Romania country bonus: 6 / 6.**

| Category | Score | Max |
|---|---|---|
| A. Legal compliance | 11 | 16 |
| B. Reporter experience (RO) | 7 | 10 |
| C. Handler experience | 9 | 10 |
| D. Security | 8 | 8 |
| E. Commercial | 4 | 6 |

**Evidence supporting the score**: public materials and the prior handler review support the retention, case-deadline, auto-assignment, RBAC, 2FA, action-log, and sub-processor claims. Romanian product and pricing pages, Law 361/2022 positioning, a Romania case-study page, and local contact details are also public.

**Unverified from this pass**: embedded article-by-article Law 361/2022 mapping, reporter return-access mechanics, and append-only audit semantics. Public pricing still describes annual subscription terms.

## Facts

- website: https://whistlelink.com

- headquarters: Sweden

- pricing: Tiered by employee count: €79 (0–49), €99 (50–149), €149 (150–249), €199 (250–499), €299 (500–999), contact for 1,000+. Annual subscription.

- pricing note: 30-day free trial, no credit card required. Romania pricing page is public.

- languages: 50

- founded: 2018

- domain registered: 2019-11-21

- ownership: Whistleblowing Solutions AB

- product scope: standalone

- encryption: at_rest

- ideal for: Organisations that want a European whistleblowing platform with Romanian-language public pages, public pricing, and documented EU hosting/DPA materials.

- last verified: 2026-10-18

- legal entity: Whistleblowing Solutions AB

| Capability | Published evidence |
| --- | --- |
| anonymous reporting | Yes |
| case management | Yes |
| multi channel | Yes |
| api access | No |
| free trial | Yes |
| two factor auth | Yes |
| audit log | Yes |
| uses ai | Yes |

AI Assistant generates case summaries; Romanian DPA names Mistral AI and DeepL as AI/translation providers.

## certifications

- ISO 27001

## national laws supported

- Sweden

- Denmark

- Finland

- Norway

- Germany (HinSchG)

- France (Sapin II)

- Romania (Law 361/2022)

## strengths

- Public Romanian pricing with a 30-day free trial

- Explicit Romania-law positioning around Law 361/2022

- Public security/DPA material covering ISO 27001, Sweden hosting, encryption, retention, and sub-processors

## Assessment

Base score: 39/50. Access tier: P+H. Reviewed: 2026-05-24.

### Is Whistlelink suitable for SMEs under 250 employees?

Likely yes — Whistlelink's entry-tier pricing sits in the €50–100/month band, workable for most 50–249-employee organisations. Tiered by employee count: €79 (0–49), €99 (50–149), €149 (150–249), €199 (250–499), €299 (500–999), contact for 1,000+. Annual subscription. Organisations that want a European whistleblowing platform with Romanian-language public pages, public pricing, and documented EU hosting/DPA materials.

### Which national whistleblower laws does Whistlelink explicitly reference?

Whistlelink explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Sweden, Denmark, Finland, Norway, Germany (HinSchG), France (Sapin II), Romania (Law 361/2022). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

### Does Whistlelink process whistleblower report content with AI?

Yes — Whistlelink processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. AI Assistant generates case summaries; Romanian DPA names Mistral AI and DeepL as AI/translation providers.

## Sources

- https://www.whistlelink.com/ro/

- https://www.whistlelink.com/ro/produs/

- https://www.whistlelink.com/ro/preturi/

- https://www.whistlelink.com/ro/aliniere-legea-avertizorilor-de-integritate/

- https://www.whistlelink.com/ro/despre-whistlelink/

- https://www.whistlelink.com/ro/contract-de-prelucrare-a-datelor/

- https://www.whistlelink.com/ro/blog/studiu-de-caz-interviu-cu-sun-wave-pharma-romania/

- https://www.whistlelink.com/amcham/

- https://www.whistlelink.com/wp-content/uploads/2022/05/Whistlelink_Security_EN.pdf

- https://www.whistlelink.com/wp-content/uploads/2022/05/Whistlelink_SaaS_Fact-sheet-3.pdf

- https://www.whistlelink.com/en-us/become-a-whistlelink-partner/

- https://portal.whistlelink.com/en-us/explore/whistleblowing-platform