WhistleSystem

Danish whistleblowing platform with published employee-band pricing from €67/month and a plug-and-play setup pitch.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: Vendor claims continuous AI monitoring of security; no AI case-handling features were disclosed on public pages reviewed.

Rubric score

20 / 50

Evidence tier P

Public pages only. No trial, reporter submission, or handler environment was reviewed.

How this score is produced →

Facts

Website: whistlesystem.com(opens in new tab)
Headquarters: Albertslund, Denmark
Pricing: Tiered by employee count: €67/mo (0–250), €80/mo (250–500), €93/mo (500–750), from €107/mo (750+), plus a €200 one-time setup fee. Annual billing.
All tiers include full functionality. A trial exists but is gated behind booking a demo; no trial length is published. Add-on report screening, processing, and legal full-service are priced in DKK.
Languages on reporting form: Not published
Domain registered: November 2020 whistlesystem.com
Ownership: WhistleSystem ApS (CVR 41576561)
Customers: 500+ users (vendor claim)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Signed
Legal entity: WhistleSystem ApS

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✓
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001
ISO 27701

National laws referenced

EU Directive 2019/1937

Typical buyer

Danish SMEs that want low published employee-band pricing and a fast setup from a local ISO-certified vendor, and can accept a demo-gated trial and thin public compliance documentation.

Distinctive features

Fully published tier matrix from €67/month — unusual transparency in this market
Anonymity-first positioning with anonymous two-way dialogue in product
ISO 27001 and ISO 27701 certification claims plus concrete security details (encrypted attachments with metadata stripping, no IP-logging, Schrems II framing)

Add-ons and conditions

Costs or terms not included in the headline price.

€200 one-time setup fee on every tier
Per-month prices are billed annually with a one-year subscription period — no monthly contract
The free trial requires booking a demo first; no self-serve signup
Add-on services (report screening DKK 150/mo, processing DKK 250/mo, legal full-service ~DKK 7,712/yr) are priced in DKK while core plans are in EUR

Notable

WhistleSystem ApS (CVR 41576561), Roholmsvej 12 A, Albertslund, Denmark. Positioning is price- and speed-led: “the most secure and user-friendly whistleblower system in less than 20 minutes and at the best price.”
Pricing is fully public and tiered by employee count: €67/mo (0–250), €80/mo (250–500), €93/mo (500–750), from €107/mo (750+), each plus a €200 one-time setup fee. All tiers include full functionality. Billed annually with a one-year subscription period; the “/mo” figures are presentational.
A trial exists but is gated behind booking a demo, with no published trial length. Terms include a 14-day right of withdrawal and free cancellation during each one-year subscription period.
Add-on services are priced in DKK while core plans are in EUR: report screening DKK 150/mo, report processing with action plan DKK 250/mo, and a full-service legal treatment via an external lawyer (~DKK 12,712 setup, DKK 7,712/yr ongoing).
Security claims: ISO 27001 and ISO 27701 certification, full encryption, encrypted attachments with metadata removal, no IP-logging, and “ISO 27001-approved servers in Europe” — no hosting country, provider, certificate scope, or certification body named on the pages reviewed.
Public pages reviewed did not disclose a language list, reporter return-access mechanism, RBAC roles, deadline tracking, audit trail, DPA/DPIA documents, sub-processor list, API access, or customer count beyond “over 500 happy users.”

Scoring review - 2026-06-05

Scored under the 25-criterion rubric v2 at access tier P (public pages only; no trial, reporter submission, or handler environment was reviewed).

Base score: 20 / 50.

Category	Score	Max
A. Legal compliance	6	16
B. Reporter experience	6	10
C. Handler experience	2	10
D. Security	4	8
E. Commercial	2	6

Evidence supporting the score: published tier matrix and setup fee, anonymity-first product copy with anonymous two-way dialogue, ISO 27001/27701 claims, encrypted attachments with metadata stripping, and EU-region hosting language are all public.

Unverified from this pass: intake taxonomy, reporter return access, handler workflow beyond status/assignment claims, audit-trail semantics, retention configuration, and the substance of the ISO certifications (no certificate number, scope, or body named).

Frequently asked questions about WhistleSystem

Answers derived from vendor-published materials dated on this page.

Is WhistleSystem suitable for SMEs under 250 employees?

Likely yes — WhistleSystem's entry-tier pricing sits in the €50–100/month band, workable for most 50–249-employee organisations. Tiered by employee count: €67/mo (0–250), €80/mo (250–500), €93/mo (500–750), from €107/mo (750+), plus a €200 one-time setup fee. Annual billing. Danish SMEs that want low published employee-band pricing and a fast setup from a local ISO-certified vendor, and can accept a demo-gated trial and thin public compliance documentation.

Which national whistleblower laws does WhistleSystem explicitly reference?

WhistleSystem explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does WhistleSystem process whistleblower report content with AI?

Yes — WhistleSystem processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. Vendor claims continuous AI monitoring of security; no AI case-handling features were disclosed on public pages reviewed.