whistle.law is a cloud-based whistleblower reporting system from whistle.law GmbH in Sauerlach, Germany. Companies and municipalities use it to set up a digital reporting channel that meets the German whistleblower protection act. According to the vendor, the channel can be set up within minutes and extended to reports under the German supply chain due diligence act and the banking act, as well as other channels such as ESG. An external ombudsman team can optionally be added. The vendor offers personal contacts and a trial period.
whistle.law GmbH is headquartered in Germany, and no foreign owner is named. The website states that the service is made and hosted in Germany and operates in line with the GDPR. For a European organisation this means sensitive reports are processed within a single EU jurisdiction. Before use, check the data processing agreement, the role of the optional ombudsman team and the list of sub-processors, because reports often contain particularly sensitive information.