Whistleblowing Channel Compliance

Índice

What is the Anonymous Whistleblowing Channel for? 

The whistleblowing channel is used to inform about or report irregularities, without fear of reprisals given that it is anonymous. Law 2/2023, of 20 February, regulating the protection of persons who report regulatory infringements and the fight against corruption (Ley 2/2023, de 20 de febrero, reguladora de la protección de las personas que informen sobre infracciones normativas y de lucha contra la corrupción) states that the purpose of the whistleblowing channel is to:

  • Provide adequate protection against retaliation targetted towards individuals who report violations, which is why it should be anonymous, with no cookies being used, so that IP tracking cannot take place.
  • Prevent and detect threats to the public interest by strengthening information culture and organisations' integrity infrastructures and promoting a culture of information and communication.

Request a quote for a Whistleblowing ChannelPrecio canal denuncia

Request a quote and your own domain here

Features of our Whistleblowing Channel software:

  • 3 steps for installation:

    • 1.- consultation with the legal representation of workers; 

    • 2. installation of our parameterised ethical channel; 

    • 3.- internal and external awareness raising of the channel. 

 

How is our whistleblowing software managed?

 

 

In this video, we explain the process of receiving a report or suggestion through our whistleblowing channels. Employees in your company will use these channels to inform you about potential unethical or illegal behavior that may occur within your organization or to provide suggestions. This allows you to stay informed about possible issues as early as possible.

  • Entirely manageable from a web administration interface
  • Support for more than 90 languages with support for Right-to-Left (RTL)
  • Support for assigning and creating case management statuses
  • Customizable look and feel (logo, colour, styles, font, text)
  • Manage multiple whistleblowing sites from a single dashboard
  • Let whistleblowers decide if and when to confidentially declare their identity
  • Exchange multimedia files with whistleblower
  • Chat with whistleblower to discuss the report
  • Advanced questionnaire builder
  • Whistleblowing system statistics
  • Simple recipient interface for receiving and analysing reports
  • Support for the categorisation of the reports with labels
  • Support for the user search of reports
  • Automated Software Quality Measurement and Continuous Integration Testing
  • Long-Term Support plan (LTS)
  • Built with lightweight framework technologies (AngularJS and Python Twisted)
  • Fully self-contained application (no web or application servers needed)
  • Embedded database – SQLite (optional support for other databases)
  • Automatic setup of Tor Onion Services Version 3
  • Integrated backup support
  • Easy integration of the platform with existing websites and intranets
  • Support for self-service signup for whistleblowing SAAS service setup
  • Support for Linux operating system (Debian/Ubuntu)
  • Deb Packaging with repository for update/upgrades
  • HTTP/2 support
  • REST API
  • Provisioning API
  • Ready-made questionnaires for compliance law
  • Whistleblower identity conditional reporting workflow
  • Manage conflict of interest in the reporting workflow
  • Custodian functionality to authorise access to whistleblower identity
  • Compliant with ISO 37002 and EU Directive 2019/1937
  • GDPR configurable data retention policies
  • GDPR compliant subscriber module for new users of SaaS services
  • No logs of IP addresses
  • Integratable with existing enterprise case management platform
  • Free Software OSI Approved AGPL 3.0 License
  • Automatic free digital certificate enrollment (Let’s Encrypt)
  • Multiple penetration tests with full public reports
  • Conform to industry standards and best practices for application security by following OWASP Security Guidelines
  • Two-Factor authentication (2FA) support compliant with standard TOTP RFC 6238
  • Integrated network sandboxing with iptables
  • Integrated application sandboxing with AppArmor
  • Does not leave traces in browser cache
  • Complete protection against automated submissions (spam prevention)
  • Subject to continuous peer-review and periodic security audits
  • PGP support for encrypted email notifications

 

Follow this link to find out how to set up our software

Canal denuncia sin complicaciones:No-hassle reporting channel:
  • set up in 24 hours;
  • available 365 days;
  • personalised: your logo, your recipients;
  • supervised by IT specialists and lawyers (optional).
    • On-demand supervision: We may or may not be in CC for reports (as a security measure in the event of staff changes).
    • We can help you with the investigation of the reported incidents.
      The information can be shared with your trusted lawyers to comply with the law and defend your interests: Our firm has always been known for maintaining confidentiality and ensuring the necessary technical requirements are in place to guarantee it. Besides, this is a deontological duty and a legal obligation.

Assisted by experts

Josep Conesa

Josep Conesa

Expert instructor
Abigail Sked

Abigail Sked

Management of the Reporting Channel and GDPR
Cyrielle Agut

Cyrielle Agut

Instruction in English and French
Franesc Peyró

Franesc Peyró

Expert on malpractice
tor
 

100% Anonymous,
0% IP Tracking

Our platform recommends browsing through the 100% anonymous TOR browser.

world-circle
 

Multilingual +
Ticket Management

90 languages + report manager + customisable questionnaires

 

ISO 37001

Compliant with Directive 2019/1937: E.U. Server. - SSL Encryption - ISO 27001 Certified Provider - Periodic security reviews.

ALL IN ONE and RESPONSIVE:

Our vision is both preventative and reactive in order to best support our customers. That's why we have been setting up the software and the respective channels ourselves and we can implement it for you on a single platform, no strings attached:

In accordance with article 13 of the Law on Equality (Ley de Igualdad) and in compliance with Organic Law 10/2022 of the 6th of September, on the comprehensive guarantee of sexual freedom (Ley Orgánica 10/2022, de 6 de septiembre, de garantía integral de la libertad sexual), the sexual harassment prevention complaint channel is necessary in order to prove, as a defendant, the absence of discrimination regarding the measures adopted and their proportionality. 

 

What is the Ethics Channel?

More information (in Spanish) on the online prevention system

 


Which situations and incidents can be reported through the Whistleblowing Channel?

  • Any acts or omissions which may constitute infringements of European Union law.
  • Acts in breach of corporate tax rules or practices whose purpose is to obtain a tax advantage that distorts the Corporate Tax (Impuesto sobre Sociedades).
  • Actions or omissions that may constitute a serious or very serious criminal or administrative offence, in particular those involving financial loss to the
  • Treasury (Hacienda Pública) and Social Security.
  • Infringements of labour law in matters of occupational health and safety, without prejudice to that which is established in the relevant, specific regulations. 

What do I have to do when I receive a report from this Ethics Channel?

In the event of a complaint, the action protocol that has been decided must be initiated, within the timeframe that has been set. Acknowledgement of receipt must be sent and the investigative actions to be carried out must be initiated and recorded. The platform itself also contains a log of all the actions and modifications that are made within it.

Once the facts have been investigated, decisions must be taken based on the conclusions reached during the investigation. 

Who can make a report through the whistleblowing Channel? 

  • public sector employees
  • employees in both the private and the public sector
  • self-employed persons who have obtained information on offences while working for clients.
  • shareholders, partners and persons belonging to the administrative, management or supervisory body of a company, including non-executive members.
  • any person working for or under the supervision and direction of contractors, subcontractors and suppliers.
  • former employees
  • volunteers, interns, and trainees, whether or not they receive remuneration.
  • pre-employees, even if they have not yet started the employment relationship if they have obtained information during the selection process or pre-
    contractual negotiation.
  • legal representatives of the employees in the exercise of their duties to advise and support the informant.

What or who does the whistleblowing channel protect?

The whistleblower, as well as third parties attending the proceedings or related persons such as colleagues or relatives of the whistleblower who may suffer retaliation, or even legal persons with whom the whistleblower works or is linked to through an employment relationship or significant involvement, shall be protected when:

(a) they have reasonable grounds to believe that the information referred to is true at the time of the communication or disclosure, even if they do not provide conclusive evidence, and such information falls within the scope of the law,

(b) the communication or disclosure has been made in accordance with the requirements of the law.

The following are expressly excluded from protection:

(a) Information contained in communications that have been inadmissible by any internal information channel or for any of the causes provided for in Article 18.2.a) of the relevant law.

(b) Information linked to complaints about interpersonal conflicts or affecting only the informant and the persons to whom the communication or disclosure refers.

(c) Information which is already fully available to the public or which constitutes mere hearsay.

(d) Information which relates to acts or omissions not covered by Article 2 of the law.

How should I protect the anonymous whistleblower?

Acts constituting retaliation, including threats of retaliation and attempts to retaliate against persons who make a communication under this law are prohibited.

Retaliation means acts or omissions that are prohibited by law, or that directly or indirectly result in unfavourable treatment that places the persons subjected thereto at a particular disadvantage compared to another person in the employment or professional context, solely because of their status as whistleblowers, or because they have made a public disclosure.

Retaliation includes but is not limited to:

  • Damage, including reputational damage, or financial loss, coercion, intimidation, harassment or ostracism.
  • Negative evaluation or references regarding working or professional performance.
  • Blacklisting or dissemination of information in a particular sectoral area which hinders or prevents access to employment or the contracting of work or services.
  • Refusal or cancellation of a licence or permit.
  • Refusal to train.
  • Discrimination, or unfavourable or unfair treatment.
  • And, unless these measures were carried out as part of the regular exercise of managerial power under labour legislation or the relevant public employee statute, due to circumstances, facts or accredited infractions, and unrelated to the submission of the communication, the following will also be considered retaliation:
    • Suspension of the employment contract
    • Dismissal
    • Termination of the employment or statutory relationship, including non-renewal or early termination of a temporary employment contract once the probationary period has ended, or early termination or cancellation of contracts for goods or services,.
    • Imposition of any disciplinary measure
    • Demotion or denial of promotion.
    • Any other substantial modification of working conditions
    • Failure to convert a temporary employment contract into a permanent one, if the worker had legitimate expectations that he/she would be offered a permanent job.

When am I required to have an anonymous whistleblowing channel? 

Companies with more than 50 employees are required to have an anonymous whistleblowing channel or "anti-corruption channel" as of the 31st of December 2023.

Example of a compliance whistleblowing channel

Do you have any queries?

Check out our example of a whistleblower channel here

Types of compliance reporting channels