Whistleblowing channel compliant with Law 2/2023 and EU Directive 2019/1937 · live in 24 h
Security and privacy

Built so that not even we can read a report

End-to-end encryption, data hosted in the EU and strict access controls. Reporter confidentiality is not a promise: it's the architecture.

End-to-end encryption

Content travels encrypted from reporter to case manager

Reporter
Encrypts in their browser before sending
eBlowing servers
Store only encrypted data, unreadable to us
Authorized case manager
Decrypts with their key after authenticating with 2FA
AES-256 at rest · TLS 1.3 in transit · keys managed in HSM
RGPD
GDPR and LOPDGDD

Processing compliant with the European regulation and the Spanish organic law, DPA included.

AEPD
Aligned with the AEPD

Reports and record of processing activities compliant with the Agency's criteria.

EU
Data hosted in the EU

Data centers in the European Union, with no international transfers.

Access control

Who sees what, and why

Two-factor (2FA)

Mandatory for all case managers. Without 2FA there is no backoffice access.

Roles and permissions (RBAC)

Owner, manager and read-only. Each role sees only what it should.

Conflict of interest

Automatic access block when the case manager is involved in the case.

Multi-tenant isolation

Each organization's data is logically separated. No leaks between entities.

Immutable audit logImmutable

Every action is sealed with date, time and responsible person, with no way to edit or delete. The proof of your diligence before the authority.

12 jun 09:14denuncia.recibida
14 jun 15:02acuse.emitido
15 jun 16:20expediente.admitido
18 jun 11:05evidencia.verificada
Transparency

Processing sub-processors

We publish the list of providers involved in the service. All with data in the EU.

Sub-processorPurposeLocation
Cloud infrastructure providerHosting and computeEU · Spain
Transactional email serviceNotifications to managersEU · Ireland
Payment gatewaySubscription billingEU
Backup serviceEncrypted backupsEU · Germany
Need our data processing agreement (DPA) or the details of technical measures? Contact us.

Comply with the law this very week

We support you through channel rollout and training your Compliance Body. No cost until it is live.

Request demoSee pricing