preeco | whistleblower
Confidential and optionally anonymous reporting in compliance with the HinSchG and the EU Whistleblower Directive – digital, structured, and multi-tenant capable. Anonymity is built in as a structural design principle: to protect whistleblowers, preeco deliberately does not write any system log files that could allow conclusions about their identity.
Trusted by these companies
Reporting Channel
Digital Reporting Channel
A publicly accessible reporting form for confidential and optionally anonymous reporting. Easily configurable, available in up to 26 languages, and with automatic acknowledgment of receipt in compliance with whistleblower protection laws.
Digital Reporting Channel
A publicly accessible reporting form for confidential and optionally anonymous reporting. The integrated step-by-step wizard guides whistleblowers safely and clearly through the entire reporting process – no technical expertise required.
The form is highly customizable: introductory texts, application areas, and required fields can be individually configured. Available in up to 26 languages with automatic acknowledgment of receipt within 7 days in compliance with the HinSchG. Attachments such as documents, images, screenshots, or voice messages can be submitted directly with the report.
Management
Report Management and Communication
Structured processing and documentation of all reports with full communication in a secure area – compliant with whistleblower protection requirements.
Convenient Report Management
Structured processing and documentation of all reports with a chronological timeline. Personal dashboard with an overview of open, new, unassigned, and deadline-due reports. Assignment of case handlers, status management, and automatic deadline tracking for 7-day acknowledgment of receipt and 3-month feedback. Reusable text templates speed up case processing.
Secure Communication Area
Secure exchange with whistleblowers via a protected area using a report ID and password. Encrypted correspondence, follow-up questions, and status updates. Full confidentiality in compliance with whistleblower protection requirements.
Risk
Detailed Risk Assessment
Comprehensive assessment of each report using a structured risk matrix. Documentation of circumstances, causes, consequences, and measures for transparent case processing.
Risk Assessment
Comprehensive assessment of each report using a 4x4 risk matrix. Documentation of circumstances, causes, and consequences. Recording of measures including implementation status for transparent case processing.
Organization
Manage Multiple Organizations
Central management of multiple organizations in preeco | whistleblower – ideal for external ombudspersons and compliance service providers with individual settings per tenant.
Tenant Management
Central management of multiple organizations (tenants) in preeco | whistleblower. Ideal solution for external ombudspersons and compliance service providers. Individual settings and branding per organization with quick switching.
Roles and Permissions
A clear role model: administrators manage all organizations centrally, ombudspersons have access to all reports of their associated organizations, and case handlers only see the reports assigned to them.
Reporting
Reporting, Data Security, and Deadlines
Complete documentation for compliance obligations and audit readiness – with the highest security standards and automatic deadline monitoring.
Professional Reporting
Export reports as PDF, DOCX, or ZIP with all attachments. Filterable overview tables as XLSX. Complete documentation for compliance obligations and audit readiness.
Encrypted Data Storage
SSL/TLS encryption for all data transmissions. AES encryption of essential data in the database. Two-factor authentication (TOTP) – optional for individual accounts and enforceable team-wide, complemented by brute-force protection with graduated lockout periods. Hosting exclusively in ISO 27001 certified data centers in Germany. To protect whistleblowers, no access data that could identify them is logged – preeco | whistleblower deliberately goes as far as not writing system log files.
DeepL Integration
Professional automatic translation of report contents and correspondence in up to 26 languages via the DeepL API – an optional add-on, so you only pay for the translations you actually use. This lets you process reports from multilingual workforces in your working language.
Deadline Management & Follow-Up
Automatic monitoring of legal deadlines (7-day acknowledgment of receipt, 3-month feedback). Follow-up function for timely processing. Dashboard alerts for due deadlines and unassigned reports. Closed reports are flagged for GDPR-compliant deletion on a configurable date after case closure.
Designed for Accessibility
Keyboard operability, semantically structured HTML, sufficient contrast, scalable font sizes and alternative texts for graphics. Accessibility is continuously reviewed and improved. Read our accessibility statement
Testimonials
What Our Customers Say
Referenz
With preeco | whistleblower, we can professionally support our clients in implementing whistleblower protection legislation. The multi-tenant solution enables us to centrally manage all reporting offices on one platform.
Tobias Hess
Managing Director
DSGVO Service Tobias Hess
Choose Your Hosting Option
Flexible, secure, and tailored to your needs — choose the right hosting solution.
01 / CLOUD HOSTING
Cloud Hosting
RECOMMENDEDStandard multi-tenant solution with quick setup. Deployment within 48 hours (business days). Ideal for getting started right away.
02 / PRIVATE CLOUD
Private Cloud
Dedicated instance with your own domain. Single Sign-On (SAML2) available as an option. For organizations with advanced requirements.
03 / ON-PREMISES
On-Premises
Installation in the customer's own data center. Maximum control and data sovereignty. Optional Single Sign-On (SAML2). On request – typically available for public-sector and enterprise customers.
Cloud and Private Cloud options are hosted in ISO 27001-certified Hetzner Online GmbH data centers in Germany (Nuremberg, Falkenstein). The data centers run on 100% green electricity. Daily backups with 7-day retention and off-site backup at the Hetzner Falkenstein data center. Guaranteed availability: 99.0% per calendar month. Deployment within 48 hours (business days). No setup fees and no cancellation periods.
Support
Support & Service Level
Personal support during onboarding and day-to-day operations – with clearly defined service hours and channels.
Defined service hours
Our support team is available Monday to Friday, 9:00 am to 5:00 pm in German and English (excluding public holidays in Germany). Extended 24/7 standby is optionally available.
Guaranteed response times
Clearly defined response times by priority – identical in Cloud and Private Cloud: from 2 business hours for critical incidents to 3 working days for general inquiries. If response times are not met, a multi-level escalation process applies, up to executive management.
Multiple support channels
Reach us by email and ticket system as well as – subject to availability – via online chat, so you get help quickly and easily.
Premium support
Optionally available at an additional cost: personal phone support and assistance via online video conference for particularly demanding requirements.
Onboarding and training
We support your rollout with a dedicated contact person as well as online training for administrators and ombudspersons. Documentation and help texts are available directly within the application.
Updates without downtime
The software is generally available 24/7. Updates are rolled out automatically about once a month without downtime; security updates are applied at short notice when needed. After each update, a pop-up in the application transparently shows the changes made. Longer maintenance work is announced in advance.
Interfaces and API
The application is designed as a self-contained system; a public REST API is currently not available. For Private Cloud and On-Premises variants, customer-specific API endpoints can be developed and provided.
Digitize Whistleblower Protection Now
In a personal meeting, we will show you preeco | whistleblower and your options.
FAQ
Frequently Asked Questions
Setup is quick via the administration area. Enter your organization details, customize introductory texts, select available languages, and configure application areas. Your individual reporting form is ready to use in just a few minutes. Our free onboarding service supports you throughout the process.
Yes, whistleblowers can choose to submit their report completely anonymously. In this case, they simply create a report ID with a password for secure access, without providing any personal data. Communication takes place exclusively through the secure area.
Communication takes place via the secure area. Whistleblowers log in with their report ID and password and can see all messages there. They can answer follow-up questions and are informed about the status. All correspondence is stored encrypted and is only visible to authorized case handlers.
Yes, the software is fully multi-tenant capable. As an external ombudsperson or compliance service provider, you can manage multiple organizations centrally. Each organization receives individual settings, its own branding, and separate reporting forms. Switching between tenants is just one click away.
preeco | whistleblower is available in three hosting options: Cloud (SaaS) with rapid deployment, Private Cloud (PaaS) with a dedicated server and your own domain, or On-Premises on your own infrastructure. Cloud and Private Cloud are operated in ISO 27001 certified data centers in Germany.
Since July 2023, all companies with 50 or more employees must establish an internal reporting office. For companies with 250 or more employees, the obligation has applied since December 2023. Municipalities, districts, and public institutions with 10,000 or more inhabitants are also affected. A digital reporting channel like preeco | whistleblower fulfills the legal requirements and simplifies management.
Violations of the Whistleblower Protection Act can be penalized with fines. This applies both to the absence of an internal reporting office and to retaliation against whistleblowers. Additionally, affected whistleblowers can assert claims for damages.
The internal reporting office is operated by the company itself or by an assigned third party (e.g., an ombudsperson). Whistleblowers are free to choose whether to use the internal or external reporting office at the Federal Office of Justice. A well-set-up internal reporting office allows the company to detect issues early and resolve them internally before external authorities are involved.
preeco strives to make its digital services accessible, based on the relevant statutory requirements. Key measures include keyboard operability, semantically structured HTML, sufficient contrast, scalable font sizes, alternative texts for graphics, and clear, understandable language. Accessibility is continuously reviewed and improved.