Implement the Whistleblower Protection Act Compliantly
Set up internal reporting channels, protect whistleblowers and manage cases confidentially and in a structured way – compliant with the Whistleblower Protection Act (HinSchG) and the EU Whistleblower Directive (2019/1937).
Implement the Whistleblower Protection Act with preeco
Anonymous Communication
The software enables anonymous communication with whistleblowers – a dialogue via report ID and self-chosen password, with no email address required. Identity remains protected – only authorized persons have access. To protect whistleblowers, preeco deliberately does not write any system log files that could allow conclusions about their identity.
Encrypted Data Processing in Germany
Cloud and Private Cloud data is processed encrypted and stored exclusively in ISO 27001-certified data centers of Hetzner Online GmbH in Germany. Confidentiality is guaranteed at all times.
Structured Case Management
Reports are systematically recorded and processed. The status of each report is traceably documented. Fully multi-tenant for external ombudspersons and compliance service providers.
Deadline Monitoring
Legal deadlines are automatically monitored – 7 days for the acknowledgment of receipt, 3 months for the feedback to whistleblowers – and are configurable per organization. The dashboard provides early warning of upcoming deadlines. All communication is documented in a verifiable manner. Available in up to 26 languages.
Whistleblower system for SMEs
Small and medium-sized enterprises which, as a rule, have at least 50 employees also need an internal reporting office under Section 12 of the German Whistleblower Protection Act (HinSchG) – permanently and with reasonable effort. preeco | whistleblower is designed for this: the reporting form is set up in just a few minutes via the administration area, a free onboarding service supports the introduction, and the HinSchG deadlines – confirmation of receipt within 7 days, feedback within 3 months – are monitored automatically. Case handling is structured with encrypted storage in ISO 27001-certified data centers in Germany, so the reporting office can be operated reliably even by small teams or an external ombudsperson.
FAQ
Frequently asked questions
The Whistleblower Protection Act requires a confidential internal reporting channel, the option to report anonymously, an acknowledgment of receipt within 7 days, feedback to the whistleblower within 3 months, traceable documentation, and protection of the whistleblower's identity. preeco | whistleblower implements these requirements technically – with an optionally anonymous reporting form, automatic deadline monitoring, structured case management, and encryption.
Yes. preeco | whistleblower fully maps the internal reporting office under the HinSchG and the EU Whistleblower Directive (2019/1937): from the publicly accessible, confidential and optionally anonymous reporting channel, through case processing with statutory deadlines, to verifiable documentation. Hosting of Cloud and Private Cloud is exclusively in ISO 27001-certified data centers in Germany, with no transfer of personal data to third countries.
Article 87 of the EU AI Act declares the EU Whistleblower Directive (2019/1937) applicable to the reporting of infringements of the regulation and to the protection of reporting persons – the same directive that the German Whistleblower Protection Act transposes. Whether and to what extent this creates a need for action in your company is a legal assessment you make together with your legal advisors. Technically, the reporting office is prepared for it: in preeco | whistleblower you add an additional category with its own checklist for reports about the use of AI, without changing the existing reporting channel, its URL or its deadlines.
Implement the Whistleblower Protection Act with preeco
Discover how preeco | whistleblower supports you with compliance.