Set up internal reporting channels, protect whistleblowers and manage cases confidentially and in a structured way – compliant with the Whistleblower Protection Act (HinSchG) and the EU Whistleblower Directive (2019/1937).
The software enables anonymous communication with whistleblowers – a dialogue via report ID and self-chosen password, with no email address required. Identity remains protected – only authorized persons have access. To protect whistleblowers, preeco deliberately does not write any system log files that could allow conclusions about their identity.
Cloud and Private Cloud data is processed encrypted and stored exclusively in ISO 27001-certified data centers of Hetzner Online GmbH in Germany; for the highest data sovereignty requirements, on-premises operation in your own infrastructure is additionally available. Confidentiality is guaranteed at all times.
Reports are systematically recorded and processed – with risk assessment in a 4x4 matrix, measures with responsibility for implementation, and linked reports for related cases. The status of each report is traceably documented. Fully multi-tenant for external ombudspersons and compliance service providers.
Legal deadlines are automatically monitored – 7 days for the acknowledgment of receipt, 3 months for the feedback to whistleblowers – and are configurable per organization. The dashboard provides early warning of upcoming deadlines. All communication is documented in a verifiable manner. The reporting form is available in up to 26 languages.
Small and medium-sized enterprises which, as a rule, have at least 50 employees also need an internal reporting office under Section 12 of the German Whistleblower Protection Act (HinSchG) – permanently and with reasonable effort. preeco | whistleblower is designed for this: cloud instances are provisioned within 48 hours on business days, the reporting form is set up in just a few minutes via the administration area, a free onboarding service supports the introduction, and the HinSchG deadlines – confirmation of receipt within 7 days, feedback within 3 months – are monitored automatically. Case handling is structured with encrypted storage in ISO 27001-certified data centers in Germany, so the reporting office can be operated reliably even by small teams or an external ombudsperson.
FAQ
The Whistleblower Protection Act requires a confidential internal reporting channel, the option to report anonymously, an acknowledgment of receipt within 7 days, feedback to the whistleblower within 3 months, traceable documentation, and protection of the whistleblower's identity. preeco | whistleblower implements these requirements technically – with an optionally anonymous reporting form, automatic deadline monitoring, structured case management, and encryption.
Yes. preeco | whistleblower fully maps the internal reporting office under the HinSchG and the EU Whistleblower Directive (2019/1937): from the publicly accessible, confidential and optionally anonymous reporting channel, through case processing with statutory deadlines, to verifiable documentation. Hosting of Cloud and Private Cloud is exclusively in ISO 27001-certified data centers in Germany, with no transfer of personal data to third countries by the software itself.
A whistleblower system complies with the HinSchG if it implements these requirements technically: a confidential internal reporting channel, the option to report anonymously, an acknowledgment of receipt within 7 days, feedback to the whistleblower within 3 months, traceable documentation of the processing, and effective protection of whistleblowers' identities. preeco | whistleblower implements every point – with an optionally anonymous reporting form, automatic deadline monitoring with reminders before deadlines expire, structured case management, encryption, and the deliberate absence of system log files that could allow conclusions about whistleblowers.
Article 87 of the EU AI Act declares the EU Whistleblower Directive (2019/1937) applicable to the reporting of infringements of the regulation and to the protection of reporting persons – the same directive that the German Whistleblower Protection Act transposes. Whether and to what extent this creates a need for action in your company is a legal assessment you make together with your legal advisors. Technically, the reporting office is prepared for it: in preeco | whistleblower you add an additional category with its own checklist for reports about the use of AI, without changing the existing reporting channel, its URL or its deadlines.
Discover how preeco | whistleblower supports you with compliance.