What can you report?

Whistleblowing concerns serious misconduct or breaches of law. Examples include:

Bribery, corruption, or money laundering
Sexual harassment or discrimination
Fraud or financial misconduct
Violations of health and safety regulations
Environmental damage or illegal emissions
Mishandling of personal data or privacy violations
Abuse of public procurement rules
Any other breach of law that harms the public interest

You do not need to be certain that a breach has occurred. A reasonable suspicion based on what you have observed or learned is sufficient. Reporting in good faith is always protected, even if an investigation later finds no wrongdoing.

What happens after you report?

You submit your report
You describe what you have witnessed through the secure reporting channel. You can attach files if needed. You receive a unique case code that you should save — this is your only way to check on your report later.
Your report is received
The designated case handler is notified. Under EU law, you must receive an acknowledgement within 7 days confirming that your report has been received.
The case is investigated
The case handler reviews your report, may ask follow-up questions through the platform, and investigates the matter. If your organisation uses an external law firm for whistleblowing, your report is handled by qualified legal professionals under attorney-client privilege.
You receive feedback
Under EU law, you must receive feedback on the actions taken within 3 months. You can check for updates at any time by logging in with your case code.

Anonymous or confidential?

When you submit a whistleblowing report, you may be asked to choose between anonymous and confidential reporting. Both are protected, but they work differently.

Confidential reporting

Your identity is known to the case handler, but is kept strictly confidential and is not shared with anyone else without your consent. This is the recommended option in most cases.

The case handler knows who you are, which makes it easier to investigate your report thoroughly
You can be contacted directly for follow-up questions
Your identity is protected by law — disclosing it without your consent is a violation
If you face retaliation, you have full legal protection and can prove that you made a report

Anonymous reporting

Your identity is not collected or stored. No one — including the case handler — knows who you are.

Maximum privacy — there is no record of your identity anywhere in the system
The investigation may take longer because the case handler cannot ask you follow-up questions directly
It may be harder to verify your report, which can reduce its effectiveness
If you need legal protection later, it may be more difficult to prove that you were the reporter

We recommend confidential reporting when possible. Your identity is protected by law in both cases, but confidential reporting generally leads to faster, more effective investigations and stronger legal protections for you.

Your legal protections

EU Directive 2019/1937 and national whistleblower protection laws protect you against all forms of retaliation for reporting in good faith. This includes protection against:

Dismissal, suspension, or demotion
Harassment, intimidation, or discrimination
Withholding of pay, promotion, or training
Negative performance assessments or references
Any other unfavourable treatment connected to your report

If you suffer retaliation after making a report, the burden of proof is reversed: your employer must prove that their actions were not connected to your report. You may also be entitled to legal aid, financial compensation, and interim relief measures.

It is safe to report

Your report is encrypted, your identity is protected by law, and the platform is designed with your safety in mind. If you have witnessed wrongdoing, reporting it is the right thing to do — and you are protected when you do.