Whistleblowing Software Made Simple

In the EU, every organisation with 50 or more employees must run an internal reporting channel under the Whistleblower Protection Directive 2019/1937 and its national laws. Public bodies and regulated sectors such as financial services are covered regardless of size. Below 50 employees the channel is voluntary, but customers, tenders and ISO 37001 / 37002 audits increasingly ask for it.

Yes. You decide whether your channel accepts anonymous reports, identified reports or both. An anonymous reporter files through your public whistleblower portal and then continues the conversation in a secure inbox, so your case handler can ask follow-up questions and confirm the outcome without ever learning who they are. Traffic is protected by SSL encryption and the platform is penetration tested by an external party.

Only the people you appoint. Reports land with the designated responder and access is controlled through user roles, so a case can stay with a single handler or be opened to a team. Advanced plans include unlimited users with role based permissions, which lets you keep anyone with a conflict of interest out of a case. The case file keeps the record of how each report was handled.

Minutes for the channel itself. You pick a plan, add your logo, colours and the languages you need, and your public reporting portal is live. The paperwork around it is what usually takes longer, so a whistleblowing policy is included with your subscription, with localised versions reviewed by partner law firms for the main EU markets.

Trusty starts at €49 per month for the whole organisation, flat, with unlimited employees. Standard is €69 and Advanced €99 per month. No set-up fees, no per-seat charges. Invoice is available on all plans.

Yes. Every plan starts with a 7-day free trial that includes all features. Pick a plan on the plans page and your channel is live in minutes.

Yes, and you choose where the data lives. The default is a high-security data centre in Germany, certified to the ISO 27001 standard and provided by Hetzner Online GmbH, so your data stays in the EU. Hosting in the United States is available as an option if you prefer your data there. Traffic is protected by SSL encryption and the platform is penetration tested regularly by an external party. Trusty AG is a Swiss company, so Switzerland is our domicile, not a hosting location.

US-listed companies and their subsidiaries must give employees an anonymous, confidential way to raise accounting and audit concerns (Sarbanes-Oxley Act, Section 301), and several states have their own whistleblower protection acts. Trusty provides the anonymous channel, the confidential two-way dialogue and the case documentation these rules expect, on the same platform as the EU channel.

Yes. The EU NIS2 Directive (2022/2555) requires organisations to have structured processes for receiving and managing cybersecurity vulnerability disclosures. Trusty runs a dedicated Cybersecurity Vulnerability Reporting channel alongside your whistleblowing channel on the same platform. The whistleblowing channel handles misconduct reports under the EU Whistleblower Directive, and the vulnerability channel handles responsible disclosure from researchers, partners and internal teams. Both give you confidential intake, traceable case workflows and the audit trail regulators expect. Available on the Advanced plan.

Trusty Policy App includes a standard whistleblowing policy in English plus localised versions reviewed by partner law firms for Germany, Italy, Spain, Poland, Czechia and Slovakia. Each policy covers who it applies to, what can be reported, how to report, how reports are processed, protection against retaliation, and how long reports are retained. They are prepared in line with the EU Whistleblower Protection Directive and the ISO 37002 standard on whistleblower management systems.