e-CAS

Spanish cloud compliance platform whose whistleblowing channel (canal de denuncias) is activated within 36 hours, aligned to UNE 19601, ISO 19600, and ISO 37002 and to Spain's Ley 2/2023.

Part of e-CAS (Compliance Assisting Solution)

Rubric score

27 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: e-cas.es(opens in new tab)
Headquarters: Spain
Hosting: Spanish servers (vendor-stated); ISO 27001 homologation stated for the server hosting only
Pricing: Three whistleblowing-channel tiers (Estandar, Premium, Profesional) differing by user count and language options; external investigation or instruction of a report from EUR 150 per report. Tier prices are shown in images on the pricing page rather than as readable text, and prices exclude VAT and are billed per full year.
The public pricing section names three tiers and states prices are shown at the foot of the page, but the tier figures render as images rather than text on the public page reviewed. External case investigation is quoted from EUR 150 per report.
Languages on reporting form: 2
Ownership: Private, created by eCompliance Consultores & Abogados and Borak IT Solutions (e-CAS Solutions, S.L.)
Product scope: Module of e-CAS (Compliance Assisting Solution)

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (quarantine)
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Spain (Ley 2/2023)

Typical buyer

Spanish SMEs and public bodies needing a Ley 2/2023-aligned whistleblowing channel activated quickly, with Spanish-hosted servers and an optional external investigation service.

Distinctive features

Whistleblowing channel stated to be activated within about 36 hours
Anonymous written and verbal reporting, including voice distortion
7-day acknowledgement of receipt and case tracking with restricted access
Two-way confidential communication between reporter and investigator
Servers stated to be located in Spain, with an optional external investigation service from EUR 150 per report

Add-ons and conditions

Costs or terms not included in the headline price.

Tier prices render as images on the public pricing page rather than as readable text
Prices exclude VAT and are billed per full year, with no monthly option found
The stated ISO 27001 homologation applies to the server hosting only, not to a vendor or product certification
External investigation of a report is billed separately from EUR 150 per report
No self-serve free trial was found on public pages reviewed

Notable

e-CAS (Compliance Assisting Solution) is a Spanish cloud compliance platform; its public pages state it was created by eCompliance Consultores & Abogados and Borak IT Solutions.
The whistleblowing channel (canal de denuncias) is presented as a module of the wider e-CAS penal-risk and compliance platform aligned to UNE 19601 and ISO 19600.
The channel page cites Spain’s Ley 2/2023 by name and publication date (21 February 2023) and references ISO 37002:2021 as the standard for the internal reporting channel; no article numbers are cited.
The vendor states the channel is activated within about 36 hours, later qualified as a variable timeframe that “can be” 36 hours.
Anonymous reporting is supported in written and verbal form, including voice distortion, with photo and document upload and report-type discrimination (irregularities, violations, criminal acts).
A 7-day acknowledgement of receipt, case tracking with restricted access, two-way confidential communication, and encrypted communications certified by Rubricae are described.
Security claims include dual-factor authentication, end-to-end encryption, activity logging, and WCAG 2.1 AA accessibility.
Servers are stated to be located in Spain; the referenced ISO 27001 homologation is explicitly for the server hosting only, not a vendor or product certification.
Three channel tiers are named (Estandar, Premium, Profesional), differing by user count and language options; the public page states prices appear at the foot of the page but the figures render as images rather than text.
Prices are stated to exclude VAT and to be billed per full year; external investigation or instruction of a report is quoted separately from EUR 150 per report.
Reporter languages are stated as Spanish and English, with additional languages available on request; no self-serve trial or public API documentation was found on the pages reviewed.

Frequently asked questions about e-CAS

Answers derived from vendor-published materials dated on this page.

Is e-CAS suitable for SMEs under 250 employees?

e-CAS does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Spanish SMEs and public bodies needing a Ley 2/2023-aligned whistleblowing channel activated quickly, with Spanish-hosted servers and an optional external investigation service.

Which national whistleblower laws does e-CAS explicitly reference?

e-CAS explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Spain (Ley 2/2023). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does e-CAS process whistleblower report content with AI?

No — e-CAS does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.