Skip to main content
EU Whistleblower Directory
Whistleblower Software (Formalize) logo

Whistleblower Software (Formalize)

Whistleblower Software product from Formalize with public Core and Advanced annual pricing.

Part of Formalize

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it.

Rubric score

32 / 50

Evidence tier P

Public pages only. Try For Free CTAs exist, but the review did not enter a trial or handler environment.

How this score is produced →

Facts

Website
whistleblowersoftware.com(opens in new tab)
Headquarters
Copenhagen, Denmark
Pricing
Core: €99 / €149 / €199 / €249 / €349 per month for 0-49 / 50-149 / 150-249 / 250-499 / 500-999 employees. Advanced: €149 / €219 / €299 / €379 / €529 for the same bands. 1,000+ employees contact sales. Billed annually.
Annual billing only: the pricing page states "We always charge one year at a time and the payment is made in advance for the whole year." Try For Free CTAs are present; trial length and credit-card requirement were not disclosed on public pages reviewed.
Languages on reporting form
80
Founded
2020
Domain registered
whistleblowersoftware.com
Ownership
Private
Customers
8,000+ across the Formalize platform (vendor claim)
Product scope
Module of Formalize
Encryption posture
End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy
Enforced (reject)
DNSSEC
Signed

Capabilities

  • Anonymous reporting ✓
  • Multi-channel intake ✓
  • Public API —
  • Free trial ✓
  • Two-factor authentication ✓
  • Audit log ✓
  • EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications and national law

Certifications

  • ISO/IEC 27001:2022
  • ISAE 3000 Type 2
  • ENS audited
  • WCAG 2.1 AA

National laws referenced

  • EU Directive 2019/1937
  • Germany (HinSchG)
  • Spain (Ley 2/2023 de Protección al Informante)
  • France (Loi Waserman / Sapin II)
  • Greece (Law 4990/2022)
Whistleblower Software (Formalize) homepage screenshot
Typical buyer

Organizations wanting a dedicated whistleblowing product inside the broader Formalize compliance suite, with public employee-band pricing and EU hosting.

Distinctive features

  • Public employee-band pricing for Core and Advanced
  • 80+ reporting languages available and a marketing site published in 12 languages, each naming its national transposition law
  • ISO 27001:2022, ISAE 3000 Type 2, ENS Alta, WCAG 2.1 AA, penetration test dated June 2024, and AWS Frankfurt hosting

Add-ons and conditions

Costs or terms not included in the headline price.

  • Annual billing only, charged a year in advance
  • Only 10 of the 80+ reporting languages are included in a standard setup
  • SAML 2.0, SCIM 2.0 and a custom DPA are Advanced-tier only
  • Hotline and international management are add-ons
  • API access was not disclosed on public pages reviewed

Notable

  • Formalize presents Whistleblower Software as one product inside a broader compliance suite covering DORA, NIS2, GDPR, GRC, ISO 27001, SOC 2, ISMS, and AI Act workflows.
  • The marketing site ships in 12 languages, and each locale names its own national transposition law rather than only the EU Directive: Loi Waserman (Sapin II) in French, Law 4990/2022 in Greek, Ley 2/2023 in Spanish, HinSchG in German.
  • 80+ reporting languages are available, but the product page states only 10 are included as part of a standard setup.
  • Core covers end-to-end encryption, SSO (OAuth 2.0), anonymized reporting and case management. SAML 2.0, SCIM 2.0, a custom DPA, a dedicated CSM and an SLA are Advanced-tier only. Hotline and international management are separate add-ons.
  • The product page documents two-way messaging that continues to work when the reporter is anonymous, file upload, voice reporting, automatic case delegation and deadline reminders.
  • The security page states data and backups are stored with AWS in Frankfurt, with end-to-end encryption, MFA, IP whitelisting, activity logs, and a June 2024 penetration test by Truesec.
  • The personal data policy confirms sub-processors exist, including in third countries, but names none and describes no objection mechanism. Deletion is vendor-set at no later than 3 years after subscription termination.
  • Public pages reviewed did not disclose API access, a downloadable DPA, DPIA support, or how a reporter returns to an existing case.

Frequently asked questions about Whistleblower Software (Formalize)

Answers derived from vendor-published materials dated on this page.

Is Whistleblower Software (Formalize) suitable for SMEs under 250 employees?
Likely yes — Whistleblower Software (Formalize)'s entry-tier pricing sits in the €50–100/month band, workable for most 50–249-employee organisations. Core: €99 / €149 / €199 / €249 / €349 per month for 0-49 / 50-149 / 150-249 / 250-499 / 500-999 employees. Advanced: €149 / €219 / €299 / €379 / €529 for the same bands. 1,000+ employees contact sales. Billed annually. Organizations wanting a dedicated whistleblowing product inside the broader Formalize compliance suite, with public employee-band pricing and EU hosting.
Which national whistleblower laws does Whistleblower Software (Formalize) explicitly reference?
Whistleblower Software (Formalize) explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG), Spain (Ley 2/2023 de Protección al Informante), France (Loi Waserman / Sapin II), Greece (Law 4990/2022). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.
Does Whistleblower Software (Formalize) process whistleblower report content with AI?
Yes — Whistleblower Software (Formalize) processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement.

Similar to Whistleblower Software (Formalize)

Other platforms in the directory with overlapping pricing model, certifications, or procurement path.

Sources and verification

Every fact on this page comes from Whistleblower Software (Formalize)'s own published materials. These are the pages that were read, and the date they were read.

Last verified

Cited pages last re-fetched

Something out of date? Tell us →

Listed here? Show it on your own site →