GOWhistleblow

Portuguese whistleblowing channel from GoFox with AES-256 encryption and published tiers from EUR 21/month on annual billing for Lei 93/2021 compliance.

Rubric score

20 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: www.gow.pt(opens in new tab)
Headquarters: São João da Madeira, Portugal
Pricing: Normal (shared SaaS) EUR 30/month, promo EUR 21/month for new subscriptions through 31/12/2026 (1 user/entity, unlimited employees, 1GB storage); Premium (dedicated SaaS) EUR 80/month, promo EUR 56/month (custom form and workflow, unlimited users, multi-entity, multi-language, 10GB storage); À Medida (custom SaaS) EUR 320/month, promo EUR 224/month (custom dashboard and reports, own domain, mobile app, 20GB storage). All prices exclude VAT.
Monthly figures are billed on 1, 2, or 3-year terms; no month-to-month option found on public pages reviewed. No free trial found. Add-ons include an extra entity at EUR 10/month, an extra user at EUR 10/month (Normal), an extra 5GB at EUR 10/month, and the mobile app at EUR 80/month (Premium).
Languages on reporting form: Not published
Founded: 2003
Ownership: Private, GoFox - Tecnologias de Informação (São João da Madeira, Portugal)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: None published
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✗
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Portugal (Lei 93/2021)

Typical buyer

Portuguese SMEs and organizations with 50+ employees wanting a domestic, Lei 93/2021-oriented whistleblowing channel with published entry pricing.

Distinctive features

Published pricing across all three tiers (Normal, Premium, À Medida)
AES-256 encryption stated on the product and pricing pages
Anonymous reporting with stated confidentiality controls
Native mobile apps for Android and iOS (À Medida tier or paid add-on)
Portuguese-domestic vendor referencing Lei 93/2021 and EU Directive 2019/1937
White-label branding, custom subdomain, and multi-entity support

Add-ons and conditions

Costs or terms not included in the headline price.

Monthly prices require a 1, 2, or 3-year commitment; no month-to-month option found on public pages reviewed
No free trial found on public pages reviewed
No ISO 27001 or other security certification found on public pages reviewed
Hosting provider, data center, and data-residency country not disclosed on public pages reviewed
Mobile app is a paid add-on on Premium (EUR 80/month) and included only on the À Medida tier

Notable

Operated by GoFox - Tecnologias de Informação, a São João da Madeira web and software development firm founded in 2003 and based at SanjoTec; the whistleblowing product is branded GOWhistleblow (Canal de Denúncias).
Product pages describe it as compliant with Lei 93/2021, which transposes EU Directive 2019/1937, and reference Directive 2016/680 for GDPR; article-level mapping was not published.
The pricing page lists three tiers: Normal (shared SaaS), Premium (dedicated SaaS), and À Medida (custom SaaS), each with a regular and a promotional price for new subscriptions through 31 December 2026.
Monthly prices are billed over 1, 2, or 3-year terms; no month-to-month option and no free trial were found on public pages reviewed.
Storage scales by tier (1GB Normal, 10GB Premium, 20GB À Medida), with an extra 5GB add-on at EUR 10/month; all prices exclude VAT.
Native Android and iOS mobile apps are included on the À Medida tier and offered as an EUR 80/month add-on on Premium.
Stated features include anonymous reporting, case management and resolution, customizable intake forms, custom branding, a custom subdomain, multi-entity support, multi-language (Premium and above), two-factor authentication, and manager training.
Copy states managers see only necessary occurrence information and no personal reporter data unless the reporter chooses to disclose it.
Security disclosures center on AES-256 encryption; no ISO 27001 or other certification was found on public pages reviewed.
Hosting is described as external to the customer and able to run on the customer’s own subdomain, but no hosting provider, data center, or data-residency country was disclosed on public pages reviewed.
Reporting is via web form and mobile app; no phone, in-person, or postal channel was documented, so this is scored as single-channel.
The vendor states 200+ public and private entities as clients; the product markets to the Portuguese single-country market.

Frequently asked questions about GOWhistleblow

Answers derived from vendor-published materials dated on this page.

Is GOWhistleblow suitable for SMEs under 250 employees?

GOWhistleblow does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Portuguese SMEs and organizations with 50+ employees wanting a domestic, Lei 93/2021-oriented whistleblowing channel with published entry pricing.

Which national whistleblower laws does GOWhistleblow explicitly reference?

GOWhistleblow explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Portugal (Lei 93/2021). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does GOWhistleblow process whistleblower report content with AI?

No — GOWhistleblow does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.