hinweis.de

German whistleblowing channel from digitalNORD GmbH in cooperation with KIEL-IT GmbH, citing Section 12 HinSchG, hosted in Germany, with published package pricing from EUR 38/month.

Rubric score

28 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: hinweis.de(opens in new tab)
Headquarters: Kiel, Germany
Hosting: Hetzner Online GmbH data centres in Germany (vendor-stated)
Pricing: Basis EUR 38/month per mandant (up to 5 users); Plus EUR 98/month per mandant (unlimited users, phone channel and handler training included); Meldestelle S/M/L from EUR 168/month (outsourced reporting office with in-house legal review). Prices exclude VAT.
Prices are quoted per month but billed annually with a minimum 12-month commitment. Optional phone reporting channel costs EUR 20/month extra on Basis. Meldestelle tiers include 1/3/6 annual hours, then EUR 140/hour. 20% discount for non-profit and education, and a 20% first-year switch bonus.
Languages on reporting form: Not published
Ownership: Private, digitalNORD GmbH in cooperation with KIEL-IT GmbH
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned
Legal entity: digitalNORD GmbH HRB 16446 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Germany (HinSchG)

Typical buyer

German SMEs, public bodies, and non-profits (50+ employees) wanting a HinSchG-compliant reporting channel hosted in Germany, optionally with an external ombudsperson.

Distinctive features

Published package pricing from EUR 38/month with a per-organization subdomain (yourfirm.hinweis.de)
Cites Section 12 HinSchG and offers Section 15 handler training with certification
Two-way anonymous chat-style communication and audit-secure case documentation
Data processing in a German data centre (Hetzner), with regular OWASP penetration testing referenced
Optional external ombudsperson and outsourced reporting office (Meldestelle S/M/L)

Add-ons and conditions

Costs or terms not included in the headline price.

Monthly prices are billed annually with a minimum 12-month commitment; no true month-to-month option
Basis tier is capped at 5 users, and the phone channel costs an extra EUR 20/month on Basis
ISO 27001 applies to the hosting provider (Hetzner), not to any vendor certification found on public pages
No free trial; the site offers a consultation booking or a demo on request
Outsourced Meldestelle tiers include limited annual hours, then EUR 140/hour billed in 10-minute increments

Notable

Operated by digitalNORD GmbH in cooperation with KIEL-IT GmbH, based in Kiel, Germany.
Positioned as a HinSchG-compliant internal reporting office (Section 12 HinSchG) for organizations with 50+ employees, with mandatory handler training offered under Section 15 HinSchG.
Supports anonymous, chat-style two-way communication between the reporter and the internal reporting office, plus written and oral reporting.
Multi-channel intake is offered: online report form, optional phone channel, post, secure email, and a GDPR-compliant video conference option.
Handler-side features include audit-secure (revisionssicher) case documentation, deadline tracking with compliance reminders, role-based access, and selective attorney case visibility.
Security copy states end-to-end encryption, AES-256-CBC at rest, TLS in transit, two-factor authentication for reporting-office officers, and regular OWASP penetration testing by Breaking-Labs GmbH.
Data processing is stated to take place in a German data centre operated by Hetzner Online GmbH; the ISO/IEC 27001 certificate offered for download belongs to Hetzner, not to the vendor.
Each organization gets a personalized subdomain in the form yourfirm.hinweis.de.
Published packages are Basis (EUR 38/month, up to 5 users), Plus (EUR 98/month, unlimited users), and Meldestelle S/M/L (from EUR 168/month) with an outsourced reporting office and in-house legal review.
Prices are quoted per month but billed annually with a minimum 12-month commitment; a 20% discount is offered for non-profits and education, and a 20% first-year switch bonus for customers migrating from competitors.
No free trial or public API documentation was found on the pages reviewed; procurement runs through a consultation booking or demo request.

Frequently asked questions about hinweis.de

Answers derived from vendor-published materials dated on this page.

Is hinweis.de suitable for SMEs under 250 employees?

Yes — hinweis.de's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Basis EUR 38/month per mandant (up to 5 users); Plus EUR 98/month per mandant (unlimited users, phone channel and handler training included); Meldestelle S/M/L from EUR 168/month (outsourced reporting office with in-house legal review). Prices exclude VAT. German SMEs, public bodies, and non-profits (50+ employees) wanting a HinSchG-compliant reporting channel hosted in Germany, optionally with an external ombudsperson.

Which national whistleblower laws does hinweis.de explicitly reference?

hinweis.de explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does hinweis.de process whistleblower report content with AI?

No — hinweis.de does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.