iBlow

Portuguese whistleblowing platform built around Law 93/2021. Four tiers scaled by collaborator count; all quote-based.

Rubric score

23 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: iblow.eu(opens in new tab)
Headquarters: Lisbon, Portugal
Hosting: Not disclosed on public pages reviewed; current privacy policy does not name a hosting provider
Pricing: Not published — all four tiers (Base, Value, Elite, Premium) quote-based. Tiers scale by collaborator count: 0–249, 250–499, 500–999, 1,000+.
No free trial advertised. Premium tier priced on request.
Languages on reporting form: 4
Ownership: Contemporary Constellation Lda
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (reject)
DNSSEC: Signed

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

Portugal (Law 93/2021)
EU Directive 2019/1937

Typical buyer

Portuguese organisations subject to Law 93/2021 wanting a Lisbon-based vendor with explicit Portuguese-transposition focus.

Distinctive features

Explicit focus on Portugal Law 93/2021 (the Portuguese transposition of Directive 2019/1937)
FAQ maps reportable subjects to Law 93/2021 Article 2(1) categories
Package matrix includes multi-company / multi-entity support
Package matrix includes anonymised dialogs, 2FA, team case assignments, secure discussions, SSO, and case workflows
Services page describes a secure box for messages and evidence, deadlines/decisions, profiles, access segregation, and audit logs

Add-ons and conditions

Costs or terms not included in the headline price.

All four tiers are quote-based — no published prices
No free trial advertised
Technical support hours metered per tier (1h / 4h / 6h / on request per month)
Channels per customer scale by tier (1 / 3 / 10 / on request)
Hosting provider, DPA, and sub-processor list are not disclosed on public pages reviewed
Public pages reference ISO 37002, ISO 27001, ISO 27701, ISAE/SOC, WCAG, and PCI DSS as standards/controls, but no certificate document or certifying body was found
Founding year not disclosed on the vendor site

Notable

Operated by Contemporary Constellation Lda from Rua Mouzinho da Silveira, 32, 1250-167 Lisboa, Portugal. Phone +351 210 987 308.
Entire product positioning anchored on Portuguese Law 93/2021; the site publishes a nine-point summary of the law.
Four packages — Base, Value, Elite, Premium — differentiated primarily by: channels per customer (1 / 3 / 10 / request), team-manager seats (3 / 10 / 45 / request), support hours (1h / 4h / 6h / request), and collaborator band (0-249 / 250-499 / 500-999 / 1,000+).
Communication languages capped at 4 across every tier.
The FAQ says reports can be submitted in writing and/or verbally, with a face-to-face meeting if requested by the whistleblower.
The package matrix includes SSO and 2FA-required rows, but public text extraction did not reliably show which tiers include each row.
No published prices, hosting location, founding year, DPA, sub-processor list, or certificate documents were found on public pages reviewed.
Complementary services mentioned: policies, screening, investigation, GDPR/DPIA work, RGPC/corruption-prevention support, training, and legal/HR guidance.
Fills a geographic gap in vendor coverage: no other Portugal-specific whistleblowing tool is currently listed.
Current privacy policy is dated 24 April 2026 and names Contemporary Constellation Lda as controller; hosting/subprocessors are not disclosed on public pages reviewed.

Frequently asked questions about iBlow

Answers derived from vendor-published materials dated on this page.

Is iBlow suitable for SMEs under 250 employees?

iBlow does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Portuguese organisations subject to Law 93/2021 wanting a Lisbon-based vendor with explicit Portuguese-transposition focus.

Which national whistleblower laws does iBlow explicitly reference?

iBlow explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Portugal (Law 93/2021), EU Directive 2019/1937. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does iBlow process whistleblower report content with AI?

iBlow does not publicly disclose whether report content is processed by AI or machine-translation services. For a no-AI compliance posture, obtain written confirmation and a subprocessor list before procurement.