MittVarsel

Norwegian whistleblowing channel (MittVarsel, MyVoice in English) from DigitaliQ AS, ISO/IEC 27001:2022 certified, with anonymous reporting, voice-to-text intake, and two-way dialogue; pricing is quote-only.

Non-EU HQ

Non-EU headquarters — data sovereignty risk

Bergen, Norway. This vendor is headquartered outside the European Union. EU personal data processed by the vendor is a cross-border transfer under GDPR Chapter V and depends on an adequacy decision, Standard Contractual Clauses, or a derogation. Non-EU providers introduce jurisdictional exposure to third-country data-access regimes. For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: Public pages market Digitaliq.AI as a next-generation support tool offering analysis, suggestions, and insights alongside MyVoice.

Rubric score

26 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: digitaliq.no/en/myvoice(opens in new tab)
Headquarters: Bergen, Norway
Pricing: Not published. The product is presented through a contact form and a non-binding conversation.
No public price list, tiers, or free-trial terms were found on public pages reviewed; procurement is contact-led.
Languages on reporting form: Not published
Domain registered: August 2017 digitaliq.no
Ownership: Private, DigitaliQ AS (Norway, org.nr 918 266 917)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✗
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO/IEC 27001:2022 (vendor-certified, stated since 2023)

National laws referenced

EU Directive 2019/1937
Norway (Working Environment Act, Chapter 2)

Typical buyer

Norwegian companies, municipalities, churches, and NGOs wanting a domestic, ISO 27001 certified whistleblowing channel with anonymous voice-to-text reporting and two-way dialogue.

Distinctive features

ISO/IEC 27001:2022 held by the vendor DigitaliQ AS, not only by a hosting provider
Anonymous or named reporting, with reporter credentials to log back in and follow the case
Two-way dialogue that works for anonymous reporters via a login-based dashboard
Voice reporting via microphone that is transcribed to text, plus file attachments
Case-handling roles (Administrator, Case Handler, Read-Only User) and targeted assignment to specific handlers
Public reporter user guide documents the end-to-end submission and follow-up flow

Add-ons and conditions

Costs or terms not included in the headline price.

No public pricing, tiers, or free-trial terms found on public pages reviewed
Data residency for MittVarsel is not disclosed on public pages reviewed (Norway is EEA, not EU)
Directive-specific 7-day acknowledgment and 3-month feedback deadline tracking not documented publicly
Sub-processor list and right-to-object mechanics not found on public pages reviewed
API access not advertised on public pages reviewed

Notable

Operated by DigitaliQ AS, Bergen, Norway (org.nr 918 266 917); the product is branded MittVarsel in Norwegian and MyVoice in English.
Positioned as a secure digital reporting channel for safe reporting and compliant handling of misconduct, aimed at companies, municipalities, churches, and NGOs; named customers include Den Norske Kirke, Redd Barna, Fellesforbundet, and Infinitum.
Reporters can submit with their name or anonymously (where the organization enables it) and receive login credentials to return to the case; anonymous reporters cannot recover lost credentials and must file a new referenced case.
A dialogue function supports two-way communication with the case handler, including for anonymous reporters, who log in to check for new messages.
Intake supports file attachments and oral reporting recorded as a voice message via microphone that is transcribed to text.
Case handling includes targeted assignment to specific handlers, case-processing templates (checklists, interview invitations, conclusions), and three roles: Administrator, Case Handler, and Read-Only User.
Security posture states connections are always end-to-end encrypted, with industry-standard server-level encryption and anti-malware, and encryption plus access control in line with GDPR.
DigitaliQ AS states ISO/IEC 27001:2022 certification since 2023; this is vendor certification rather than a hosting-provider-only claim.
Data residency for MittVarsel is not disclosed on the public pages reviewed; separately, the company’s Digitaliq.AI product is described as operated in Norway.
The Regulation-of-whistleblowing page explains EU Directive 2019/1937 and notes Norway is not directly bound, referencing the Norwegian Working Environment Act Chapter 2; no article numbers or 7-day/3-month deadlines were stated.
Digitaliq.AI is marketed as an AI support tool offering analysis, suggestions, and insights alongside MyVoice.
No public pricing, tiers, free trial, API documentation, or sub-processor list was found on the public pages reviewed; procurement runs through a contact form and a non-binding conversation.

Frequently asked questions about MittVarsel

Answers derived from vendor-published materials dated on this page.

Is MittVarsel suitable for SMEs under 250 employees?

MittVarsel does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Norwegian companies, municipalities, churches, and NGOs wanting a domestic, ISO 27001 certified whistleblowing channel with anonymous voice-to-text reporting and two-way dialogue.

Which national whistleblower laws does MittVarsel explicitly reference?

MittVarsel explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Norway (Working Environment Act, Chapter 2). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does MittVarsel process whistleblower report content with AI?

Yes — MittVarsel processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. Public pages market Digitaliq.AI as a next-generation support tool offering analysis, suggestions, and insights alongside MyVoice.