MySECway

Spanish whistleblowing channel from IT zone, S.L. with per-manager pricing from EUR 7.95/month for Ley 2/2023 compliance.

Rubric score

31 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: mysecway.com(opens in new tab)
Headquarters: Madrid, Spain
Hosting: Data centres within the European Union (vendor-stated); specific country not disclosed
Pricing: Básica EUR 7.95/month per manager (VAT excluded) on SaaS multi-tenant. Premium priced by configuration with annual billing, as a dedicated SaaS tenant (from 5 users) or On-Premises (from 10 users).
Per-manager billing: each additional case manager is EUR 7.95/month. 7-day free trial with no charge before day 7. Premium adds visible and invisible watermarking, case delegation, SSO via ADFS, certified external timestamps, and IRM integration (Prot-On) as quote-only add-ons.
Languages on reporting form: Not published
Domain registered: April 2023 mysecway.com
Ownership: Private (IT zone, S.L., Spanish NIF B86773397)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Signed

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✓
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Spain (Ley 2/2023)

Typical buyer

Spanish SMEs, public entities, and law firms or advisories wanting a low-cost per-manager reporting channel for Ley 2/2023 compliance.

Distinctive features

Published per-manager entry price (EUR 7.95/month per gestor) with self-serve online signup
7-day free trial with no charge before day 7
map[Three reporter modes:fully anonymous, registered with hidden identity, or identified]
Two-way communication with the reporter, including anonymous cases
Named report register (libro de registro) and encrypted case files hidden from system administrators
Two-factor authentication for case managers (password plus 6-digit code)

Add-ons and conditions

Costs or terms not included in the headline price.

Premium plan price is quote-only ("precio según configuración") with annual billing
Básica price of EUR 7.95 excludes VAT (IVA no incluido)
ISO 27001, SOC 2 Type 2, ENS, and PCI-DSS are stated for the data-centre infrastructure, not as vendor or product certifications
EU hosting is stated but no specific country or cloud provider is named on public pages reviewed
Web intake only; no phone or in-person channel, and no sub-processor list or API access found on public pages reviewed

Notable

Operated by IT zone, S.L. (Spanish NIF B86773397), registered at Calle Sombrerete 5, 28012 Madrid.
Positioned as a fast-to-deploy internal whistleblowing channel for Spanish private companies and public entities to comply with Ley 2/2023 (the Spanish transposition of EU Directive 2019/1937).
Two plans: Básica at EUR 7.95/month per manager (VAT excluded) on SaaS multi-tenant, and Premium priced by configuration with annual billing.
Premium is delivered either as a dedicated SaaS tenant (from 5 users) or On-Premises (from 10 users), with no limit on the number of manager users.
Reporting is web only, supporting text, audio, documents, and images; no phone or in-person channel is mentioned.
Three reporter modes are offered: fully anonymous, registered with hidden identity, or identified, with no emails sent to anonymous reporters and identity/IP excluded from logs.
Security page states user identity is encrypted in the database, case data uses dynamic keys, and system administrators cannot access identifying user data.
Two-factor authentication is required for case managers (password plus 6-digit code); optional two-factor for whistleblowers is a premium feature.
A non-public report register (libro de registro) of received reports and internal investigations is described, with logged document access and timestamps.
Premium add-ons include visible and invisible watermarking, case delegation by document, SSO via ADFS, certified external timestamps, and IRM integration via Prot-On.
Infrastructure is stated to reside in EU data centres certified as ENS, SOC 2 Type 2, ISO/IEC 27001:2013, and PCI-DSS; these are data-centre certifications, not vendor or product certifications, and no specific country or provider is named.
A sub-processor list, DPA download, DPIA support, and API access were not found on public pages reviewed.

Frequently asked questions about MySECway

Answers derived from vendor-published materials dated on this page.

Is MySECway suitable for SMEs under 250 employees?

Yes — MySECway's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Básica EUR 7.95/month per manager (VAT excluded) on SaaS multi-tenant. Premium priced by configuration with annual billing, as a dedicated SaaS tenant (from 5 users) or On-Premises (from 10 users). Spanish SMEs, public entities, and law firms or advisories wanting a low-cost per-manager reporting channel for Ley 2/2023 compliance.

Which national whistleblower laws does MySECway explicitly reference?

MySECway explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Spain (Ley 2/2023). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does MySECway process whistleblower report content with AI?

No — MySECway does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.