OhlasTo

Czech internal reporting system and ethics hotline from Q-COM, running on the vendor's QML platform on domestic Czech servers, from 149 CZK/month.

Rubric score

25 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: ohlasto.online(opens in new tab)
Headquarters: Brno, Czech Republic
Hosting: Domestic Czech servers on the vendor's QML platform (vendor-stated)
Pricing: Free for schools, kindergartens, and nonprofits (max 5 users); 149 CZK/month (excl. VAT) for companies and other organizations with unlimited users; free custom-SLA tier for existing QML information-system users.
Prices are monthly and exclude VAT. No setup fee, annual billing option, or free trial found on public pages reviewed. Onboarding runs through Q-COM's implementation and training service.
Languages on reporting form: 2
Domain registered: January 2022 ohlasto.online
Ownership: Private (Q-COM, spol. s r.o., Czech Republic; IČO 25538659)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: None published
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Czechia (Act No. 171/2023 Coll.)

Typical buyer

Czech schools, nonprofits, and SMEs wanting a low-cost, domestically hosted reporting channel aligned to Act No. 171/2023 Coll., especially existing Q-COM QML customers.

Distinctive features

Published flat pricing of 149 CZK/month with unlimited users, and a free tier for schools and nonprofits
Names both Act No. 171/2023 Coll. and EU Directive 2019/1937 on public pages
Vendor-stated domestic Czech hosting on Q-COM's own QML platform
Consolidates web-form, email, and in-person reports in one administration environment
Anonymous reporting with encrypted transmission and configurable user permissions

Add-ons and conditions

Costs or terms not included in the headline price.

Onboarding is implementation-led (no self-serve signup or free trial found on public pages reviewed)
Only Czech and Slovak interface languages found on public pages reviewed
No ISO 27001 certification for the product found on public pages reviewed
Article-level mapping of Act 171/2023 or Directive 2019/1937 not found on public pages reviewed
No DPA, DPIA, subprocessor list, or API documentation found on public pages reviewed

Notable

Operated by Q-COM, spol. s r.o. of Brno, Czech Republic (IČO 25538659), a Czech management-systems, IT, and consulting provider stating more than 25 years of activity.
OhlasTo is offered both as a standalone reporting channel at ohlasto.online and as a module of Q-COM’s QML web information system.
Public pages name Act No. 171/2023 Coll. (o ochraně oznamovatelů, effective 1 August 2023) and EU Directive 2019/1937, but do not cite specific article numbers.
Intake channels consolidate web online form, email, and in-person reports into a single administration environment; phone intake was not stated on public pages reviewed.
Anonymous reporting is supported with the reporter identity section optional; guidance pages also advise reporters on avoiding work networks and using private or Tor browsing.
Case handling is browser-based with configurable user permissions and officer, investigator, and management access, plus automated deadline monitoring with notifications.
Hosting is vendor-stated as domestic Czech servers on the QML platform; no specific data-centre or subprocessor disclosure was found.
Interface languages found are Czech and Slovak only.
Pricing is public: free for schools, kindergartens, and nonprofits (max 5 users); 149 CZK/month excluding VAT for companies with unlimited users; and a free custom-SLA tier for existing QML customers.
No product ISO 27001 certification, DPA, DPIA, subprocessor list, API documentation, or free trial was found on public pages reviewed; onboarding is implementation-led via Q-COM.

Frequently asked questions about OhlasTo

Answers derived from vendor-published materials dated on this page.

Is OhlasTo suitable for SMEs under 250 employees?

Yes — OhlasTo's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Free for schools, kindergartens, and nonprofits (max 5 users); 149 CZK/month (excl. VAT) for companies and other organizations with unlimited users; free custom-SLA tier for existing QML information-system users. Czech schools, nonprofits, and SMEs wanting a low-cost, domestically hosted reporting channel aligned to Act No. 171/2023 Coll., especially existing Q-COM QML customers.

Which national whistleblower laws does OhlasTo explicitly reference?

OhlasTo explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Czechia (Act No. 171/2023 Coll.). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does OhlasTo process whistleblower report content with AI?

No — OhlasTo does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.