OpenSource Hinweisgeberportal
Managed GlobaLeaks whistleblowing channel operated by splice digital GmbH, hosted in German data centres, with published pricing from EUR 39/month on annual billing.
Rubric score
33 / 50
Evidence tier P
Public pages only. No reporter submission or handler environment was reviewed.
Facts
- Headquarters
- Hamburg, Germany
- Hosting
- German data centres (vendor-stated); managed hosting of the open-source GlobaLeaks engine
- Pricing
- Company Bundle EUR 49/month or EUR 39/month annual (EUR 0 setup); Professional Bundle EUR 209/month or EUR 169/month annual (EUR 249 setup); Enterprise from EUR 249/month or EUR 199/month annual (from EUR 349 setup, dedicated hardware). All prices exclude VAT.Bundles are sized by storage, traffic, and hosting model, not by employee count. Paid add-ons include backups (EUR 79/month), monitoring (EUR 199/month), priority support (EUR 99/month), and SLA (from EUR 290/month); one-off setup/training services are listed separately. A free demo is offered and the homepage references a 30-day post-deployment money-back guarantee; no self-serve free trial was found on public pages reviewed.
- Languages on reporting form
- 90
- Ownership
- Private (splice digital GmbH, Amtsgericht Hamburg HRB 175006, VAT DE352385698)
- Product scope
- Standalone whistleblower product
Measured, not published
Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.
- DMARC policy
- Enforced (quarantine)
- DNSSEC
- Unsigned
Capabilities
- Anonymous reporting ✓
- Multi-channel intake ✗
- Public API —
- Free trial ✗
- Two-factor authentication —
- Audit log —
- EU Directive 2019/1937 (vendor claim) ✓
✓ published by the vendor · ✗ vendor states it is not offered · — not published either way
Certifications and national law
Certifications
None published
National laws referenced
- EU Directive 2019/1937
- Germany (HinSchG)
Typical buyer
German SMEs, public bodies, and other organisations of 50+ that want a HinSchG-compliant whistleblowing channel built on the open-source GlobaLeaks engine, hosted in German data centres, with fully published pricing.
Distinctive features
- Fully published pricing with monthly and annual bundles, unusual for a managed EU whistleblowing vendor
- German legal entity (splice digital GmbH, Hamburg) with public Impressum, VAT ID, and commercial-register number
- Public pages cite German transposition-law sections (HinSchG § 16 Abs. 3, § 17 Abs. 1 Nr. 1) alongside EU Directive 2019/1937
- Anonymous reporting with a 16-digit receipt and two-way anonymous follow-up, including Tor access
- Automated deadline management referencing the statutory 7-day acknowledgment and 3-month feedback duties, plus configurable retention with automatic deletion
- Over 90 reporting languages and stated WCAG 2.2 accessibility alignment
Add-ons and conditions
Costs or terms not included in the headline price.
- The product is a managed deployment of the open-source GlobaLeaks engine (AGPL, developed since 2011), not a bespoke platform
- Design claims cite ISO 37002:2021 (a whistleblowing-management guidance standard) and ISO 27001, but both are "designed according to" statements, not certifications; no ISO 27001 certificate for the vendor or product was found
- ISO 37002 is a management-system guidance standard and is not an information-security certification like ISO 27001
- DPA (AV-Vertrag), NDA, and SLA are optional paid add-ons rather than standard inclusions
- The subprocessor list is provided on request via the DPA; the Datenschutz page names only website-level subprocessors (Netlify, Plausible, Whereby)
- Product is a digital online reporting form only; phone and in-person channels are discussed as separate legal options, not delivered by the product
Notable
- Operated by splice digital GmbH, Grevenweg 80, 20537 Hamburg, Germany (Amtsgericht Hamburg HRB 175006, VAT DE352385698, managing director Karl Ludwig Weise).
- The product is a managed, hosted deployment of GlobaLeaks, the open-source whistleblowing engine developed since 2011 and stated to be used by over 30,000 organisations worldwide; it is not a bespoke platform.
- Positioned for compliance with the German Hinweisgeberschutzgesetz (HinSchG) and EU Directive 2019/1937; public pages cite specific HinSchG sections (§ 16 Abs. 3 and § 17 Abs. 1 Nr. 1).
- The delivered product is a web-based online reporting form; phone, postal, and in-person channels are discussed as separate legal options an organisation must weigh, not features of the product.
- Anonymous reporting is central, with a 16-digit receipt for anonymous status tracking, integrated two-way chat, and Tor access.
- Case management includes automated deadline management aligned to the 7-day acknowledgment and 3-month feedback duties, configurable questionnaires, and configurable retention (default 3 years) with automatic deletion.
- Over 90 reporting languages are stated, along with WCAG 2.2 accessibility alignment and the AGPL 3.0 open-source licence of the underlying engine.
- Security and compliance copy claims the solution is “designed according to” ISO 27001 and ISO 37002:2021; these are design-conformance statements, not certifications. No ISO 27001 certificate for the vendor or product was found, and ISO 37002 is a whistleblowing-management guidance standard rather than an information-security certification.
- Hosting is stated to be German data centres; the DPA (AV-Vertrag), NDA, and SLA are optional paid add-ons, and the subprocessor list is provided on request via the DPA.
- The public Datenschutz page names only website-level subprocessors (Netlify for site hosting, Plausible for analytics, Whereby for video calls), not the whistleblowing-platform hosting stack.
- Pricing is fully published: Company Bundle (EUR 49/month, EUR 39/month annual, EUR 0 setup), Professional Bundle (EUR 209/month, EUR 169/month annual, EUR 249 setup), and Enterprise (from EUR 249/month, EUR 199/month annual, from EUR 349 setup with dedicated hardware), all excluding VAT, plus itemised add-ons and training services.
- A free demo is offered; the homepage references a 30-day post-deployment money-back guarantee, but no self-serve free trial was found on public pages reviewed.
Frequently asked questions about OpenSource Hinweisgeberportal
Answers derived from vendor-published materials dated on this page.
Is OpenSource Hinweisgeberportal suitable for SMEs under 250 employees?
OpenSource Hinweisgeberportal does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. German SMEs, public bodies, and other organisations of 50+ that want a HinSchG-compliant whistleblowing channel built on the open-source GlobaLeaks engine, hosted in German data centres, with fully published pricing.
Which national whistleblower laws does OpenSource Hinweisgeberportal explicitly reference?
OpenSource Hinweisgeberportal explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.
Does OpenSource Hinweisgeberportal process whistleblower report content with AI?
No — OpenSource Hinweisgeberportal does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.
Similar to OpenSource Hinweisgeberportal
Other platforms in the directory with overlapping pricing model, certifications, or procurement path.
e-nform Polish whistleblowing channel from E-nform Sp. z o.o. with Azure-hosted or on-premises deployment, IP-free intake, and published Silver/Gold tiers.
GoComply Whistleblowing Belgian whistleblowing compliance software from legal publisher Larcier-Intersentia (Lefebvre Belgium), sold in PRO, PLUS, and EXPERT tiers to organizations and to advisers managing client files.
GOWhistleblow Portuguese whistleblowing channel from GoFox with AES-256 encryption and published tiers from EUR 21/month on annual billing for Lei 93/2021 compliance.
Sygnalista Polish whistleblowing channel from ITSM Software S.A. built on the Mint Service Desk platform, with cloud and on-premises deployment and published PLN package pricing.
Sources and verification
Every fact on this page comes from OpenSource Hinweisgeberportal's own published materials. These are the pages that were read, and the date they were read.
- Last verified
7 of the vendor pages cited below has changed since this entry was verified. What this means
Cited pages last re-fetched
- opensource-hinweisgeberportal.de/ (opens in new tab)
- opensource-hinweisgeberportal.de/preise (opens in new tab)
- opensource-hinweisgeberportal.de/whistleblowing-software (opens in new tab)
- opensource-hinweisgeberportal.de/interne-meldestelle (opens in new tab)
- opensource-hinweisgeberportal.de/globaleaks (opens in new tab)
- opensource-hinweisgeberportal.de/impressum (opens in new tab)
- opensource-hinweisgeberportal.de/datenschutz (opens in new tab)