Sygnali

Polish whistleblowing channel from MWC Sp. z o.o. with published PLN tiers, Poland-based hosting, and web, email, and phone intake.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: The phone reporting channel uses AI audio-to-text conversion to turn a spoken report into a written submission.

Rubric score

34 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: sygnali.pl(opens in new tab)
Headquarters: Poznań, Poland
Hosting: Dedicated servers in Poland (Warsaw data centre), reporter traffic proxied through Cloudflare (vendor-stated)
Pricing: BASIC 160 PLN/month or 1,760 PLN/year (2 recipients); PRO 260 PLN/month or 2,860 PLN/year (4 recipients); PREMIUM 360 PLN/month or 3,960 PLN/year (6 recipients).
First month free. Unlimited report volume on all tiers. Tiers differ by the number of report recipients (handlers). VAT treatment of the listed PLN prices is not stated on public pages reviewed.
Languages on reporting form: Not published
Domain registered: November 2021 sygnali.pl
Ownership: Private, MWC Sp. z o.o. (Poznań, Poland)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✓
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Poland (Ustawa o ochronie sygnalistów, in force 25 September 2024)

Typical buyer

Polish municipalities, schools, and companies wanting a Polish-language, Poland-hosted reporting channel aligned to the 2024 Polish whistleblower law.

Distinctive features

Published three-tier pricing in PLN with monthly and annual billing and a free first month
map[Three intake channels:online reporting form, anonymous email relay, and a PIN-protected phone line with AI audio-to-text]
Anonymous reporting with an identifier plus password for reporter return access and two-way messaging
Poland-based hosting (Warsaw data centre) with a Cloudflare proxy stated to mask reporter IP addresses
Category-based routing of reports to designated handler users, with internal notes hidden from reporters
Explicitly references the Polish Whistleblower Protection Act (in force 25 September 2024)

Add-ons and conditions

Costs or terms not included in the headline price.

ISO 27001 is presented in relation to the hosting data centre, not verified as a vendor or product certification on public pages reviewed
Reporter interface documented only in Polish; no multilingual reporter coverage found on public pages reviewed
Statutory 7-day acknowledgment and 3-month feedback deadline tracking not documented on public pages reviewed
Configurable retention with automatic deletion not documented on public pages reviewed
API access and a formal sub-processor list with right to object not found on public pages reviewed

Notable

Operated by MWC Sp. z o.o., Kowalewicka 12, 60-002 Poznań, a Polish IT vendor that also publishes municipal document-distribution and secret-ballot systems.
Positioned for Polish municipalities, regional government bodies, companies, and educational institutions subject to the Polish whistleblower law.
Three reporting channels are documented: an online reporting form on a dedicated URL, an anonymous email relay that hides the sender address, and a PIN-protected phone line that uses AI audio-to-text conversion.
Reports are anonymous by default; a reporter receives a generated identifier and password (shown on screen and as a downloadable PDF receipt) to log back in, read responses, and send follow-ups, with a 15-minute auto-logout.
The administrator panel organises reports into New, Open, and Archived states, routes them to handler users by category, supports internal notes hidden from reporters, and keeps a system activity log.
Notifications to authorised recipients are sent by email and SMS on new reports.
Hosting is stated as dedicated servers in Poland (Warsaw data centre), with reporter traffic proxied through Cloudflare to mask IP addresses, submitted-document metadata stripped, and files encrypted with keys held separately; ESET and encrypted Veeam backups are also referenced.
ISO 27001 is presented in relation to the hosting data centre; the pages reviewed do not establish an independent vendor or product ISO 27001 certification.
The Overview section explicitly cites the Polish Ustawa o ochronie sygnalistów (in force 25 September 2024), EU Directive 2019/1937, and GDPR.
Pricing is public: BASIC 160 PLN/month (1,760 PLN/year, 2 recipients), PRO 260 PLN/month (2,860 PLN/year, 4 recipients), and PREMIUM 360 PLN/month (3,960 PLN/year, 6 recipients), with a free first month and unlimited report volume on all tiers.
No API documentation, formal sub-processor list with right to object, statutory deadline tracking, or retention/auto-deletion policy was found on public pages reviewed; the reporter interface is documented only in Polish.

Frequently asked questions about Sygnali

Answers derived from vendor-published materials dated on this page.

Is Sygnali suitable for SMEs under 250 employees?

Yes — Sygnali's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. BASIC 160 PLN/month or 1,760 PLN/year (2 recipients); PRO 260 PLN/month or 2,860 PLN/year (4 recipients); PREMIUM 360 PLN/month or 3,960 PLN/year (6 recipients). Polish municipalities, schools, and companies wanting a Polish-language, Poland-hosted reporting channel aligned to the 2024 Polish whistleblower law.

Which national whistleblower laws does Sygnali explicitly reference?

Sygnali explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Poland (Ustawa o ochronie sygnalistów, in force 25 September 2024). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Sygnali process whistleblower report content with AI?

Yes — Sygnali processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. The phone reporting channel uses AI audio-to-text conversion to turn a spoken report into a written submission.