Walor

Danish whistleblowing platform with a fully published four-tier price list from €60/month and a self-serve 14-day trial. Acquired by Ziik in 2024 and sold as "Walor by Ziik".

Rubric score

19 / 50

Evidence tier P

Public pages only. The self-serve trial was not entered, and no reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: www.walor.io(opens in new tab)
Headquarters: Copenhagen, Denmark
Pricing: Tiered by employee count, billed annually: €60/mo (1–49), €87/mo (50–249), €127/mo (250–499), €187/mo (500–999). Excluding VAT.
All four tiers are published with no quote-only band up to 999 employees, and no per-report charge — the vendor states it would create the wrong incentive. Above 999 employees no price is published. A self-serve 14-day trial with full feature access is available at app.walor.io/register alongside a demo-booking path.
Languages on reporting form: Not published
Domain registered: June 2021 walor.io
Ownership: Walor ApS, acquired by the Danish software company Ziik in November 2024 and operated as "Walor by Ziik"
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned
Legal entity: Walor ApS

Capabilities

Anonymous reporting ✓
Multi-channel intake —
Public API —
Free trial ✓
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
France (Loi Sapin II)

Typical buyer

Nordic and northern-European SMEs that want a published price before talking to anyone, a trial they can start themselves, and EU-only hosting — and can accept that the Directive plumbing (deadline timers, audit trail, RBAC, sub-processors) is not documented on public pages.

Distinctive features

Four published employee-band tiers up to 999 employees, with no quote-only step and no per-report charge
Self-serve registration and a 14-day trial with full feature access, rather than a demo gate
States EU-only hosting and two-factor authentication as the login standard
Marketing site maintained in Danish, Swedish, Dutch, German and English

Add-ons and conditions

Costs or terms not included in the headline price.

Billed annually only; the "/mo" figures are presentational and no monthly contract is published
Organisations above 999 employees have no published price
The ISO 27001 claim attaches to the hosting, not to Walor's own information-security management system
Loi Sapin II is named as a compliance target although no French locale site was found

Notable

Walor ApS, Copenhagen. Acquired by the Danish software company Ziik in November 2024; the product continues under the name “Walor by Ziik” and is integrated with Ziik’s internal-communication platform.
The pricing page is the most complete commercial surface of any Danish vendor in this directory: four employee bands published to 999 employees with no quote-only step, prices excluding VAT, and an explicit statement that reports are not charged per report because “it would create precisely the wrong incentive”.
A self-serve 14-day trial with full feature access is offered at app.walor.io/register, alongside a demo-booking path. Setup is pitched at five minutes.
Security page states EU-only hosting, end-to-end encryption, two-factor authentication as the login standard, and automatic deletion on GDPR time limits. It does not name a hosting country, a hosting provider, or any sub-processor.
The ISO 27001 claim is worded as applying to the hosting rather than to Walor’s own information-security management system, and ISO 37002 is described as a standard the solution is “built on the principles of” rather than certified against. Neither is recorded as a vendor certification here.
The Danish-language site cites EU Directive 2019/1937 but not Act No. 1436 of 29 June 2021, the Danish transposition — unusual for a Danish vendor selling into its home market.
Loi Sapin II appears in the stated compliance coverage on both the English and Danish pages, although no French locale site was found among the five (UK, Denmark, Sweden, Netherlands, Germany).
Public pages reviewed did not disclose a product language count, file upload, reporter return access, handler roles, internal notes, audit trail, API access, sub-processors, hosting country, or a customer count.

Frequently asked questions about Walor

Answers derived from vendor-published materials dated on this page.

Is Walor suitable for SMEs under 250 employees?

Likely yes — Walor's entry-tier pricing sits in the €50–100/month band, workable for most 50–249-employee organisations. Tiered by employee count, billed annually: €60/mo (1–49), €87/mo (50–249), €127/mo (250–499), €187/mo (500–999). Excluding VAT. Nordic and northern-European SMEs that want a published price before talking to anyone, a trial they can start themselves, and EU-only hosting — and can accept that the Directive plumbing (deadline timers, audit trail, RBAC, sub-processors) is not documented on public pages.

Which national whistleblower laws does Walor explicitly reference?

Walor explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, France (Loi Sapin II). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Walor process whistleblower report content with AI?

Walor does not publicly disclose whether report content is processed by AI or machine-translation services. For a no-AI compliance posture, obtain written confirmation and a subprocessor list before procurement.