WhistlePort

German whistleblowing channel operated by the law firm VON RUEDEN, with a self-serve platform tier from EUR 69/month and an optional attorney-run case-handling service.

Rubric score

27 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: whistleport.de(opens in new tab)
Headquarters: Berlin, Germany
Hosting: German data centre in Nuremberg, stated as ISO/IEC 27001:2013 certified (certification held by the data-centre operator, not the vendor)
Pricing: Paket 1 (platform) EUR 69/month; Paket 2 (platform + employee training) EUR 69/month plus a one-time EUR 499 setup fee; Paket 3 (full-service) EUR 69/month plus EUR 79/month for attorney-run case handling. All prices plus 19% VAT.
One-year minimum term with annual billing, auto-renewal, and a 3-month notice period; no month-to-month option. A free test version is advertised, but the stated availability date (until 01.01.2024) is stale on the public page reviewed.
Languages on reporting form: Not published
Ownership: Law firm (VON RUEDEN Partnerschaft von Rechtsanwälten, Berlin, Germany; USt-IdNr DE-279218916; Amtsgericht Charlottenburg PR 732)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: None published
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✓
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO/IEC 27001:2013 (data-centre operator only; vendor not certified)

National laws referenced

EU Directive 2019/1937
Germany (HinSchG)

Typical buyer

German SMEs (25+/50+ employees) and public-sector bodies wanting a HinSchG-compliant reporting channel, optionally with an external attorney acting as case handler.

Distinctive features

Operated by an established German law firm, with an optional tier where attorneys act as the external case-handling body
All three package prices are published, including the platform tier at EUR 69/month
Anonymous reporting with no email required and two-way communication with the reporter
Per-organization subdomain (unternehmensname.whistleport.de) with corporate-design customization
German hosting in a Nuremberg data centre stated as ISO/IEC 27001:2013 certified
Unlimited case handlers with assignment, case linking, PDF export, and a follow-up/deadline function

Add-ons and conditions

Costs or terms not included in the headline price.

No month-to-month option; contracts run one year minimum with annual billing and a 3-month notice period
The advertised free test version shows a stale availability date (until 01.01.2024) on the public page reviewed
ISO/IEC 27001 applies to the hosting data centre operator, not to WhistlePort or VON RUEDEN as a vendor
Full-service legal case handling (Paket 3) costs an extra EUR 79/month on top of the platform fee
Reporting-language count, file-upload support, and a subprocessor list were not documented on public pages reviewed

Notable

Operated by VON RUEDEN Partnerschaft von Rechtsanwälten, a Berlin law firm at Leipziger Platz 9, 10117 Berlin (USt-IdNr DE-279218916, Amtsgericht Charlottenburg PR 732), with managing partners RA Johannes von Rüden and RA Fabian Heyse.
Positioned as a hybrid product: a self-serve electronic reporting platform plus an optional external compliance-officer service where attorneys receive, review, and assess reports and give recommendations.
Marketed to German SMEs and public-sector bodies subject to the HinSchG, referencing the 25+ and 50+ employee thresholds and the EU Whistleblower Directive.
Web-based anonymous reporting is available 24/7 with no email address required, and two-way communication with the reporter is supported.
Each customer gets its own subdomain (unternehmensname.whistleport.de) and can adapt the reporting form to its corporate design.
Backend case handling supports unlimited handlers, user assignment, case linking, PDF export, and a follow-up/deadline function with email notifications.
Hosting is stated as a German data centre in Nuremberg described as ISO/IEC 27001:2013 certified; the certification is the data-centre operator’s, not a vendor or product certification.
Three published packages, all at EUR 69/month plus VAT for the platform: Paket 1 platform only; Paket 2 adds a one-time EUR 499 training fee for in-house case handling; Paket 3 adds EUR 79/month for attorney-run case handling.
Contract terms are one year minimum with annual billing, automatic annual renewal, and a 3-month notice period; there is no month-to-month option.
A free test version is advertised but the stated availability date on the public page reviewed (until 01.01.2024) is stale.
Reporting-language count, file-upload support, retention/auto-deletion, an append-only audit trail, a DPA/AVV, and a subprocessor list were not documented on the public pages reviewed.

Frequently asked questions about WhistlePort

Answers derived from vendor-published materials dated on this page.

Is WhistlePort suitable for SMEs under 250 employees?

Likely yes — WhistlePort's entry-tier pricing sits in the €50–100/month band, workable for most 50–249-employee organisations. Paket 1 (platform) EUR 69/month; Paket 2 (platform + employee training) EUR 69/month plus a one-time EUR 499 setup fee; Paket 3 (full-service) EUR 69/month plus EUR 79/month for attorney-run case handling. All prices plus 19% VAT. German SMEs (25+/50+ employees) and public-sector bodies wanting a HinSchG-compliant reporting channel, optionally with an external attorney acting as case handler.

Which national whistleblower laws does WhistlePort explicitly reference?

WhistlePort explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does WhistlePort process whistleblower report content with AI?

No — WhistlePort does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.