WhistleSecure

Swedish whistleblowing channel from Tech brows AB with published tiers from SEK 280/month and EU hosting in Belgium.

Rubric score

27 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: whistlesecure.com(opens in new tab)
Headquarters: Stockholm, Sweden
Hosting: Google Cloud, EU region with data stored in Belgium (vendor-stated)
Pricing: SEK 280/month (0-49 employees); SEK 480/month (50-249); SEK 980/month (250+). Setup, policy, and weekday support included in all tiers.
Prices are quoted per month but billed quarterly or annually. Free testing period stated with no payment details required and roughly 10-minute setup. Contracts described as flexible and cancellable by email or phone.
Languages on reporting form: Not published
Domain registered: December 2022 whistlesecure.com
Ownership: Private, Tech brows AB (Swedish org. nr 559434-1967)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✓
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Sweden (visselblåsarlagen)

Typical buyer

Swedish SMEs and organizations wanting a low-cost, EU-Directive-compliant whistleblowing channel from a domestic vendor with published pricing and included setup support.

Distinctive features

Published per-employee tiers with prices shown in static HTML
Free testing period stated with no payment details required
Setup, policy help, and weekday support bundled into the license fee
Anonymous two-way communication is documented
EU hosting with the storage country named (Belgium)

Add-ons and conditions

Costs or terms not included in the headline price.

ISO 27001 and SOC certifications belong to Google (the hosting provider), not to WhistleSecure or Tech brows AB
Prices are quoted monthly but billed quarterly or annually, so a true month-to-month contract was not confirmed
Reporter interface language coverage is unclear; the public site and reporter flow reviewed were Swedish, while the home page claims free language support
Swedish transposition law is referenced only as "visselblåsarlagen" without a formal statute number or article citations
API access and a formal sub-processor list were not found on public pages reviewed

Notable

Operated by Tech brows AB, a Swedish company (org. nr 559434-1967), with the product built in Stockholm.
Positioned as a low-cost domestic whistleblowing channel; the home page claims “Europe’s lowest prices” and availability across more than 20 EU countries.
Three per-employee tiers are published in plain HTML: SEK 280, SEK 480, and SEK 980 per month, with setup, policy help, and weekday support bundled into the license fee.
A free testing period is stated with no payment details required and an approximately 10-minute setup; contracts are described as flexible and cancellable by email or phone.
Reporting options described include a web form, submitting a report by email, and booking an in-person meeting; a dedicated phone hotline was not described on public pages reviewed.
Anonymous reporting is offered as an option, with anonymous two-way communication and real-time follow-up.
Hosting is stated as Google Cloud in the EU with all data stored in Belgium and never leaving the EU; encryption in transit and at rest is described.
ISO 27001 and SOC I/II/III certifications referenced on the compliance page belong to Google (the hosting provider), not to WhistleSecure or Tech brows AB; no vendor-held certification was found on public pages reviewed.
Compliance copy references EU Directive 2019/1937 and the Swedish whistleblowing law (“visselblåsarlagen”), but without a formal statute number or article-level citations.
A DPA is stated as included as standard; a formal sub-processor list and DPIA support were not found on public pages reviewed.
WhistleSecure is described publicly as a partner within the Fortnox software library, letting Fortnox customers activate a whistleblowing channel; a documented public API was not found on pages reviewed.

Frequently asked questions about WhistleSecure

Answers derived from vendor-published materials dated on this page.

Is WhistleSecure suitable for SMEs under 250 employees?

Yes — WhistleSecure's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. SEK 280/month (0-49 employees); SEK 480/month (50-249); SEK 980/month (250+). Setup, policy, and weekday support included in all tiers. Swedish SMEs and organizations wanting a low-cost, EU-Directive-compliant whistleblowing channel from a domestic vendor with published pricing and included setup support.

Which national whistleblower laws does WhistleSecure explicitly reference?

WhistleSecure explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Sweden (visselblåsarlagen). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does WhistleSecure process whistleblower report content with AI?

No — WhistleSecure does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.