whizzla

German cloud whistleblowing channel from lexato GmbH with plug-and-play deployment and published monthly tiers from EUR 49 net.

Rubric score

28 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: whizzla.com(opens in new tab)
Headquarters: Bad Orb, Germany
Hosting: 934tel Media Networx GmbH servers in Germany (vendor-stated); data processing agreement executed with the hoster
Pricing: Starter EUR 49/month net (up to 50 employees, 1 organization, 2 languages, 2 user accounts); KMU EUR 149/month net (up to 500 employees, 3 organizations, 3 languages, 5 accounts); Konzerne EUR 249/month net (500+ employees, 5 organizations, 5 languages, 10 accounts). Enterprise on request.
Prices are stated net and per month with no setup costs. Contract term, annual billing, and the enterprise tier price are not detailed on public pages reviewed. Ordering runs through a self-serve process with a shopping cart.
Languages on reporting form: 6
Domain registered: February 2021 whizzla.com
Ownership: Private, whizzla is a legaltech product of lexato GmbH (Handelsregister Hanau HRB 98387, VAT DE348448837), managing director Stefan Kunz
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: None published
DNSSEC: Unsigned
Legal entity: lexato GmbH HRB 98387 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✗
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Germany (Lieferkettensorgfaltspflichtengesetz, LkSG)
Germany (Geldwaeschegesetz)

Typical buyer

German SMEs and mid-market groups wanting a plug-and-play EU-Directive and LkSG whistleblowing channel from a German vendor with German hosting.

Distinctive features

Published monthly tiers from EUR 49 net with a self-serve ordering flow
7-day acknowledgment and 3-month feedback deadlines stated on public pages
Anonymous two-way encrypted communication via PIN and case number
German hosting via a named sub-processor with a data processing agreement
Six reporter languages (German, English, Spanish, Italian, French, Dutch)

Add-ons and conditions

Costs or terms not included in the headline price.

Prices are net and monthly; annual or contract terms are not detailed on public pages reviewed
Enterprise tier is quote-only ("on request")
Automatic deletion is fixed at six months rather than configurable
No ISO 27001 vendor certification found on public pages reviewed
No free trial advertised on public pages reviewed

Notable

whizzla is a legaltech product of lexato GmbH, Bad Orb, Germany (Handelsregister Hanau HRB 98387, VAT DE348448837, managing director Stefan Kunz).
Positioned as a plug-and-play, web-based whistleblowing channel for organizations to meet EU whistleblowing obligations, with LkSG (supply-chain due diligence) and Geldwaeschegesetz (anti-money-laundering) complaint handling also referenced.
Public pages name the EU Whistleblower Directive 2019/1937 and the German LkSG and Geldwaeschegesetz; the German whistleblower transposition law (HinSchG) is not named with article numbers on the pages reviewed.
Reporters submit through a predefined anonymous questionnaire and return via a PIN and case number to exchange encrypted two-way messages with the handling team.
Case handling includes a dashboard with status and deadline tracking; public copy states confirmation within 7 days and a final remedial report after 3 months.
Reports auto-delete after six months; the deletion period is presented as fixed rather than configurable on pages reviewed.
Six reporter languages are offered: German, English, Spanish, Italian, French, and Dutch.
Data is hosted in Germany by 934tel Media Networx GmbH, and the privacy notice states a data processing agreement (Auftragsverarbeitungsvertrag) is in place with the hoster; SSL/TLS transmission encryption is stated.
No ISO 27001 or other vendor security certification was found on public pages reviewed.
Three monthly tiers are published net (Starter EUR 49, KMU EUR 149, Konzerne EUR 249) with no setup fee and an enterprise tier on request; ordering runs through a self-serve cart, and no free trial is advertised.
Appears to be a proprietary standalone product rather than a reseller or white-label of another listed tool.

Frequently asked questions about whizzla

Answers derived from vendor-published materials dated on this page.

Is whizzla suitable for SMEs under 250 employees?

Yes — whizzla's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Starter EUR 49/month net (up to 50 employees, 1 organization, 2 languages, 2 user accounts); KMU EUR 149/month net (up to 500 employees, 3 organizations, 3 languages, 5 accounts); Konzerne EUR 249/month net (500+ employees, 5 organizations, 5 languages, 10 accounts). Enterprise on request. German SMEs and mid-market groups wanting a plug-and-play EU-Directive and LkSG whistleblowing channel from a German vendor with German hosting.

Which national whistleblower laws does whizzla explicitly reference?

whizzla explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (Lieferkettensorgfaltspflichtengesetz, LkSG), Germany (Geldwaeschegesetz). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does whizzla process whistleblower report content with AI?

No — whizzla does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.