Request a demo
  1. GRC Platform
  2. Compliance
  3. Whistleblowing channel
Whistleblowing channel software

Your whistleblowing channel, ready for the EU Directive

Receive anonymous or confidential reports online or by phone, manage each case with its deadlines and full traceability, and prove compliance whenever you're asked.

  • Anonymous, with a code and password to follow the case
  • Automatic acknowledgement and alerts before every deadline
  • Certified under Spain's ENS, High category
4.4 · 105 reviews on G2
Request a demoSee the product
Compliance team reviewing reports from the channel
EU DIRECTIVE2019/1937Whistleblowerprotection
Internal Reporting Channel
ReportsOpen
Real GlobalSuite® inbox: reports with their status and category

More than 700 companies in 8 countries run their channel with GlobalSuite®

Adeslas SegurCaixa Eroski Asociación Española Contra el Cáncer Sancor Seguros Emasesa Alestis Aerospace Neosecure Instituto de Ingeniería del Conocimiento
The product, as it is

What the channel looks like inside

Real GlobalSuite® screens: what case handlers see and what reporters see.

Real GlobalSuite® screen: dashboard with reports by status and by case handler
How it works

From report to response, in five steps

What the reporter sees and what the case handler sees, in the same application.

An employee using the whistleblowing channel on a tablet Report sentCode 7KQ2-M4XD-91PL AnonymousNo name needed
For the reporter

Easy to use, with no fear of retaliation

If speaking up is hard, people stay quiet. The channel is built so anyone on your staff, or outside it, can report in a couple of minutes.

  • Anonymous or confidentialThe reporter decides whether to give their name.
  • Code and passwordTo check the case and talk to the case handler without revealing who they are.
  • In their languageMain EU languages plus Spain's co-official ones, and automatic translation into more than 75.
  • From any deviceOnline, from a mobile or through your own phone number.
  • Attachments without a traceFile metadata is removed before anything is stored.
  • Encrypted reportsWith the code of ethics and the channel policy at hand in the form.

For case handlers: every case under control

Inbox, traceability, dashboard and access control in one tool, for whoever runs the channel and for in-house or external case handlers.

Deadlines

No deadline slips through

Automatic acknowledgement as each report arrives, alerts before deadlines expire and every stage of the case in view.

Traceability

Everything that happens in a case, on record

Messages with the reporter and between case handlers, status changes, attachments and decisions, in order. Download the report and the evidence when they're requested.

Dashboard

Data for the committee and the board

Reports by status, case handler and category, and how they evolve, per company or for the whole group.

Access

Only the right people see each case

Permissions per case and per company, exclusion for conflicts of interest, external case handlers with limited access and a log of every login and action. With automatic and manual anonymisation of personal data.

Configuration

Your branding, your way

The channel adapts to your organisation, not the other way round.

  • Your brandLogo, colours and texts.
  • Your formQuestions, fields and categories.
  • Your documentsCode of ethics, policy and terms of use.
  • Your companiesOne space per group company.
  • Your usersSign-in with ADFS or SAML2.
  • Your emailNotifications sent from your own servers.

The EU Directive, article by article

What Directive (EU) 2019/1937 on the protection of persons who report breaches of Union law requires, and where the channel covers it.

What the Directive requiresWhereHow you meet it
Written and oral reportingart. 9.2Web form and your own phone line.
Anonymous reports, where national law allowsart. 6.2Anonymous reporting with a code and password to follow it up.
Acknowledgement within 7 daysart. 9.1 bSent automatically when the report arrives.
Feedback within 3 monthsart. 9.1 fA deadline per case and alerts before it expires.
Impartial person or departmentart. 9.1 cRoles and permissions for in-house and external case handlers.
Shared resources (50–249 workers)art. 8.6One space per company inside the same channel.
Record keepingart. 18Reports, actions and access logged.
Confidentiality and data protectionarts. 16 and 17Access per case, encryption and anonymisation of personal data.
Security

What's shared here stays here

A channel only works if people trust it. That's why GlobalSuite® security is certified, not just promised.

  • Encrypted reportsEverything sent through the channel travels encrypted.
  • Attachments without metadataCleaned before they're stored.
  • SSO accessADFS or SAML2, with every login logged.
  • Wherever you chooseIn the GlobalSuite® cloud, a dedicated cloud or on your own servers.
Certifications

Our certifications

Audited by SGS, EQA and Spain's National Cryptologic Centre. Click each seal to see the certificate.

Plans

A plan for every organisation

Unlimited reports on every plan. Pricing depends on your size and what you need: we'll send you a proposal.

Starter

To comply from day one.

  • Unlimited reports
  • Customisable form
  • Security and confidentiality
  • Up to 2 languages
  • 2 case handlers
Request a proposal
Enterprise

For mid-sized companies and groups.

  • Everything in Starter
  • Up to 4 languages and automatic translation
  • Anonymisation and metadata removal
  • Your logo
  • Multiple companies
  • 5 case handlers
  • Phone line and conflict of interest, optional
Request a proposal
Plus

For large organisations.

  • Everything in Enterprise
  • Unlimited languages and case handlers
  • Full corporate branding
  • Phone line
  • Conflict of interest
  • Sign-in with ADFS or SAML2
  • Training included
Request a proposal

We get it up and running

The software and, if you need it, the team that sets it up with you. Connected to your compliance programme: ISO 37301 and ISO 37001.

1ConsultingPolicy, channel procedure and appointing who runs it.
2Set-upWith your branding, categories, companies and case handlers.
3TrainingWebinars and material for case handlers and the committee.
4SupportSpecialist team and the product always up to date.

What our customers have achieved

Rail transport · 14,000+ employees

As we rolled out risk management and compliance processes, and given the size of the company and the range of its activities, we needed software that would make risk management more effective and efficient.

Diego Molero AlonsoDirector of Internal Audit, Compliance and Business Risk · Renfe

5,000
trains a day under its risk management system
100%
of processes with an owner who keeps their risks up to date
Read the Renfe story
G24.4105 reviewsCapterra4.828 reviews
G2 Europe Leader Summer 2026G2 Leader Summer 2026G2-momentum-leader-summer-reports-2026

Verified reviews on G2

Read all 105 reviews

Integration of compliance regulations, the catalog of standards, and risks in an integrated and coherent manner.

Verified review on G2 · 07/2026

From day one, the onboarding process was excellent, allowing us to understand the platform really fast, thanks to their top-notch support team. The UI is clean and intuitive, making it easy to use for everyone.

Verified review on G2 · 06/2026

It reduces tool fragmentation and centralizes all evidence, documentation, controls, and assessments in one place.

Verified review on G2 · 02/2026

Shall we look at it with your risks and your methodology?

Request a demo

Whistleblowing channel FAQ

Can't find your question? Tell us your case and we'll answer it.

Tell us your case
Is a whistleblowing channel mandatory?
Yes for private companies with 50 or more workers, for companies in EU-regulated financial services regardless of size, and for the public sector (art. 8). Each member state transposes the Directive into its own law.
Can reports be anonymous?
The Directive leaves it to each member state (art. 6.2); most accept them. GlobalSuite® gives the reporter a code and password to follow the case and reply without giving their name.
What deadlines apply?
Acknowledgement within 7 days and feedback within a maximum of 3 months (art. 9.1).
What are the penalties?
Each member state sets them (art. 23); they cover hindering reports, retaliation and breaching confidentiality. Check your national law.
Who handles the reports?
An impartial person or department designated by the organisation (art. 9.1 c); it can be in-house or an external provider.
Can several companies share a channel?
Companies with 50 to 249 workers can share resources for receiving and investigating reports (art. 8.6). In GlobalSuite® each company has its own space inside the same channel.
How long is data kept?
Records are kept no longer than necessary and proportionate (art. 18), and personal data that is clearly not relevant is deleted without undue delay (art. 17).
How much does it cost?
It depends on the plan (Starter, Enterprise or Plus), the number of languages and case handlers, and whether you add a phone line. Every plan includes unlimited reports. Ask us for a proposal and we'll tailor it to you.

Where does your
whistleblowing channel stand?

Tell us what you need and we will show you how GlobalSuite® handles it.

Tell us your case