https://ethicsportal.eu/changelog/EthicsPortal is a secure, anonymous whistleblower reporting platform that helps organizations comply with EU Directive 2019/1937.enThu, 12 Nov 2026 15:14:21 +0000https://ethicsportal.eu/images/logo.svghttps://ethicsportal.eu/https://ethicsportal.eu/changelog/connect-an-ai-assistant/Wed, 11 Nov 2026 00:00:00 +0000https://ethicsportal.eu/changelog/connect-an-ai-assistant/EthicsPortal has an MCP server. An AI assistant can check cases, configure your whistleblowing channel and invite members, without access to report content.<p>EthicsPortal now has an MCP server. An AI assistant that supports remote MCP servers, such as Claude Code, can use it to work with EthicsPortal for you. It can check case status and deadlines, configure your whistleblowing channel, invite members and read the audit trail.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-connect-an-ai-assistant_hu_ec7ba8adf298a948.webp" srcset="/images/screenshots/en-changelog-connect-an-ai-assistant_hu_61ce57a06f496c24.webp 768w, /images/screenshots/en-changelog-connect-an-ai-assistant_hu_ec7ba8adf298a948.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="Connected apps page in EthicsPortal, with the MCP server address to add to an AI assistant" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>The assistant acts as you, with your current role, and only in the organisations you choose on the consent screen. It never sees report content, reporter identity, messages, notes or attachments. Its actions appear in the audit trail, marked as made by an AI assistant. Administrators see every connection under <strong>Connected apps</strong> and can remove it.</p> <p>To start, add <code>https://secure.ethicsportal.eu/mcp</code> to your assistant. A person without an account can create one during the connection and let the assistant set up the first organisation. Read the <a href="/developers/mcp/">MCP server documentation</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/api-and-webhooks/Tue, 10 Nov 2026 00:00:00 +0000https://ethicsportal.eu/changelog/api-and-webhooks/Connect EthicsPortal to your GRC, ticketing or reporting tools. The API gives report status and deadlines, and webhooks report changes. Report content never leaves EthicsPortal.<p>You can now connect EthicsPortal to your GRC, ticketing or reporting tools. The REST API gives the status and deadlines of reports, and webhooks tell your systems when a case changes. Report content, messages, notes and attachments are never available through the API.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-api-and-webhooks_hu_d60f8daae02e740b.webp" srcset="/images/screenshots/en-changelog-api-and-webhooks_hu_9baf3e8e9d1bbfb4.webp 768w, /images/screenshots/en-changelog-api-and-webhooks_hu_d60f8daae02e740b.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="Webhook settings in EthicsPortal, with the destination address and buttons to send a test event and rotate the signing secret" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>Administrators create organisation tokens and webhook endpoints in the organisation settings. Each webhook shows its delivery history. You can retry a delivery, rotate the signing secret and send a test event. API access starts when the organisation has accepted the current Data Processing Agreement.</p> <p>Start with the <a href="/developers/quickstart/">quickstart</a> or read about <a href="/developers/webhooks/">webhooks</a> in the developer documentation.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/reports-by-email/Sat, 24 Oct 2026 00:00:00 +0000https://ethicsportal.eu/changelog/reports-by-email/Every whistleblowing channel has its own email address. An email becomes a case, and handlers never see the sender's address.<p>Every whistleblowing channel now has its own email address. An email sent to it becomes a case, the same as a report through the online reporting form. The reporter receives a Case ID and a one-time password for the secure inbox, where the conversation continues.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-reports-by-email_hu_516250b6d031a483.webp" srcset="/images/screenshots/en-changelog-reports-by-email_hu_92a2373d0ee727d7.webp 768w, /images/screenshots/en-changelog-reports-by-email_hu_516250b6d031a483.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="Public page of a whistleblowing channel with its own email address, next to the online reporting form and the phone number" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>Handlers never see the sender’s address. It is stored encrypted and used only to send the receipt and notices of new messages. The online reporting form also has an optional email field for updates, with the same protection, so anonymous reporters can be told when a handler writes.</p> <p>Email reports are on by default. An administrator can switch them off in the channel settings. Read how <a href="/security/#reports-by-email">reports by email</a> are received and protected.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/tagged-pdf-documents/Sat, 24 Oct 2026 00:00:00 +0000https://ethicsportal.eu/changelog/tagged-pdf-documents/The compliance report, certificate, poster, handler manual and case exports are now generated as tagged PDF/UA-1 documents that screen readers can follow.<p>EthicsPortal now generates its PDF documents as tagged PDF/UA-1. This covers the compliance report, the compliance certificate, the channel poster, the case handler manual and case exports. Each file has a title, a document language and a tagged structure, so screen readers can follow its headings and tables.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-tagged-pdf-documents_hu_4e632ff5b0fa564c.webp" srcset="/images/screenshots/en-changelog-tagged-pdf-documents_hu_6efb723b1fa00943.webp 768w, /images/screenshots/en-changelog-tagged-pdf-documents_hu_4e632ff5b0fa564c.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="Documents page in EthicsPortal with the compliance report, compliance certificate, employee poster and case handler manual" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>Public bodies and many companies must buy accessible documents. Read the <a href="/accessibility/">accessibility statement</a> for the current status of EthicsPortal.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/switzerland/Mon, 12 Oct 2026 00:00:00 +0000https://ethicsportal.eu/changelog/switzerland/Organisations in Switzerland can operate a whistleblowing channel with EthicsPortal, with documents written for the Swiss FADP.<p>Organisations in Switzerland can now operate their whistleblowing channel with EthicsPortal. Switzerland has no general whistleblower law, so Swiss channels apply the standard of the EU Whistleblowing Directive voluntarily, with Swiss wording. The documents cite the Swiss Federal Act on Data Protection (FADP) instead of the GDPR, and they name the country where the data is hosted.</p> <p>The Data Processing Agreement has a section for the FADP. Swiss teams can use EthicsPortal in German, French, Italian or English.</p> <p>Read the <a href="/whistleblower-laws/switzerland/">overview of whistleblowing rules in Switzerland</a> and our article on <a href="/blog/whistleblowing-channel-switzerland/">setting up a whistleblowing channel in Switzerland</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/slovenia/Wed, 23 Sep 2026 00:00:00 +0000https://ethicsportal.eu/changelog/slovenia/Organisations in Slovenia can operate a whistleblowing channel with EthicsPortal in Slovenian, set up for the Whistleblower Protection Act (ZZPri).<p>Organisations in Slovenia can now operate their whistleblowing channel with EthicsPortal. The online reporting form, the secure inbox and the case handling screens are available in Slovenian, the 14th language of EthicsPortal.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/sl-portal-public-desktop_hu_4c9afd6b0721f17d.webp" srcset="/images/screenshots/sl-portal-public-desktop_hu_c93b28c7e5f06ee8.webp 768w, /images/screenshots/sl-portal-public-desktop_hu_4c9afd6b0721f17d.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="1070" alt="Public page of a Slovenian whistleblowing channel in EthicsPortal, in Slovenian" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>Slovenian channels and documents are set up for the Whistleblower Protection Act (ZZPri). They name the Commission for the Prevention of Corruption (KPK) as the external reporting authority.</p> <p>Read the <a href="/whistleblower-laws/slovenia/">overview of the whistleblower law in Slovenia</a> or visit <a href="/sl/">EthicsPortal in Slovenian</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/saml-single-sign-on/Thu, 16 Jul 2026 00:00:00 +0000https://ethicsportal.eu/changelog/saml-single-sign-on/Your team signs in to EthicsPortal through your identity provider over SAML 2.0. Administrators can require it for your verified email domains.<p>Your team can now sign in to EthicsPortal through your company’s identity provider. EthicsPortal supports SAML 2.0, so it works with Okta, Microsoft Entra ID and other SAML 2.0 providers.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-saml-single-sign-on_hu_e8bcb81d0f8e356f.webp" srcset="/images/screenshots/en-changelog-saml-single-sign-on_hu_e5e8408594c86651.webp 768w, /images/screenshots/en-changelog-saml-single-sign-on_hu_e8bcb81d0f8e356f.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="Single sign-on settings in EthicsPortal, with the service provider details to copy into the identity provider" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>An administrator connects the provider in the organisation settings. After you prove that you own an email domain with a DNS record, you can require single sign-on for everyone with an address at that domain. You can also let the provider create accounts at the first sign-in. When the provider renews its signing certificate, paste the new certificate below the old one, and sign-in keeps working during the change.</p> <p>Use it together with <a href="/changelog/scim-provisioning/">SCIM provisioning</a>, so that people who leave the company lose access automatically. Read the <a href="/developers/identity-integrations/">identity integration guide</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/scim-provisioning/Sat, 20 Jun 2026 00:00:00 +0000https://ethicsportal.eu/changelog/scim-provisioning/Connect Okta, Microsoft Entra ID or another SCIM 2.0 directory. People join and leave EthicsPortal when they join and leave your directory.<p>EthicsPortal now supports SCIM 2.0. Okta, Microsoft Entra ID or another SCIM directory can create, update and deactivate the members of your organisation. When someone leaves the company and the directory deactivates them, their access to cases ends.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-scim-provisioning_hu_1207149f5bfb25f0.webp" srcset="/images/screenshots/en-changelog-scim-provisioning_hu_394f9f03751f0099.webp 768w, /images/screenshots/en-changelog-scim-provisioning_hu_1207149f5bfb25f0.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="SCIM provisioning settings in EthicsPortal, with an active connection, the SCIM base URL and the role for new members" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>An administrator generates the SCIM token in the organisation settings and chooses the role that new members get: handler, admin or viewer. Read the <a href="/developers/identity-integrations/">identity integration guide</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/italy-spain-netherlands-portugal/Thu, 18 Jun 2026 00:00:00 +0000https://ethicsportal.eu/changelog/italy-spain-netherlands-portugal/Organisations in four more countries can operate their whistleblowing channel in their own language, set up for their national whistleblower law.<p>Organisations in Italy, Spain, the Netherlands and Portugal can now operate their whistleblowing channel with EthicsPortal in their own language. The online reporting form, the secure inbox, the case handling screens, the emails and the generated documents are available in Italian, Spanish, Dutch and Portuguese.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/it-portal-public-desktop_hu_387b8e6610072c89.webp" srcset="/images/screenshots/it-portal-public-desktop_hu_7ecac183aa4586ff.webp 768w, /images/screenshots/it-portal-public-desktop_hu_387b8e6610072c89.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="1070" alt="Public page of an Italian whistleblowing channel in EthicsPortal, in Italian" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>Each channel is set up for its national law and names the external reporting authority:</p> <ul> <li><strong>Italy:</strong> Legislative Decree 24/2023, with ANAC</li> <li><strong>Spain:</strong> Law 2/2023, with the Independent Authority for Whistleblower Protection (AAI)</li> <li><strong>The Netherlands:</strong> Whistleblowers Protection Act (Wet bescherming klokkenluiders), with the Huis voor Klokkenluiders</li> <li><strong>Portugal:</strong> Law 93/2021, with MENAC</li> </ul> <p>Read the <a href="/whistleblower-laws/">whistleblower laws by country</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/reporter-retaliation-flag/Thu, 18 Jun 2026 00:00:00 +0000https://ethicsportal.eu/changelog/reporter-retaliation-flag/A reporter can mark a follow-up message as being about retaliation. The case gets an urgency badge, so handlers see it at once.<p>Retaliation often starts after a report is made. A reporter can now mark a follow-up message in the secure inbox as being about retaliation. The case then gets an urgency badge in the case list and on the case page, and the conversation shows that the message was flagged, so both sides can see it.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-reporter-retaliation-flag_hu_4302dcde632f024c.webp" srcset="/images/screenshots/en-changelog-reporter-retaliation-flag_hu_76bbe40d6e24c570.webp 768w, /images/screenshots/en-changelog-reporter-retaliation-flag_hu_4302dcde632f024c.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="443" alt="The reply form in the reporter’s secure inbox, with a switch to say that the reporter is facing retaliation" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>The same badge appears when a reporter says on the reporting form that they fear or face retaliation. This helps you act on the protection against retaliation in Article 19 of <a href="https://eur-lex.europa.eu/eli/dir/2019/1937/oj/eng" rel="nofollow">Directive (EU) 2019/1937</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/guided-questions/Sun, 14 Jun 2026 00:00:00 +0000https://ethicsportal.eu/changelog/guided-questions/Five optional questions help reporters give the facts that handlers need to assess a case. Every question can be skipped.<p>The online reporting form now has five optional questions: the reporter’s relationship to the organisation, how they know about the issue, when it happened, whether they reported it before, and whether they fear or face retaliation. Handlers get the facts they need to assess the case at the start.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-guided-questions_hu_b2dbe1166d46a1f9.webp" srcset="/images/screenshots/en-changelog-guided-questions_hu_7ec7f4a8bd2d31a.webp 768w, /images/screenshots/en-changelog-guided-questions_hu_b2dbe1166d46a1f9.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="1831" alt="The online reporting form with the five optional guided questions opened" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>The questions are collapsed by default and every one can be skipped, so a reporter who wants to stay anonymous never has to give identifying details. Handlers see the answers on the case page and in the case PDF, and the reporter sees their own answers in the secure inbox.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/data-export/Sat, 13 Jun 2026 00:00:00 +0000https://ethicsportal.eu/changelog/data-export/Administrators can download a ZIP of all organisation data, with every report, message, note and attachment, in a machine-readable format.<p>Administrators can now export all of the organisation’s data themselves, at any time. The ZIP file contains JSON files for the organisation, its members, the channel settings and every report with its messages and notes, plus all attachments. You can move your data to another system or archive it without asking us. This supports the right to data portability in Article 20 of the GDPR.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-data-export_hu_602ffac9245ed5c.webp" srcset="/images/screenshots/en-changelog-data-export_hu_5d283d1015430749.webp 768w, /images/screenshots/en-changelog-data-export_hu_602ffac9245ed5c.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="Data export page in EthicsPortal with a completed export ready to download" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>The export is generated in the background. Downloading it requires a fresh identity confirmation and is recorded in the audit trail, and the file is deleted after 7 days. Read about <a href="/trust/">export and deletion</a>.</p>support@ethicsportal.eu (EthicsPortal)https://ethicsportal.eu/changelog/auditor-role/Sat, 13 Jun 2026 00:00:00 +0000https://ethicsportal.eu/changelog/auditor-role/The viewer role can read every case and the audit trail, but cannot change anything.<p>You can now invite people with the viewer role. A viewer can read every case and the audit trail, but cannot change a case, the channel settings, billing or team members. Use it for internal auditors, external reviewers or legal counsel.</p> <figure class="not-prose my-6 sm:my-8"> <div class="rounded-lg border border-base-300 overflow-hidden shadow-sm"> <img src="/images/screenshots/en-changelog-auditor-role_hu_d5123519590e18ac.webp" srcset="/images/screenshots/en-changelog-auditor-role_hu_cbaf899a4bf81957.webp 768w, /images/screenshots/en-changelog-auditor-role_hu_d5123519590e18ac.webp 1536w" sizes="(min-width: 832px) 768px, calc(100vw - 2rem)" width="1536" height="960" alt="Invitation form in EthicsPortal with the viewer role, for read-only access to every report and the audit trail" class="w-full h-auto block" loading="lazy" decoding="async" /> </div> </figure> <p>Viewers can also download the compliance documents, including the compliance report and the compliance certificate. Read how <a href="/security/#access-control">access control</a> works in EthicsPortal.</p>support@ethicsportal.eu (EthicsPortal)