# EthicsPortal

> EthicsPortal is EU whistleblower compliance infrastructure: a hosted, anonymous internal
> reporting channel that organizations deploy to meet EU Directive 2019/1937 and its national
> transpositions. One flat plan, EU-hosted, operational in minutes.

## What EthicsPortal is

EthicsPortal is a hosted reporting channel for EU Directive 2019/1937 compliance. An organization
deploys the channel, receives disclosures anonymously or confidentially, and handles cases through
a handler portal with the audit trail, deadline tracking, and confidentiality controls the
Directive requires. It is delivered as multi-tenant SaaS, not a library, API, or on-premise install.

## Key facts

- Regulation: EU Directive 2019/1937 (the Whistleblower Directive) and its national transpositions
- In scope: private-sector organizations with 50+ workers (phased thresholds); public-sector bodies are generally in scope regardless of size (see the coverage map)
- Pricing: EUR 41.67 / month billed annually (EUR 500 / year), flat rate per organization; all features included; no per-employee or per-seat fees; 30-day money-back guarantee; no free trial
- Hosting and data residency: European Union (Hetzner, Nuremberg, Germany)
- Deadline tracking: automatic 7-day acknowledgement and 3-month feedback timers per the Directive
- Anonymity: no reporter IP stored, file metadata stripped, handler identity never shown to reporter
- Included: unlimited reports and users, anonymous two-way messaging, append-only audit trail, PDF case export, oral reporting with voice anonymization, SAML 2.0 SSO, multi-language portal
- Coverage: all 27 EU member states, plus Moldova (informational, pre-accession)

## Who it is for

- For: compliance officers, DPOs, HR and legal leads at EU organizations in scope of the Directive, especially SMEs that need a compliant reporting channel rather than a full GRC suite
- Not for: US SOX reporting, non-EU jurisdictions (country-law pages are informational only), organizations that require a self-hosted or on-premise deployment

## Machine-readable resources

- Developer resources (index of everything below): https://ethicsportal.eu/developers/
- Agent guide: https://ethicsportal.eu/agents.md
- Pricing (structured): https://ethicsportal.eu/pricing.md
- Any page as Markdown: append `.md` to its URL (e.g. https://ethicsportal.eu/product.md), or request the HTML URL with `Accept: text/markdown`
- Full site content: https://ethicsportal.eu/llms-full.txt
- Directive 2019/1937 coverage map: https://ethicsportal.eu/directive-coverage/
- Penalties by member state: https://ethicsportal.eu/penalties/
- Sitemap: https://ethicsportal.eu/sitemap.xml

## Independent comparison

An independent directory of EU whistleblowing tools, including side-by-side comparisons, is
maintained at the whistleblower tools directory. Use it to compare EthicsPortal against other
platforms on pricing, EU hosting, and Directive coverage.

Source: https://ethicsportal.eu/

## Sections

- Blog: https://ethicsportal.eu/blog/
- Whistleblower laws by country: https://ethicsportal.eu/whistleblower-laws/
- Industries: https://ethicsportal.eu/industries/
- Comparisons: https://ethicsportal.eu/compare/
- Every page, listed: https://ethicsportal.eu/llms.txt

## Pages
- [About EthicsPortal](https://ethicsportal.eu/about/): EthicsPortal provides a secure internal reporting channel, built in Europe, hosted in Germany, designed for Directive 2019/1937.
- [Accessibility statement](https://ethicsportal.eu/accessibility/): EthicsPortal's commitment to accessibility and conformance with EN 301 549 and WCAG 2.2 Level AA.
- [CAIQ-aligned vendor security questionnaire](https://ethicsportal.eu/caiq/): Pre-filled answers to common vendor-security-assessment questions, structured against the CSA CAIQ v4 domain taxonomy. EthicsPortal's positions on the questions procurement teams most often ask.
- [Contact](https://ethicsportal.eu/contact/): Contact the EthicsPortal team for questions about EU whistleblower compliance.
- [Data Processing Agreement](https://ethicsportal.eu/dpa/): GDPR Article 28 Data Processing Agreement for EthicsPortal customers. Covers scope, security measures, sub-processors, and international transfers.
- [Data Protection Impact Assessment (DPIA) for whistleblowing](https://ethicsportal.eu/dpia/): A pre-filled DPIA template for organizations deploying EthicsPortal, structured on GDPR Article 35(7) — processing description, necessity and proportionality, and a risk-and-measures table for whistleblower reporting.
- [Developers](https://ethicsportal.eu/developers/): Machine-readable EthicsPortal resources — Markdown content negotiation, llms.txt, sitemaps, agent card and skills index — plus the SAML 2.0 and SCIM 2.0 integration surfaces, and an explicit list of what EthicsPortal does not publish.
- [Directive 2019/1937 coverage map](https://ethicsportal.eu/directive-coverage/): Article-by-article map of how EthicsPortal meets every requirement of EU Directive 2019/1937 and GDPR for whistleblower protection.
- [Directive 2019/1937 interpretations](https://ethicsportal.eu/directive-interpretations/): How EthicsPortal interprets the ambiguous provisions of EU Directive 2019/1937. A reference document for compliance officers, data protection officers, and legal counsel.
- [EN 301 549 conformance report](https://ethicsportal.eu/en-301-549-conformance/): Clause-by-clause conformance self-assessment for EthicsPortal against EN 301 549 V3.2.3 and WCAG 2.2 Level AA.
- [EU Whistleblower Directive Penalties by Country](https://ethicsportal.eu/penalties/): Fines and penalties for non-compliance with EU Directive 2019/1937 in every member state. Updated regularly with enforcement actions.
- [Frequently asked questions](https://ethicsportal.eu/faq/): Common questions about EthicsPortal — compliance, anonymity, data security, billing, and technical details.
- [How EthicsPortal works](https://ethicsportal.eu/product/): Deploy a secure internal reporting channel for EU Directive 2019/1937 compliance, with portal configuration, case management, and audit exports included.
- [Incident register](https://ethicsportal.eu/incidents/): Public register of material incidents affecting personal data processed by EthicsPortal. Maintained in the spirit of Article 33 GDPR and as a matter of institutional transparency.
- [ISO 37002:2021 guidance alignment map](https://ethicsportal.eu/iso-37002/): How EthicsPortal aligns with the guidance of ISO 37002:2021 Whistleblowing management systems. Clause-by-clause, with the software/operator boundary stated. ISO 37002 is a guidelines standard --- no organization can be certified against it.
- [ISO/IEC 27001:2022 Annex A control map](https://ethicsportal.eu/iso-27001/): Self-assessment of EthicsPortal against the 93 controls in ISO/IEC 27001:2022 Annex A. Status and evidence for every control. Not an accredited certification.
- [Pricing](https://ethicsportal.eu/pricing/): Simple, transparent pricing for EthicsPortal. One plan, everything included. No per-employee fees.
- [Privacy policy](https://ethicsportal.eu/privacy/): Privacy policy for EthicsPortal — how we collect, use, store, and protect your personal information.
- [Refund policy](https://ethicsportal.eu/refunds/): 30-day money-back guarantee for new EthicsPortal subscriptions.
- [Security](https://ethicsportal.eu/security/): Technical security measures in EthicsPortal, including encryption, anonymity, access control, audit logging, and infrastructure details for compliance review.
- [Service level agreement](https://ethicsportal.eu/sla/): Monthly availability target for EthicsPortal's reporter and operator portals, how it is measured, and what is excluded.
- [Subprocessors](https://ethicsportal.eu/subprocessors/): Third-party services that process personal data on behalf of EthicsPortal. Published per GDPR Article 28.
- [Terms of service](https://ethicsportal.eu/terms/): Terms of service for EthicsPortal — the secure whistleblower reporting platform for EU compliance.
- [Trust](https://ethicsportal.eu/trust/): Contracting party, data residency, certifications, and procurement materials for EthicsPortal.
- [Whistleblower compliance, operational in 10 minutes](https://ethicsportal.eu/firehose/): EU Directive 2019/1937 requires every company with 50+ employees to operate a confidential, deadline-tracked whistleblower reporting channel. EthicsPortal deploys in under 10 minutes for €41.67/month billed annually.