A dedicated reporting channel for companies big enough to be obligated by the EU Whistleblowing Directive, and too small for an enterprise compliance suite. Anonymous text and voice reporting, case management and automatic deadline tracking — on your own branding, from one flat price.
No setup fee · 30-day free trial · Cancel anytime
The EU Whistleblowing Directive (2019/1937) requires every organisation with 50 or more workers to run a secure internal reporting channel, with a designated person to follow up each report, a 7-day acknowledgement and a 3-month feedback deadline.
Every EU country has written this into national law, with fines — up to €50,000 in Germany — and, in several, personal liability for senior managers. In the UK, banks, insurers and larger investment firms must run whistleblowing arrangements under FCA and PRA rules, and any employer can face an uncapped tribunal award for victimising a whistleblower.
Most companies use a shared inbox or an online form, and only find the gaps once a report has landed: unclear ownership, missed deadlines, no record that would hold up if the case were challenged. By then, you're not fixing a process. You're defending one.
Provoxis closes those gaps before the next report arrives: a dedicated reporting channel you stand up in minutes, not months, that helps you meet the Directive's requirements out of the box, without an enterprise suite's price tag.
The law limits who may know a reporter's identity to the people handling their report. A shared inbox is open to IT, admins and holiday cover, and every forward widens the circle. In Provoxis, only your designated team sees reports, and reporters can stay anonymous.
Job applicants, former employees, contractors, volunteers — the law protects them all. An intranet form behind a company login shuts them out. Your Provoxis portal is a public address anyone can use, with no account or email address.
A reporter can go straight to a regulator and still be protected. If an inbox lets the 7-day acknowledgement slip or a report sit unanswered, the concern goes over your head. Provoxis acknowledges every report on arrival and tracks the 3-month feedback deadline for you.
Once a reporter shows they were treated worse after raising a concern, the law presumes retaliation — and it's on you to prove otherwise. Scattered emails don't show why decisions were made. Provoxis keeps a time-stamped audit trail of every action, with retaliation flags and legal hold.
Provoxis builds the Directive's obligations into the workflow, so meeting them is the default: every report is acknowledged the moment it arrives, the 3-month feedback deadline is tracked per case, and every action lands in an audit trail that holds up if a case is ever challenged.
Anyone can open your branded portal — on your own subdomain, nothing to install — and submit a report anonymously, in writing or as a recorded voice message. No account, no email address required.
A private case reference — not a name — carries the whole conversation from here. Reporters choose whether to identify themselves; either way, they can return anytime to check progress, answer questions, and see your response.
Your case handlers triage the report, ask follow-up questions through the same anonymous thread, and record every action — time-stamped in an audit log you can export, with a legal hold that pauses deletion the moment a case becomes an investigation.
Provoxis meets the 7-day acknowledgement automatically at submission, and tracks the 3-month feedback deadline per case — nudging handlers before that clock runs out.
Branding, MFA and team setup, then an anonymous report followed through triage, a retaliation flag, a legal hold and the audit export.
No compliance suite, no setup fee, no consultant, no procurement cycle. Your branded channel takes reports from the moment you sign up — and a guided checklist takes you from there to fully set up.
Answer a couple of quick questions and download a professionally written policy document, personalised with your company name and reporting channel — and written for your own country's law in Germany, France, Spain, Italy, Poland, the Netherlands, Ireland and the UK. Instant, free, no account or email required. Once you sign up, Provoxis goes further: the procedure adopted in the product, with a dated record as evidence.
Everything included — no per-seat fees, no setup fee, no sales call.
What the law asks of you, how to decide whether you need a channel, and how to run a case properly once you have one.
Whether you need a whistleblowing channel depends on your headcount and where you're based. Start here — and see what's at stake if you don't.
What Directive (EU) 2019/1937 actually covers — who it protects, what you can report, how reporting works, and how each member state transposed it.
Can an email inbox, a Google Form, a phone hotline or a GRC module be your whistleblowing channel? What each can and can't do under the law, compared with a dedicated platform.
Three more topics cover setting up, running a case and in-depth legal analysis.
Browse the knowledge baseIf you're an organisation in the EU with 50 or more workers: yes. The EU Whistleblowing Directive makes an internal reporting channel mandatory, and your national law backs it with penalties. In the UK there's no blanket rule, but banks, insurers and larger investment firms must have one under the FCA's rules, listed companies report on theirs, and any employer risks an uncapped tribunal award for retaliating against someone who speaks up. If you're near or over 50 staff, you almost certainly want a channel — and Provoxis is one you can start today.
In the EU you're in breach of the law that transposes the Directive, which carries fines and, in some countries, personal liability for managers. Just as important: a worker with no safe way to raise something internally is far more likely to take it straight to a regulator or a journalist — and is protected by law when they do. A channel keeps concerns in-house, where you hear them first and can act.
Yes. Reporters never need to provide a name or email. A private case reference — not their identity — lets them follow up and continue a two-way conversation with your case handlers.
Yes. Reporters can record a voice message directly in the browser instead of typing. The recording is anonymised — pitch and tone shifted — before it's stored, and that anonymised audio becomes part of the case record. The original, unaltered recording is never kept.
The Directive requires you to acknowledge a report within 7 days and give the reporter feedback within 3 months. Provoxis meets the 7-day clock automatically the moment a report is submitted — reporters get their case reference immediately, so there's nothing for a handler to remember. The 3-month feedback clock is tracked per case, with reminders to handlers before it lapses.
You can be live in minutes — your branded portal takes reports from the moment you sign up. A guided checklist then walks you through naming your handlers, adopting your reporting procedure, adding your branding and telling your staff, and unlocks your Reporting Channel Certificate at the end.
In the EU — fully compliant with both EU and UK GDPR. Your reports, case notes, evidence and audio stay in that region's infrastructure only — never processed or stored anywhere else. Everything is encrypted at rest and in transit, and handled in line with ISO 27001-aligned practices. You can export or delete case data at any time, unless a legal hold is active on that case.
Yes — every new account starts with a 30-day free trial. We ask for a card to start it, but nothing is charged until the trial ends, and you can cancel anytime before then from your billing settings.
Set up your branded whistleblowing channel in minutes — everything included, €119 a month.