Free tool

Generate your whistleblowing policy

Fill in your company details and download a ready-to-use written policy — written for your own country's whistleblowing law in Germany, France, Spain, Italy, Poland, the Netherlands, Ireland and the UK, and to the EU Directive everywhere else. Instant PDF, no email required — every field below is either quick to answer or safe to leave blank.

Countries with their own version of the policy (such as the Netherlands) come in their own language and English. Give your works council or staff representatives the version in your country's language.

The web address your people use to submit a report. Leave blank to write it in by hand.

Who receives and follows up reports, and how to reach them. Your policy must name them — leave blank to write it in by hand.

Only if someone other than the designated person or department investigates and follows up reports. Leave blank if it's the same.

Someone staff can consult in confidence before or after reporting, such as a confidential adviser (vertrouwenspersoon in the Netherlands).

The role responsible for keeping this policy up to date.

Who a report should go to if it concerns your designated handler themselves.

Just want to see an example first? Read the generic template

What your whistleblowing policy will contain

One document, built around the sections a real internal reporting procedure needs — not a generic legal boilerplate with your logo dropped on top:

Scope & definitions
Who's covered — employees, contractors, volunteers, job applicants — and what counts as a reportable concern.
How to report, including anonymously
Your reporting channel address, plus the option to stay anonymous throughout.
Confidentiality & data protection
Who can see a report, and how it's handled under data protection law.
The two statutory clocks
Acknowledgement within 7 days, feedback within 3 months — spelled out, not left implicit.
Who handles a report
Your designated contact, plus an escalation route if a report concerns them directly.
Investigating a report
How a report is assessed and followed up, proportionate to what's been raised.
Protection from retaliation
What counts as retaliation, and what happens if someone reports it.
Reporting externally & record-keeping
The right to go straight to a regulator, and how long records are kept.

Why a generated whistleblowing policy is enough

Article 9(1) of the Directive sets out exactly what an internal reporting procedure has to cover — how to report, who receives reports, the acknowledgement and feedback deadlines, and how confidentiality is maintained. A policy document that covers those elements, names your actual reporting channel, and identifies who handles a report is a complete, defensible procedure — the law asks for substance, not a particular law firm's letterhead.

That's why this generator exists: answer a few questions and you get a document that covers every element Article 9(1) requires, personalised with your company name and your channel address, ready to print and hand to your people today. You don't need to commission bespoke legal drafting for a requirement this standardised — though it's still worth having whatever you generate reviewed by your own adviser before you rely on it.

FAQ

Before you generate one

Is the policy really free, with no account or email? +

Yes. Fill in the form, and the PDF downloads immediately — no account, no email capture, nothing to sign up for.

Which jurisdictions does it cover? +

Every EU member state plus the UK. Germany, France, Spain, Italy, Poland, the Netherlands, Ireland and the UK each get a document written for their own law — in that country's language and in English — covering what that law requires beyond the Directive. Every other EU country gets a document grounded in Directive (EU) 2019/1937 itself. The UK version is worded around PIDA rather than a compliance mandate, because UK law sets none.

Can we edit it after downloading? +

Yes — it's a standard PDF, not a locked template. Most companies have their own adviser or HR team review and adjust it before publishing it to staff.

What if we'd rather see the document before filling in the form? +

Read the generic template first — it's the Directive-based document with the placeholders left blank. The one you generate fills them in and, in the eight countries above, is written for that country's own law instead.

What is Provoxis?

This free generator is part of Provoxis — whistleblowing software you can turn into a live reporting channel in minutes: a branded portal for your people, and a case-management dashboard with the acknowledgement and feedback clocks tracked automatically for your team.

Find out more