Whistleblowing software for small businesses
If you employ 50 or more people in the EU, the Whistleblowing Directive already applies to you — and the enterprise compliance suites built for 10,000-person companies are the wrong tool. Provoxis is sized for you: one price, self-serve, live in minutes.
Why enterprise whistleblowing software doesn't fit a smaller company
Most whistleblowing platforms on the market were built for the buyer at the other end of the size range — a group compliance function managing dozens of subsidiaries, a multi-year procurement cycle, a dedicated GRC budget line. That shows up in how they're sold: a quote instead of a price, an implementation project instead of a signup form, a per-entity or per-seat cost that punishes you for growing.
None of that reflects what a small or mid-sized company actually needs. You don't need a platform that also handles ESG reporting, supplier risk and policy management — you need the specific things Directive (EU) 2019/1937 requires: a confidential channel, the acknowledgement and feedback clocks, a retaliation flag, and a record you can point to. Provoxis is built to be exactly that and nothing more — one flat, published price, a self-serve signup, and a live channel in minutes rather than a sales cycle measured in months.
The 50-employee threshold, in plain terms
Article 8(3) of the Directive sets the line at 50 or more workers — cross it and running an internal reporting channel isn't optional. It's assessed per legal entity, not across a corporate group: a 60-person subsidiary is obligated even if its parent has none, and a 30-person subsidiary isn't pulled over the line by a large parent.
Both compliance deadlines have already passed — 17 December 2021 for companies over 250 workers, 17 December 2023 for the 50-to-249 band — so if you're over the line today, the obligation already applies now, not from some future date. Article 8(6) does give smaller employers in that band one real break: you're allowed to share the resources for receiving and investigating reports, which is closer to what a tool like Provoxis is for than a standalone compliance department.
The knowledge base walks through how the 50-employee count works — who to include, when it starts to bite, and what is at stake if you are over it and do nothing.
What Provoxis actually is
Provoxis is a whistleblowing platform: a branded reporting portal your people use to raise a concern, and a case-management dashboard your team uses to handle it — sized and priced for a company like yours, not retrofitted from an enterprise suite. Here's what's built in:
One flat price
No per-seat fees, no modules to add, no annual negotiation. The same price whether you have 50 employees or 250 — so the cost never punishes you for growing.
Live in minutes
Sign up, pick a subdomain, upload your logo, invite your handlers. No implementation project, no consultant, no IT ticket.
No legal team required
The channel is compliant out of the box — automatic acknowledgement, tracked feedback deadlines, tiered retention — and a ready-made policy comes with it.
Nothing you don't need
Anonymous intake, case management, an audit trail and a retaliation flag. The four things the Directive actually asks for, without a GRC platform wrapped around them.
From signup and setup to a resolved case, end to end
Branding, MFA and team setup, then an anonymous report followed through triage, a retaliation flag, a legal hold and the audit export.
Questions from smaller teams
Is Provoxis actually built for a company our size, not enterprise? +
Yes — that's the whole design brief. One flat price whether you have 50 employees or 250, a self-serve signup instead of a sales process, and only the features Directive (EU) 2019/1937 actually requires — no GRC suite bolted on.
Do we need a compliance team to run it? +
No. The 7-day acknowledgement is automatic, the 3-month feedback clock is tracked per case with reminders, and a ready-made policy comes with your account — a single HR or ops person can run the whole channel.
We're not sure we're over the 50-employee threshold — does this still apply to us? +
Check the threshold guide above — it's worth confirming rather than assuming either way, since it's assessed per legal entity and a few regulated sectors are obligated regardless of headcount.
Can we switch from a spreadsheet or shared inbox we're using today? +
Yes — sign up, brand your portal, invite your handlers, and share the new address with your people. There's no migration required because there's no existing system to migrate from; most teams treat day one as the cutover.
Get started today
One flat €119 a month — no per-seat maths, no sales call, no setup fee. Sign up, brand your portal, invite your handlers, and you can be live in minutes.