Whistleblowing scheme for Danish organisations
Updated
WhistleSafe is an internal whistleblowing scheme for Danish organisations, made by WhistleSafe ApS, a Danish social enterprise: its profits go to children’s and young people’s digital safety. This page is a short summary in English; the rest of the site is in Danish.
What it is
A whistleblowing scheme as a web service. People report through your organisation’s own link or QR code, without a name, an e-mail address or an account, and follow their report with a report ID. You handle the cases in WhistleSafe.
- The act’s two deadlines, 7 days and 3 months, are counted on every case, and you are told before one runs out.
- You write with the person who reported in the case itself, without knowing their name, and keep internal notes that they don’t see.
- A manager attached to a department sees only that department’s cases, and 14 permissions can be given one by one.
- A ready-made whistleblowing policy from day one, or upload your own, and a poster with a QR code for every entrance.
- Export a case as a ZIP file, with the case and the messages as PDF and the attachments beside them, or every case as CSV.
- Two-factor login with an authenticator app and recovery codes.
Who it is for
- Employers with 50 or more employees. The Danish Whistleblower Protection Act requires them to have an internal whistleblowing scheme, private and public employers alike (§ 9). The person who reports must have an acknowledgement within 7 days and feedback within 3 months of it (§ 12).
- Smaller organisations that want a scheme of their own accord.
- Schools and associations. SafeSpace is the same scheme on the same platform, at the same price, with an entrance of their own for pupils, members and volunteers next to the staff’s.
Price
- DKK 2,490 a year or DKK 249 a month, excluding VAT, per organisation, whatever the number of employees. Prices are in Danish kroner; at the euro’s ERM II central rate of DKK 7.46038 that is approximately EUR 334 a year or EUR 33 a month (October 2026).
- The yearly plan runs 12 months and costs 2 months less. The monthly plan has no lock-in and can be cancelled at the end of any month.
- No set-up fee. The first 30 days are free.
Where the data is
- Hosted in Microsoft Azure in the EU (North Europe, Ireland), within Microsoft’s EU Data Boundary.
- Encrypted in transit (TLS 1.2 or newer, and HSTS) and at rest (Azure).
- Sub-processors: Microsoft Azure, Azure Application Insights, Microsoft Graph/Exchange Online and Stripe. Stripe receives billing details only, never reports or cases, and transfers them to the US under the EU-U.S. Data Privacy Framework.
- You fill in and accept the data processing agreement in the app.
- Microsoft Azure, which WhistleSafe runs on, is ISO/IEC 27001 certified. The certificate is Microsoft’s, not ours.
The details, in Danish: security and data protection and sub-processors.
How to start
- Sign up and accept the data processing agreement.
- Download the policy and the poster with the QR code. Setting up takes under 5 minutes.
- Give your staff the link or put up the poster. They can report from then on.
Prices and terms in Danish: /priser and /vilkaar.
Contact
- E-mail: kontakt@whistlesafe.dk
- Phone: +45 31 70 77 73
- WhistleSafe ApS, Ndr Dragørvej 151, 2791 Dragør, Denmark. CVR 44412667, VAT number DK44412667.
Frequently asked questions
Is the app available in English?
Yes. The app is available in 8 languages: Danish, English, German, French, Spanish, Italian, Norwegian and Swedish. It works in the browser on a phone, a tablet or a computer, and there is no app to install.
Does the price depend on the number of employees?
No. It is one price per organisation, whatever the number of employees, members or pupils.
Can the people who report stay anonymous?
They need no name, e-mail address or account to report, and IP addresses are removed from logs and telemetry. But what someone writes can still give them away, so they should use a device that others don't share.