Security page — Whistleblower Software by Formalize

Cited by

Facts read from this source

• ISO 27001 Report an error

  “ISO/IEC 27001:2022 Carried out on 11th of November 2024 by Intertek.”

• Isae3000 Report an error

  “ISAE 3000 Type 2 Carried out on 1st June 2023 by Beierholm.”

• Isae3000 scope Report an error

  “The ISAE 3000 Type 2 Audit is done annually and is built around the ISO 27001 standard.”

• Pentest 2024 Report an error

  “Penetration test Carried out June 2024 by Truesec A/S.”

• Pentest 2023 Report an error

  “Penetration test Last performed May 2023 by TRUESEC”

• Ens Report an error

  “ENS Certification - level: High Carried out on 3rd May 2023 by BDO.”

• Wcag Report an error

  “WCAG 2.1 AA Silver Carried out on 27th September 2023 by TÜV TRUST IT.”

• GDPR audit Report an error

  “We carry out regular external GDPR audits.”

• Whistleblowing laws Report an error

  “EU Whistleblower Protection Directive 2019/19378 US SOX Act Section 301 on Corporate Responsibility U.K. FCA German Corporate Governance Code French Loi Sapin II”

• Provider Report an error

  “Data is securely hosted with ISO 27001 certified AWS.”

• Location Report an error

  “All data and backups are stored with AWS in Frankfurt. Backups are stored in different availability zones to ensure data availability.”

• Certifications Report an error

  “The data is stored on servers from a facility that is ISO 27001, ISO 27017, ISO 27018 and SOC 1, SOC 2 & SOC 3 -certified.”

• E2ee Report an error

  “Whistleblower Software by Formalize uses End-to-End Encryption (E2EE) to ensure a high standard of data privacy in communications through our platform.”

• MFA Report an error

  “This requires users to verify by, for example, SMS before they can proceed into the system.”

• Encryption transit rest Report an error

  “Data sent (in transit), is encrypted using TLS and data stored (in rest) is also encrypted.”

• Anonymous reporting Report an error

  “Whistleblower Software by Formalize is capable of allowing the whistleblower to report anonymously, but also for screeners and case-handlers to anonymize or pseudonymize cases in case multiple case-handlers are involved.”

• Languages Report an error

  “Our system supports 80+ languages and we give support in 12 of those.”

• Entity Report an error

  “© 2026 Whistleblower Software ApS.”

• Access control Report an error

  “At the case level, access can be given to individuals, so it is ensured that no unauthorized persons (created in the system) can access cases.”

Scores citing this record

• The Compliance Officer European sovereignty
• The Compliance Officer Reporting channels & reporter experience
• The Compliance Officer Case management & deadline discipline
• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer Group & multi-entity capability
• The Compliance Officer European sovereignty
• The Compliance Officer Reporting channels & reporter experience
• The Compliance Officer Case management & deadline discipline
• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer Group & multi-entity capability
• The Compliance Officer European sovereignty
• The Compliance Officer Reporting channels & reporter experience
• The Compliance Officer Case management & deadline discipline
• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer Group & multi-entity capability
• The Compliance Officer European sovereignty
• The Group Counsel European sovereignty
• The Group Counsel Reporting channels & reporter experience
• The Group Counsel Case management & deadline discipline
• The Group Counsel Legal compliance alignment
• The Group Counsel Security & anonymity assurance
• The Group Counsel Group & multi-entity capability
• The Group Counsel European sovereignty
• The Group Counsel Reporting channels & reporter experience
• The Group Counsel Case management & deadline discipline
• The Group Counsel Legal compliance alignment
• The Group Counsel Security & anonymity assurance
• The Group Counsel Group & multi-entity capability
• The Group Counsel European sovereignty
• The Group Counsel Reporting channels & reporter experience
• The Group Counsel Case management & deadline discipline
• The Group Counsel Legal compliance alignment
• The Group Counsel Security & anonymity assurance
• The Group Counsel Group & multi-entity capability
• The Group Counsel European sovereignty
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Reporting channels & reporter experience
• The Reporter's Advocate Case management & deadline discipline
• The Reporter's Advocate Legal compliance alignment
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate Group & multi-entity capability
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Reporting channels & reporter experience
• The Reporter's Advocate Case management & deadline discipline
• The Reporter's Advocate Legal compliance alignment
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate Group & multi-entity capability
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Reporting channels & reporter experience
• The Reporter's Advocate Case management & deadline discipline
• The Reporter's Advocate Legal compliance alignment
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate Group & multi-entity capability
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Reporting channels & reporter experience
• The Reporter's Advocate Case management & deadline discipline
• The Reporter's Advocate Legal compliance alignment
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate Group & multi-entity capability
• The Reporter's Advocate European sovereignty
• The Security Auditor Security & anonymity assurance
• The Security Auditor European sovereignty
• The Security Auditor Reporting channels & reporter experience
• The Security Auditor Case management & deadline discipline
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor Group & multi-entity capability
• The Security Auditor European sovereignty
• The Security Auditor Reporting channels & reporter experience
• The Security Auditor Case management & deadline discipline
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor Group & multi-entity capability
• The Security Auditor European sovereignty
• The Security Auditor Reporting channels & reporter experience
• The Security Auditor Case management & deadline discipline
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor Group & multi-entity capability
• The Security Auditor European sovereignty
• The Skeptic Security & anonymity assurance
• The Skeptic European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic Case management & deadline discipline
• The Skeptic Legal compliance alignment
• The Skeptic Security & anonymity assurance
• The Skeptic Group & multi-entity capability
• The Skeptic European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic Case management & deadline discipline
• The Skeptic Legal compliance alignment
• The Skeptic Security & anonymity assurance
• The Skeptic Group & multi-entity capability
• The Skeptic European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic Case management & deadline discipline
• The Skeptic Legal compliance alignment
• The Skeptic Security & anonymity assurance
• The Skeptic Group & multi-entity capability
• The Skeptic European sovereignty
• The SME Operator European sovereignty
• The SME Operator Reporting channels & reporter experience
• The SME Operator Case management & deadline discipline
• The SME Operator Legal compliance alignment
• The SME Operator Security & anonymity assurance
• The SME Operator Group & multi-entity capability
• The SME Operator European sovereignty
• The SME Operator Reporting channels & reporter experience
• The SME Operator Case management & deadline discipline
• The SME Operator Legal compliance alignment
• The SME Operator Security & anonymity assurance
• The SME Operator Group & multi-entity capability
• The SME Operator European sovereignty
• The SME Operator Reporting channels & reporter experience
• The SME Operator Case management & deadline discipline
• The SME Operator Legal compliance alignment
• The SME Operator Security & anonymity assurance
• The SME Operator Group & multi-entity capability
• The SME Operator European sovereignty