Security/trust page — EQS Integrity Line

Cited by

Facts read from this source

• ISO 27001 Report an error

  “Both EQS Group and our data centres are certified according to ISO/IEC 27001, which guarantees high security standards.”

• Isae3000 Report an error

  “EQS Integrity Line has been audited by an external audit conducted by PwC according to ISAE 3000 Type I and II, which upholds high standards in terms of processing and protection of personal data.”

• GDPR Report an error

  “The EQS Integrity Line whistleblowing hotline ensures that your organisation fully complies with European data protection requirements and the EU Whistleblowing Directive (GDPR compliant).”

• Accessibility Report an error

  “The EQS Integrity Line reporting channel complies with the Web Content Accessibility Guidelines (WCAG bronze level certification).”

• Encryption Report an error

  “Your report and case data are encrypted at all times. We use the latest encryption algorithms and SSL certificates, meaning that EQS Group can at no time access your or your whistleblowers’ data.”

• Anonymity Report an error

  “In addition to complete anonymity for the whistleblower, EQS Integrity Line enables an anonymous dialogue between the whistleblower, case handler and external experts. The system does not employ any tracking mechanisms on users.”

• Iso14001 Report an error

  “Our data centre in Munich East is ISO 14001 certified and relies 100% on green electricity from renewable sources (sun, wind, water and biogas) for its operation.”

• Energy efficiency Report an error

  “The use of CECC (Combined Energy and Cooling Cells) has also helped to reduce energy consumption for cooling and operation by 70%.”

• Firewall Report an error

  “We use a web application firewall in addition to our standard firewall. If the firewall detects suspicious or dangerous patterns, it blocks further communication.”

• Owasp Report an error

  “Threat analysis in accordance with OWASP Top 10 vulnerabilities”

• Cloud star registry Report an error

  “This is why we adhere to the STAR Registry program of the Cloud Security Alliance for EQS Integrity Line.”

• Backup Report an error

  “Additional security is guaranteed through daily backups which are stored for several years in geographically distributed data centres.”

• Two factor auth Report an error

  “This is why EQS Group has included an additional security level to the EQS Integrity Line whistleblowing hotline – login with two-factor authentication as standard.”

• SSO Report an error

  “OpenID Connect enables simple, state-of-the-art authentication and authorisation of caseworkers and administrators.”

• Authorization concepts Report an error

  “Dual control can also be configured to ensure better monitoring of critical functions.”

• Custom password policies Report an error

  “password settings and other rules can be customised to meet your individual requirements.”

• Entity Report an error

  “EQS Group GmbH Karlstr. 47 80333 München”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Compliance Officer Reporting channels & reporter experience
• The Compliance Officer Case management & deadline discipline
• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer Group & multi-entity capability
• The Compliance Officer European sovereignty
• The Compliance Officer Reporting channels & reporter experience
• The Compliance Officer Case management & deadline discipline
• The Compliance Officer Legal compliance alignment
• The Compliance Officer Security & anonymity assurance
• The Compliance Officer Group & multi-entity capability
• The Compliance Officer European sovereignty
• The Group Counsel Reporting channels & reporter experience
• The Group Counsel Case management & deadline discipline
• The Group Counsel Legal compliance alignment
• The Group Counsel Security & anonymity assurance
• The Group Counsel Group & multi-entity capability
• The Group Counsel European sovereignty
• The Group Counsel Reporting channels & reporter experience
• The Group Counsel Case management & deadline discipline
• The Group Counsel Legal compliance alignment
• The Group Counsel Security & anonymity assurance
• The Group Counsel Group & multi-entity capability
• The Group Counsel European sovereignty
• The Reporter's Advocate Pricing transparency
• The Reporter's Advocate Reporting channels & reporter experience
• The Reporter's Advocate Case management & deadline discipline
• The Reporter's Advocate Legal compliance alignment
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate Group & multi-entity capability
• The Reporter's Advocate European sovereignty
• The Reporter's Advocate Reporting channels & reporter experience
• The Reporter's Advocate Case management & deadline discipline
• The Reporter's Advocate Legal compliance alignment
• The Reporter's Advocate Security & anonymity assurance
• The Reporter's Advocate Group & multi-entity capability
• The Reporter's Advocate European sovereignty
• The Security Auditor Reporting channels & reporter experience
• The Security Auditor Case management & deadline discipline
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor Group & multi-entity capability
• The Security Auditor European sovereignty
• The Security Auditor Reporting channels & reporter experience
• The Security Auditor Case management & deadline discipline
• The Security Auditor Legal compliance alignment
• The Security Auditor Security & anonymity assurance
• The Security Auditor Group & multi-entity capability
• The Security Auditor European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic Case management & deadline discipline
• The Skeptic Legal compliance alignment
• The Skeptic Security & anonymity assurance
• The Skeptic Group & multi-entity capability
• The Skeptic European sovereignty
• The Skeptic Reporting channels & reporter experience
• The Skeptic Case management & deadline discipline
• The Skeptic Legal compliance alignment
• The Skeptic Security & anonymity assurance
• The Skeptic Group & multi-entity capability
• The Skeptic European sovereignty
• The SME Operator Reporting channels & reporter experience
• The SME Operator Case management & deadline discipline
• The SME Operator Legal compliance alignment
• The SME Operator Security & anonymity assurance
• The SME Operator Group & multi-entity capability
• The SME Operator European sovereignty
• The SME Operator Reporting channels & reporter experience
• The SME Operator Case management & deadline discipline
• The SME Operator Legal compliance alignment
• The SME Operator Security & anonymity assurance
• The SME Operator Group & multi-entity capability
• The SME Operator European sovereignty