# Impactly Whistleblowing — Whistleblowing Portals

Impactly Whistleblowing by Impactly ApS holds a panel rating of 0/5 from 6 AI judges (category median 2/5), as of 2026-10-21. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: Impactly ApS (https://www.impactly.com)
- Category: [Whistleblowing Portals](https://whats-best.ai/software/whistleblowing.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/whistleblowing/impactly-whistleblowing
- Alternatives: https://whats-best.ai/software/whistleblowing/impactly-whistleblowing/alternatives ([markdown](https://whats-best.ai/software/whistleblowing/impactly-whistleblowing/alternatives.md))
- Data as of: 2026-10-21 · evaluated 2026-10-21 · oldest source captured 2026-10-20

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Impactly ApS
- Headquarters: Not stated on the vendor’s pages as of 20 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 20 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 20 Oct 2026

## The panel's verdict

Impactly ApS is listed under Whistleblowing Portals, but its single captured page (impactly.com, captured 20 Oct 2026) markets a different product: "the first operating system for family offices and foundations", built around data aggregation, collaboration and portfolio sharing. Judged against whistleblowing criteria, scores sit low throughout. Reporting channels, compliance alignment and pricing transparency topped out at 0; case management and multi-entity scale reached a maximum of 1; only security assurance and sovereignty peaked at 2, resting on one published sentence — "Maximum Security with encrypted, two-stage authentication" — and the vendor's Danish company form. Those same two criteria show the widest spread: some judges gave partial credit to the Danish incorporation and the authentication claim, others declined, though the flagged splits recorded none of substance. The aligned findings are stark — we found no public information on a reporter-facing submission route, no public information referencing EU Directive 2019/1937 or any national transposition, no case-handling detail, and no hosting, data processing agreement or subprocessor information. Pricing appears only as Enterprise-Level Support with white-glove setup.

**Speaks for it:**
- Published security claim of encrypted, two-stage authentication, which lifted security assurance to its maximum of 2
- Danish-incorporated vendor (Impactly ApS), the only jurisdictional signal, credited in sovereignty scores up to 2
- Tailored permissions by role — staff, family members and advisors — described on the captured page
- Enterprise-Level Support with white-glove setup, issue escalation and feature updates, as published
- Claimed fully customizable platform, accessible via any device

**Held against it:**
- The captured page markets an operating system for family offices and foundations, not evidenced whistleblowing functionality
- We found no public information on any reporter-facing submission route — no form, anonymous dialog, mailbox or hotline
- No public information referencing EU Directive 2019/1937 or any national transposition appears in the captured material
- Security rests on one published sentence, with no certificate, penetration test or statement on IP and metadata logging on record
- No sovereignty attributes are on record — no hosting location, data processing agreement or subprocessor list published

**Best for:**
- You run a family office or foundation and want the aggregation, sharing and analytics platform this captured page markets
- You already operate a separate whistleblowing channel and would adopt Impactly only for its family-office functions
- You treat the vendor's Danish company form (Impactly ApS) as your jurisdictional signal and will verify hosting, processing agreements and subprocessors directly
- You accept the published two-stage authentication claim for login security and plan to demand certificates and penetration tests during procurement

**Avoid if:**
- You are obligated under EU Directive 2019/1937 or a national transposition — compliance alignment topped out at 0 and the captured material names no legal duty
- You need an evidenced reporter intake — reporting channels scored 0 across the table and the captured page addresses family offices and foundations
- You must show a regulator audited security — ask the vendor: the public pages we read do not show it
- You need documented hosting, a data processing agreement and a subprocessor list before signing — the record carries no sovereignty attributes beyond Impactly ApS's Danish company form

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Compliance Officer | The Reporter's Advocate | The SME Operator | The Group Counsel | The Security Auditor | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Reporting channels & reporter experience | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 |
| Case management & deadline discipline | 0/5 | 0/5 | 0.5/5 | 0/5 | 0/5 | 0/5 |
| Legal compliance alignment | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 | 0/5 |
| Security & anonymity assurance | 0.5/5 | 0.5/5 | 0.5/5 | 1/5 | 0.5/5 | 0/5 |
| Group & multi-entity capability | 0/5 | 0/5 | 0.5/5 | 0/5 | 0/5 | 0/5 |
| European sovereignty | 0/5 | 0.5/5 | 1/5 | 1/5 | 0.5/5 | 0.5/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **0/5** | **0/5** | **0.5/5** | **0/5** | **0.5/5** | **0/5** |

### The judges

- **The Compliance Officer** (v1.0): Runs the internal reporting office of a 600-employee company and answers for every missed statutory clock. Optimizes for case discipline: automated acknowledgment and feedback deadlines, role separation, documentation that survives a regulator. Rejects inbox-with-a-form products that make the deadlines her problem.
- **The Reporter's Advocate** (v1.0): Judges from the frightened side of the form. Optimizes for anonymity that survives contact, a two-way dialog without an account, languages the workforce actually speaks, and channels that work on a night-shift phone. Rejects login walls, app installs and anything that makes reporting feel like a deposition.
- **The SME Operator** (v1.2): Runs a 60-employee company that the law obligated, not convinced. Optimizes for compliance set up in an afternoon at a price the year-end review will not question, with the legal duties handled by the product. Rejects per-report fees, setup charges and anything that needs a compliance department to operate.
- **The Group Counsel** (v1.0): Rolls one system out to 25 subsidiaries in a dozen countries. Optimizes for per-entity channels with real access separation, per-country legal rule sets, external ombudsman roles and group reporting that respects entity boundaries. Rejects one-channel products multiplied by twenty-five contracts.
- **The Security Auditor** (v1.0): Pentests the anonymity promise for a living. Optimizes for evidenced security: current certificates with visible scope, published pentests, documented end-to-end encryption, metadata minimization, and hosting outside hostile jurisdictional reach. Rejects adjective security and "military-grade" anything.
- **The Skeptic** (v1.2): Assumes "audit-proof" and "100% anonymous" are marketing until the evidence says otherwise. Hunts certification claims without certificates, anonymity claims next to analytics scripts, per-report pricing traps and legal-update promises with no named lawyer. Exists to keep the rest of the bench honest.

## European sovereignty — proven facts

No sovereignty finding yet.

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Security authentication: Encrypted, two-stage authentication [S1]

**Integrations**
- Data feeds: yes [S1]

**Product**
- Analytics reporting: yes [S1]
- Collaboration sharing: yes [S1]
- Customization: yes [S1]
- Positioning: Operating system for family offices and foundations for data aggregation, productivity, and collaboration in one place [S1]
- Role permissions: yes [S1]
- Scope of activities: Public equities, private investments, grants, loans, projects, pipelines, projections [S1]
- Target users: Family offices and foundations [S1]

**Support**
- Enterprise support: yes [S1]
- White glove setup: yes [S1]

## Questions

### Is Impactly Whistleblowing European?

Not determined: the vendor’s pages as captured do not say where Impactly Whistleblowing is based.

### Where does Impactly Whistleblowing store data?

Not stated on the vendor’s pages as of 20 Oct 2026.

### Does Impactly Whistleblowing have a free plan?

Not stated on the vendor’s pages as of 20 Oct 2026.

### What are the best alternatives to Impactly Whistleblowing?

As of 21 Oct 2026, the panel rates [preeco | hinweisgeberschutz (3.5/5)](https://whats-best.ai/software/whistleblowing/preeco-hinweisgeber), [EQS Integrity Line (3.5/5)](https://whats-best.ai/software/whistleblowing/eqs-integrity-line) and [Safecall (3.5/5)](https://whats-best.ai/software/whistleblowing/safecall) highest among the other 36 Whistleblowing Portals products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [preeco | hinweisgeberschutz](https://whats-best.ai/software/whistleblowing/preeco-hinweisgeber) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Impactly Whistleblowing alternatives](https://whats-best.ai/software/whistleblowing/impactly-whistleblowing/alternatives).

## What this page leaves out

- We found no public information on pricing on the pages we read (impactly.com). If the vendor publishes it somewhere else, send us the page.

## Sources

- [S1] Vendor page: https://www.impactly.com (checked 2026-10-20)

---

Cite as: whats-best.ai, "Impactly Whistleblowing — Whistleblowing Portals", AI panel analysis, as of 2026-10-21. https://whats-best.ai/software/whistleblowing/impactly-whistleblowing

Corrections: https://whats-best.ai/correct/978?target=page