The ethics hotline the EU requires
Legally required since Dec 2023 for every EU organization >50 employees. Secure internal channel, anonymous, with automatic deadlines + anti-retaliation — aligned with Sapin II + Waserman + Directive 2019/1937.
Why a real reporting channel
EU Directive 2019/1937 demands more than an email address: anonymity, deadlines and whistleblower protection.
A legal duty since 2023
Every EU organization above 50 employees must run a secure internal channel — failing to exposes you to sanctions and voids any retaliation.
A generic mailbox won't do
A plain email guarantees neither the anonymity, the 7-day acknowledgement, nor the anti-retaliation protection the directive requires.
Deadlines can't be tracked by hand
7 days to acknowledge, 3 months to respond: without automation, a forgotten report becomes a legal risk.
Dedicated tools are expensive
OneTrust Convercent, NAVEX EthicsPoint charge €30-80K/year for what the directive makes mandatory.
6 compliance pillars
Anonymous by default
One-time token for anonymous follow-up. No IP logging. No identifying metadata. Compliant with CNIL delivered guidance.
Auto deadline tracking (Art. 9)
7-day acknowledgement + 3-month feedback deadlines automatically enforced. Overdue alerts on the BCM dashboard.
Two-way anonymous chat
The reporter can add info, the investigator can ask questions — all through the token, keeping identity protected.
Case management + investigation workflow
Status lifecycle (submitted → acknowledged → investigating → resolved), internal notes, assignment to ethics officer.
Multi-jurisdiction category taxonomy
Corruption, fraud, harassment, privacy, safety, conflict of interest, AML, antitrust, retaliation — 10 predefined categories.
Audit trail for regulators
Immutable log of every report, acknowledgement, communication. Exportable for AFA, Défenseur des droits, national authorities.
How it works
- 1
Collect
The reporter files anonymously through a secure channel and a unique follow-up token.
- 2
Acknowledge & triage
Automatic 7-day acknowledgement, categorisation and assignment to the right officer.
- 3
Investigate
Two-way anonymous exchange, internal notes and a status lifecycle through to resolution.
- 4
Close & prove
Reasoned response within 3 months, immutable log exportable for authorities.
Legal obligation covered, no separate OneTrust/NAVEX contract
Included in ResiPlan. Competitors (OneTrust Convercent, NAVEX EthicsPoint) charge €30-80K/year for the same.