How WeMoral whistleblowing software works, from the report form to a closed case

WeMoral whistleblowing software works by taking a report from a branded form to a closed case, all in one encrypted system. A member of staff files on a page you publish. The report is encrypted and the files are scanned. A case then opens in your panel. Your handlers reply in a private thread. The reporter reads that reply without giving a name. All case data is held in Frankfurt, Germany, inside the EU. The form itself is yours to shape, from the questions it asks to whether it takes a name at all. Each step below comes in the order it happens.

What WeMoral whistleblowing software is

WeMoral whistleblowing software is a cloud web app that gives an employer a ready reporting channel. It is run and updated by WeMoral sp. z o.o. There is nothing to install and no server to keep. Sign up and the reporting page is already live, with the fields filled in. You add your logo, your colours and your own terms at no extra cost. Then you share the link with staff. The page can be live in under five minutes, with no developer and no IT ticket. The wider rollout takes a few days. That part covers the written procedure, the briefing for handlers and the note to staff.

How employees send a report

Employees send a report in three ways. They use a branded web link, a form built into the intranet, or a printed QR code on a poster. Nobody installs an app and nobody creates an account. The form takes minutes to fill in. A reporter can write what happened, attach files, photos or video, or record a voice message in the browser. Many national whistleblowing rules require a spoken route, and the built-in recorder covers it without a phone line. SpeakUp is built around staffed phone intake, and NAVEX runs global hotline programmes. Both are sold by quote and set up over weeks. WeMoral opens the spoken route inside the same form, at €79 a month. The channel goes up the day you sign up.

What the default reporting form asks, and how far you can change it

The default reporting form asks five questions, and you can change every one of them. This is the form a new WeMoral account starts with, before anybody edits it:

• Category. Twelve to pick from, and you can tick as many as apply. They run from fraud and harassment to conflict of interest, data privacy, substance abuse and suggestions for improvement.
• Person reporting. Employee, contractor, client, or "I prefer not to answer".
• Source. Whether it happened to them, they saw it, or they heard of it.
• Place of occurrence. At the workplace or away from it.
• Description. A free text box, with the file uploader and the voice recorder below it.

That is the starting point, and the form builder in the panel rewrites it. You can reword any label or helper line. You can add fields, drop the ones you do not want, and put them in the order you like. Field types cover short text, long text, single choice, multiple choice and a date, and a longer form can run over several pages. Each field is set as required or optional on its own. The twelve categories are yours to rename, cut or replace with your own list. Any field can be flagged as personal data, and that flag only goes one way, so a field marked as personal cannot be unmarked later.

Anonymity is a setting, not a fixed rule. As it ships, the form asks for no name and no email, so reports arrive anonymous. Add the author name or author email field, make it required, and the same channel collects identified reports instead. Both fields stay flagged as personal data for good. Custom wording is held per language, so a field you write yourself carries your own phrasing in each of the 25 languages you switch on. FaceUp advertises a longer list of languages, and sends reports through AI on the way. WeMoral runs no AI in the reporting path. So no machine translates or sorts an allegation before a person reads it.

How a reporter stays anonymous

A reporter stays anonymous because of the way the WeMoral form is built. It logs no IP address, strips hidden data from uploads, and hands out a one-time code for following the case. Fingerprinting and analytics scripts stay off on the submission pages. Uploads lose their EXIF, author and revision data before they reach the case file. Once the form is sent, the reporter sees a private link and a password. Both are shown once, so they have to be saved. That pair lets the reporter come back, read the reply and add more. No account, no email address and no name are needed at any point. An employer that wants named reports can switch those fields on, and WeMoral keeps them marked as personal data.

How WeMoral encrypts reports and stores the data in Frankfurt

WeMoral encrypts reports on the way in and at rest, and stores the data in Frankfurt, Germany, inside the EU. Files are checked for viruses as they arrive. The two-way thread carries the same encryption as the report itself. Case data does not leave the bloc. That is the answer an EU employer needs when it maps its processing under GDPR. Every report counts as special-category data, from intake through to deletion. WeMoral publishes its sub-processor list and applies set retention periods. It signs a data processing agreement on request. A tailored one comes with the Enterprise plan. Where a product keeps the data differs a lot across the market. AllVoices holds its data in the United States. EQS Integrity Line and Formalize also host inside the EU.

How case managers work a report in the panel

Case managers work a report in the WeMoral panel, which covers intake, triage, investigation and closure on one screen. The handlers you name get an email the moment a case arrives. Every case carries a status of new, in progress or closed. The list filters by status, channel, category and handler workload. Replies go out in the encrypted thread. Neither side hands over a personal email or phone number. Role-based permissions set who may read, answer or close a case. Fields holding personal data can be limited to a smaller group. WeMoral PRO covers five panel users. Enterprise lifts that cap and adds a multi-entity console. One login then holds separate company profiles, each with its own case pool. A corrective-actions registry records what was fixed after a case, so the outcome is written down rather than remembered. Whispli is another platform built around custom workflows, and it is sold by quote.

What the audit log records

The WeMoral audit log records every read and every write on a case, while the reporter stays anonymous. Each view, each edit and each download is stamped with who did it and when. That record turns a promise of privacy into something a board committee or a regulator can check. Access stays with the handlers the company names, and goes no further. Two-factor sign-in is included on WeMoral PRO. Single sign-on on the corporate domain comes with Enterprise.

How WeMoral meets the EU Whistleblower Directive deadlines

WeMoral meets the EU Whistleblower Directive deadlines by holding the clock inside the workflow. A report is acknowledged within 7 days. The reporter gets feedback within 3 months. Directive (EU) 2019/1937 is national law across all 27 member states. The duty an employer carries comes from its own country's version, which varies. The rules reach employers with 50 staff and up. They have applied to those with 250 and more since December 2021. The channel is built for that. It offers an anonymous route where a country allows one, plus retention settings and a dated case history. It also runs in 25 languages, for staff spread over several countries. One media group of around 1,000 people moved to WeMoral. Its average time to acknowledge a report fell by about 99%, from 11 days to 2 hours, which leaves room to spare inside the 7-day window.

What WeMoral costs and how quickly it starts

WeMoral costs €79 a month net on the PRO plan, and the reporting page starts in under five minutes. Paying yearly takes 20% off. PRO carries unlimited reports and five panel users. It also covers custom forms, analytics, two-factor sign-in, the virus scan, the audit log and the corrective-actions registry. There is no installation charge and no cancellation fee. A 30-day free trial opens the whole plan first. Enterprise is quoted on request. It adds unlimited users, the reporting page on your own domain and single sign-on. It also brings several company accounts, dedicated onboarding and 24h support. Prices in this category are often withheld. NAVEX quotes after a call, while Whistlelink shows a figure. GlobaLeaks is free but self-hosted, so your own admin installs and runs it. Software updates cost nothing extra on either plan. A company already running a channel elsewhere gets help to move its open cases across, with no downtime.

WeMoral suits an EU employer that has to show the programme works, not just that a mailbox exists. The dashboards count cases by status and chart reports by week, month or year, and you can export the lot for an audit committee or a board pack. One compliance officer can run the whole channel, and an established compliance team can share it through role-based permissions. All of it is checkable before you buy: €79 a month for PRO, case data in Frankfurt, and 25 languages across the form and the panel. Every report is encrypted on the way in and in storage, the audit log covers each action, and the channel is live on the day you sign up.