How many employees before this is mandatory?

In the private sector the obligation covers companies with more than fifty employees. There are cases where it applies regardless of headcount, such as certain regulated activities. If you are unsure about your situation, check with your legal advisor: we build the software, we do not give legal advice.

Can someone outside the company use it?

Yes. The channel is published at its own address and can receive reports from staff, former employees, contractors, suppliers and job applicants, as the law contemplates.

Where is the data stored?

On servers inside the European Union. TODO(Jorge): confirm provider and region before publishing.

§ 01

§ 01Ley 2/2023

Whistleblowing channel

If your company has more than fifty employees, Spanish Law 2/2023 requires an internal channel where anyone can report a breach and be protected for doing so. Our channel covers that obligation end to end: intake, acknowledgement within the legal deadline, a traceable case file, and real anonymity for the reporter.

Spanish Law 2/2023 of 20 February, on the protection of persons who report regulatory breaches and on anti-corruption

We explain what the law requires. We do not give legal advice: for your specific case, check with your advisor.

What it does

Anonymity that holds up: Reporters can file without identifying themselves and follow the case with a code. No metadata that could undo the anonymity is stored.
Deadlines under control: The law sets seven days to acknowledge and three months to resolve. The system counts them, warns before they run out and records every step.
A case file that stands up: Every action is logged with a date and an owner. If you are asked for it tomorrow, the full history exports signed.
System owner: The law requires designating a person responsible for the internal reporting system. The tool gives them their own panel and separates what they can see from the rest of the organisation.

Frequently asked questions

How many employees before this is mandatory?: In the private sector the obligation covers companies with more than fifty employees. There are cases where it applies regardless of headcount, such as certain regulated activities. If you are unsure about your situation, check with your legal advisor: we build the software, we do not give legal advice.
Can someone outside the company use it?: Yes. The channel is published at its own address and can receive reports from staff, former employees, contractors, suppliers and job applicants, as the law contemplates.
Where is the data stored?: On servers inside the European Union. TODO(Jorge): confirm provider and region before publishing.

Other products

← All products