Enter your number of workers, then click Check my channel.
Result
What it does, and what it leaves to you
- Who needs a channel: private employers with 50 or more workers (from 17 December 2021 at 250+, from 17 December 2023 at 50 to 249), public bodies, and regulated financial firms of any size (Article 8).
- What it must do: accept written and oral reports and a meeting on request, keep identities confidential, designate an impartial handler, acknowledge within 7 days, and give feedback within 3 months (Article 9).
- Records and retaliation: keep a confidential record of each report and ban retaliation (Articles 18 and 19).
- Not decided: your national threshold, penalties, whether anonymous reports must be accepted, whether a matter falls inside the material scope, and whether a reporter is protected.
Common questions
Does my company need a whistleblower reporting channel?
If you employ 50 or more workers, yes: the EU Whistleblower Directive requires an internal reporting channel. Companies with 250 or more had to comply from 17 December 2021 and those with 50 to 249 from 17 December 2023. Regulated financial-services firms need one whatever their size. Your national law may set a lower threshold.
How fast must I respond to a whistleblower report?
Acknowledge receipt within 7 days and give feedback within 3 months of the acknowledgement. Feedback means telling the reporter what is being done or has been done in response.
Can small companies share one reporting channel?
Employers with 50 to 249 workers may share one channel and its resources. Each employer keeps its own duties to keep reports confidential, follow up and give feedback.
What must an internal reporting channel offer?
Reporting in writing, orally by phone or voice message, and by a physical meeting on request, with the reporter's identity kept confidential and an impartial person or department designated to follow up.
Is my data uploaded anywhere?
No. Everything is calculated in your browser and nothing is sent; a test in the code asserts there are no network calls. Do not type a real whistleblower's name or the details of a real report into any tool; the clocks only need dates.