Whistleblowing Form is a WordPress plugin for secure, anonymous whistleblower reporting with two-way messaging, self-hosted data, and EU whistleblower…
Whistleblowing Form (marketed as "Whistleblowing System") is a WordPress plugin that helps organizations set up a compliant, anonymous internal reporting channel directly on their own website, without sending report data to a third-party cloud service. Whistleblowers can submit reports anonymously or with contact details, and the plugin generates a randomly generated password so each reporter can log back in later for two-way, ticket-style communication with the organization's case handlers. Reports can include file uploads, and case handlers can manage submissions through a ticket/case dashboard, with email notifications, customizable email templates, activity logging, and optional reCAPTCHA protection. The plugin is built as a drag-and-drop, multi-step form builder with conditional logic, so it can be adapted to different reporting workflows or jurisdictions. It is positioned to help businesses meet whistleblower protection requirements such as the EU Whistleblower Directive (2019/1937) and Germany's Hinweisgeberschutzgesetz, while keeping all report data hosted on the customer's own WordPress server rather than an external SaaS platform. It ships in English, German, and Italian, and is available as a free version with paid Starter and Business license tiers for additional websites and features.
Key Features
Drag-and-drop multi-step form builder — Build the reporting form with conditional logic so it can be adapted to different whistleblower reporting workflows or jurisdictions.
Anonymous or identified submissions — Whistleblowers can submit reports anonymously or with contact details.
Two-way anonymous communication — A randomly generated password lets anonymous whistleblowers log back in for ticket-style, two-way communication with case handlers.
Ticket/case management dashboard — Case handlers manage submissions through a dashboard with email notifications, customizable email templates, and activity logging.
File uploads and CSV export — Paid tiers support file uploads on reports and CSV export of report data.
reCAPTCHA spam protection — Optional reCAPTCHA protection is available on paid plans to reduce spam submissions.
Self-hosted report data — All report data is stored on the customer's own WordPress server rather than a third-party cloud service, supporting EU Whistleblower Directive (2019/1937) and German Hinweisgeberschutzgesetz compliance use cases.
Pros & Cons
Pros
Free tier available with unlimited installs, so small organizations can get a basic anonymous reporting form live at no cost
All report data stays on the customer's own WordPress hosting rather than a third-party cloud, which appeals to organizations with data-sovereignty requirements
Two-way, ticketed communication lets whistleblowers stay anonymous while still exchanging follow-up information with case handlers
Drag-and-drop, multi-step form builder with conditional logic makes it possible to tailor the reporting workflow without custom development
Paid tiers are inexpensive relative to dedicated whistleblowing SaaS platforms, with a 10-site license starting well under most competitors' per-site pricing
Cons
Requires a self-managed WordPress site, so it is not a good fit for organizations without WordPress or in-house WordPress maintenance capability
The free plan only sends notifications to a single email address, which limits its usefulness for teams that need multiple case handlers alerted
Public marketing pages do not spell out specific encryption protocols, certifications (e.g. SOC 2, ISO 27001), or data-residency guarantees, so security-sensitive buyers will need to request details directly
Compliance positioning references EU/German whistleblower law, but the vendor does not present itself as providing legal compliance advice or guarantees