- Home
- Whistleblower Hotline Software
- OpenWhistle
OpenWhistle
What it is
OpenWhistle is open-source, self-hosted software for internal whistleblowing channels. It is intended for companies and public bodies covered by EU Directive 2019/1937 and Germany’s HinSchG, including companies from 50 employees and financial firms. An organisation runs the software on its own server using Docker Compose or a Helm chart; the project does not provide hosted service. Reporters can submit information without an account or email address and receive a case number and UUID4 PIN to return to the status page, read replies, and send messages. In confidential mode, a reporter’s name and contact details are encrypted and shown to the case handler only after an audited reason. Admin sign-in supports a password, LDAP, or OIDC and always requires TOTP. The maker says no IP address is stored at any layer, and outbound requests are opt-in and off by default. Closed reports are deleted after 1,095 days by default. The interface supports English, German, French, and Brazilian Portuguese. OpenWhistle is licensed under GNU GPL v3.0 and listed as free, with no paid tier or subscription; organisations provide their own server. Community support is through GitHub Issues.
For and against
For
- Reporters need no account or email address.
- Confidential mode encrypts reporter contact details.
- Admin sign-in always requires TOTP.
- Supports English, German, French, and Brazilian Portuguese.
Against
- The project offers no hosted service.
- Organisations must provide their own server.
- There is no paid support tier.
The verdict
OpenWhistle provides a self-hosted reporting channel with anonymous access and a confidential mode. Organisations must handle their own hosting, and community support is directed to GitHub Issues.
Who it suits
OpenWhistle is aimed at companies and public bodies covered by the named EU and German whistleblowing rules. It suits organisations prepared to run and maintain the software on their own server.
Plans and prices
Free
No paid tier or subscription · you pay for your own server
Read 4 Oct 2026 · openwhistle.net
On the record
- Authentication
- Admin sign-in supports a password, LDAP or OIDC, and always requires TOTP.openwhistle.net · read 4 Oct 2026
- Confidential mode
- In confidential mode, the reporter’s name and contact details are encrypted and shown to the case handler only after an audited reason.openwhistle.net · read 4 Oct 2026
- Follow-up
- Reporters can read replies and send messages at the status page using their case number and PIN.openwhistle.net · read 4 Oct 2026
- Hosting
- It runs on an organisation’s own server using Docker Compose or a Helm chart; the project offers no hosted service.openwhistle.net · read 4 Oct 2026
- Integrations
- Admin authentication can use LDAP or an external OIDC identity provider; attachments can optionally be scanned with ClamAV.openwhistle.net · read 4 Oct 2026
- Intended users
- The maker describes it for companies and public bodies covered by EU Directive 2019/1937 and HinSchG, including companies from 50 employees and financial firms.openwhistle.net · read 4 Oct 2026
- Languages
- The interface supports English, German, French and Brazilian Portuguese.openwhistle.net · read 4 Oct 2026
- License
- It is open source under the GNU General Public License v3.0.openwhistle.net · read 4 Oct 2026
- Privacy
- The maker says no IP address is stored at any layer, and outbound requests are opt-in and off by default.openwhistle.net · read 4 Oct 2026
- Purpose
- OpenWhistle is self-hosted whistleblowing software for internal reporting channels under EU Directive 2019/1937 and Germany’s HinSchG.openwhistle.net · read 4 Oct 2026
- Reporting
- Whistleblowers receive a case number and UUID4 PIN, with no account or email address required.openwhistle.net · read 4 Oct 2026
- Retention
- Closed reports are deleted after 1,095 days by default.openwhistle.net · read 4 Oct 2026
- Support
- The maker says there is no paid support tier and points users to GitHub Issues for community support.openwhistle.net · read 4 Oct 2026
