WeMoral keeps a whistleblower anonymous through a set of controls, and this piece takes them one control at a time. Each one is a setting inside the product that either keeps the reporter's data out of the case file or lets it in. Two questions at the end fall outside those settings: what happens when a reporter gives their name on purpose, and where they can get advice from outside the company.
Anonymous whistleblower reporting works by asking for nothing that names the person reporting. The WeMoral form that ships has no name box and no email box. One question asks how they relate to the employer, and "I prefer not to answer" is one of the choices.
That default does more work than any policy. An optional email box leaves the choice to the reporter and asks them to trust the word optional under real pressure, while a form that never asks has settled the question for them already. The reporter files, gets a link and a one-time code, and hands over nothing.
A whistleblower's identity is protected by seven controls. Each one is a mechanism you can watch working. Open a trial account and you can check every one.
Machine translation and machine triage are missing from that list on purpose. A report goes to a person, in the words the reporter used. A machine can change what an allegation means, and the person who wrote it is not there to correct it.
An independent ODO24 review judged whistleblowing platforms on 18 criteria, security and encryption among them. It placed WeMoral in the top 10.
An audit log does not reveal who filed a report. It records the staff side of a case, who opened it and what they altered. The reporter's identity is the one thing it never holds. Each line carries an account name and a time. So a question about how a case was handled has a dated answer.
WeMoral is secure whistleblowing software, an encrypted service sold by subscription. The log starts with the first case. Access stays with the handlers the employer picks. A supervisor or a tribunal can be shown the staff side of a case in full, and the reporter is still nowhere in it.
A whistleblower can choose to give their name. It is the same form, set up differently by the employer. An admin can add a name field, an email field, or both. Either can be made required.
Both are marked as personal data for good, and that mark cannot be lifted later. A field that has ever held personal data keeps the protections that go with it. A reporter who wants alerts can verify an email address too. That step is theirs to take or skip.
The handling side scales the same way. One compliance officer can carry the channel alone, or a whole department can share it, with each role holding its own rights. The personal-data fields stay hidden from most of them. PRO comes with five seats in the panel, and Enterprise lifts the limit.
A whistleblower can get legal advice from non-profit bodies that do this work for a living. None of them answers to the employer. What they offer is concrete. Some give you a lawyer or run a secure reporting channel of their own. Others pay hardship grants to people who lose income, and a few help with the press.
They exist in most European countries and beyond. Maison des Lanceurs d'Alerte works in France. Whistleblower-Netzwerk covers the same ground in Germany. In the United Kingdom, Protect has advised people for decades. Others work across borders, among them the Whistleblowing International Network and Blueprint for Free Speech.
OGList is a directory that gathers them in one place. It lists them next to groups working on transparency and anti-corruption, press freedom, human rights and digital rights. Someone weighing up a report usually wants one talk with an outsider first. A single list of names makes that a short search.
Timing changes how much that advice is worth. It helps most before a report is filed, while every option is still open. An outside adviser can explain what the national law protects, which route to use first and what to keep a copy of. An employer cannot make those calls for someone else, however good its own channel is.
Whether companies have to accept anonymous whistleblower reports is decided by national law, not by the employer. Three EU member states oblige a company to take them. Three others bar or exclude them. The rest allow them and force nobody. The figures come from the WeMoral 2026 Report on Whistleblower Directive Transposition Across the EU, a comparison of all 27 national laws on 33 points.
So anonymity is a setting an employer chooses, country by country. A group in several countries turns the anonymous route on where the law demands it, and takes named reports in the countries where the law does not, all from one system. Case data is kept in Frankfurt, Germany, in either mode, and the audit trail is the same. PRO costs €79 a month, net. Reporters choose from 103 languages on the form. Handlers work in one of 25 languages in the panel. Every control listed here comes inside that price.