Yulia Landbo
Whistleblower Software achieves another significant milestone as a part of the commitment to provide the utmost secure platform for whistleblowing.
Whistleblower Software has always been committed to privacy and data security, and with entry to the Spanish market, we deemed it crucial to comply with the National Data Standards at its most. And as of the 3rd May 2023, we are the ENS-certified whistleblowing system provider in Spain.
Our ENS certificate can be found here
The ENS, National Security Scheme is a legal regulation compulsory for all companies in the public sector in Spain and their technology suppliers, which lays down the necessary conditions to guarantee trust in the use of electronic media.
The ENS, National Security Scheme is a Symbol of Commitment to Whistleblower Protection in Spain
The main objective of the National Security Scheme (ENS) is to guarantee the security of information in the field of Spanish Public Administration, establishing a series of measures and procedures that ensure the integrity, confidentiality, availability, traceability, and authenticity of the information handled by the different public institutions.
To achieve this objective, the ENS establishes a series of security requirements that must be met by all entities that handle public information, in order to protect the information against possible threats, such as loss, alteration, or unauthorized disclosure.
These security requirements include:
Developing security policies,
Identifying information assets,
Defining security roles and responsibilities,
Performing security audits and controls,
Managing security incidents, and security training.
Implementing an obligatory whistleblowing hotline in organizations means giving employees and partners the possibility to share information on potential violations within an organization. Receiving whistleblowing reports comes with the responsibility of collecting, process, and storing data, some of which can be highly sensitive.
All public entities need to ensure that they use a reliable and trustworthy whistleblowing system - the National Security Scheme serves as quality assurance, verifying which tools are compatible with the requirements and which are not. Furthermore, all public institutions in Spain are obliged by the law to choose digital solutions certified with the National Security Scheme (ENS).
Our platform has become an essential tool for companies around the world to detect and address potential violations and ensure adherence to ethical standards. It wouldn’t be possible without strong IT security measures.
Besides complying with key security certifications, such as ISO 27001:2013, ISAE 3000 Type 2, and key whistleblowing legal regulations, Whistleblower Software made a commitment to security that includes:
End-to-end encryption of all communication channels;
Removing metadata from attached files to ensure that nothing can reveal a person;
Access and authentication management to eliminate the risk of unauthorized access;
Regular penetration tests to ensure the platform’s resilience;.
WCAG 2.1 AA compliance for visually impaired access;
Custom retention period to define how long data must be stored
Multi-Factor Authentication, whitelist IP access, SSO, and other account security features.
For more information, read our Security Statement.
5/5 stars on G2
