OpenWhistle vs Safecall Investigation Case Management

OpenWhistle is open-source software for organisations that need an internal whistleblowing channel under EU Directive 2019/1937 and Germany’s HinSchG. It runs on the organisation’s own server through Docker Compose or a Helm chart; the project does not offer hosted service. Reporters can submit information without an account or email address and receive a case number and UUID4 PIN to return to the status page, read replies, and send messages. In confidential mode, the reporter’s name and contact details are encrypted and shown to the case handler only after an audited reason. Admin sign-in supports a password, LDAP, or OIDC, and requires TOTP. The maker says it does not store IP addresses and outbound requests are opt-in and off by default. Closed reports are deleted after 1,095 days by default. The interface supports English, German, French, and Brazilian Portuguese. It is free under GNU GPL v3.0, with no paid tier; the organisation provides its own server.

Safecall Investigation Case Management is a web-based service for managing investigations arising from whistleblowing reports or workplace incidents. Teams can group related cases, assign investigators and investigation managers, set priorities and tasks, and follow progress with checklists, timelines, alerts, and dashboards. It is presented for HR, workplace, fraud, financial, criminal, health and safety investigations, as well as whistleblowing matters. Evidence storage covers pictures, audio files, and notes, while investigation managers and investigators can communicate confidentially. Users can export reports, timelines, and key metrics for senior management and audit purposes. The service can connect with Safecall whistleblowing products or run standalone; OpenAPI connections and API capabilities are available for deeper integration. It is mobile- and tablet-responsive and needs no app or installation. The portal is described as available in more than 60 translation languages. Listed safeguards include GDPR compliance, TLS 1.2, AES256 encryption, case-level role-based access controls, two-factor authentication, and regular independent penetration testing. Pricing is on request. Safecall Ltd was founded in 1999 and lists registered offices in Sunderland.