Hinweisgebersystem

The EU Whistleblower Directive and the German HinSchG require organisations of a certain size to run an internal reporting channel and to protect the people who use it. turingsecure provides that channel: anonymous or named intake, structured case handling, and the statutory deadlines built in. This is the reporting channel for wrongdoing, not the response to a security incident.

A Lawful Reporting Channel

Meet the Reporting Duty Without a Legal Project

The HinSchG obliges you to acknowledge a report within seven days and to give the reporting person feedback within three months, while keeping their identity confidential. A shared inbox cannot prove you did any of that, and it cannot protect an anonymous reporter.

turingsecure gives reporting persons a channel to submit a report anonymously or by name, and gives the case handler a structured workflow with the statutory clocks running from the moment a report arrives. Every step is logged, so the organisation can show a regulator that the duty was met.

A report moving through intake, case handling and statutory deadlines

What the Module Does

Intake, Handling, Deadlines, Confidentiality

Anonymous or Named Intake: Reporters submit through a channel that supports both anonymous and named reports, with a secure two-way message thread that preserves anonymity.
Structured Case Handling: Each report becomes a case with status, assigned handler and a full action log, so nothing is missed and every decision is recorded.
Statutory Deadlines: The seven-day acknowledgement and three-month feedback clocks start automatically, so the deadlines the HinSchG sets are never quietly missed.
Strict Confidentiality: Access to a case is limited to the assigned handlers, keeping the reporter's identity confidential as the law requires.