The law requiresa channel.

It is technically enforced: submission requires no account or authentication, and the system stores no IP, session identifier or device fingerprint. What no platform can guarantee is the content — a highly specific account can identify its author, and the form says so before submission. If a reporter chooses to identify themselves, that identity is restricted to the people handling the case.

In a cloud we run, with the data region in the European Union: data is hosted and processed on EU infrastructure and there are no transfers outside the Union. There is no on-premise edition — WayIntegrity is delivered as a service only, which is also why the channel is ready to use with nothing to install on your infrastructure. Retention periods are set per case type, and deletion is effective when the period ends.

Yes. Each entity has its own channel, deadlines and owners, and cases are not visible across entities; consolidation exists only as aggregate statistics for the group. The law does allow entities to share resources under certain conditions — we validate that case by case rather than assuming it.

Not in normal operation — and it is worth being precise rather than reassuring. The service runs on our infrastructure, so the honest answer is not “it is physically impossible”: it is that access is closed by controls you can verify. Communication with the channel is encrypted in transit, access is limited by role, and no team of ours holds standing access to cases. When support needs to see what your team sees, it does so through an impersonation your organisation authorises, limited in time and written to the same audit trail as every other action — the trail that is yours, and that you can check. We do not sell zero-knowledge guarantees we cannot demonstrate.

Being a cloud service, there is no installation to schedule: the technical configuration is quick, and what sets the calendar is your internal decision on roles, recusals and policies. With those decided, a live channel with active deadlines is a realistic goal within a few weeks. The compliance registers and management reporting usually follow in a second phase.

No, and it matters to be clear about that: the product is built in line with those standards’ process requirements, but we do not sell certifications. Certification, where it makes sense, belongs to the organization operating the channel — not to the software vendor. We support that preparation with system documentation and the evidence the platform produces.