We focus on
high security and anonymity


Compliance means adherence to all relevant global and local legal requirements. For whistleblowing solutions this may include compliance with whistleblowing, data security and data protection laws.

GDPR (General Data Protection Regulation)

As Walor only hosts data on EU-based servers, the data we store for you is fully GDPR compliant. So that's one less thing to worry about. Data is also automatically deleted according to the time limits set by the GDPR.


Walor's whistleblowing solution is built on the principles of the new international whistleblowing management systems standard ISO37002. This provides guidelines for implementing, managing, evaluating, maintaining and improving a robust and effective whistleblowing management system in an organisation.


At this level it is important to ensure that all components of the system are secure such as application codes, databases, configurations and third-party libraries. This includes potential weak points inside and outside the application.

Encryption (End-to-end)

We achieve top marks for our secure end-to-end encryption, as well as for using the strongest encryption algorithms and secure conditions when it comes to security keys.


Security, anonymity and trust are a core focus at Walor and in the products we develop. This is reflected in our approach to hosting data, which is ISO27001 certified hosting. Our information security management system (ISMS) ensures there are clear processes and accountability across all aspects of Walor to protect confidential data from misuse, loss and inappropriate access.

Two-factor authentication (2FA)

Prevention is better than treatment. This is why Walor includes an extra level of security for the whistleblower platform where login with two-factor authentication is the standard.

Protection of personal data

Data confidentiality means ensuring that all parties’ data is secure whether it's in the system or in transit over the network. This includes not only encryption, but also legal requirements like where data is hosted, who has access to it, and how requests to receive that data are handled.


Walor's whistleblower platform allows whistleblowers to make anonymous reports. In addition to complete anonymity for the whistleblower, Walor enables an anonymous dialogue between whistleblowers, case handlers and external experts. The platform does not apply tracking mechanisms on users.

Privacy by Design

Walor's whistleblower platform has been developed according to the Privacy by Design principle. This requires IT infrastructure to be designed in a way that ensures effective implementation of fundamental data protection principles, such as lawfulness, fairness and transparency.