EU Whistleblowing Directive (EU) 2019/1937 →
Protect your people and surface risk before it spreads.
Ashio gives your organization a secure, human-centered channel for reports, case management, and follow-through—without slowing down your business. It is designed to support the reporting obligations and expectations set out in the EU Whistleblowing Directive (EU) 2019/1937.
No credit card required·GDPR Compliant·Trusted by 50+ SMEs
Why teams choose Ashio
From anonymous intake to an audit-ready case file.
Intake that protects the reporter. A workflow that helps your case workers. A record your auditor will accept.
A simple form that respects privacy.
Submitters pick an incident type, describe what happened, and send their report — fully anonymous, no tracking.
Incident type
What happened?
I observed repeated pressure to bypass internal controls during the Q3 vendor review…
No IP, no cookies, no fingerprinting.
Case management
Track reports from submission to resolution with a clear status workflow.
Cases
3 active · 12 resolved this month
Workplace misconduct
WB-1287 · Sarah L. · 2h ago
Vendor fraud concern
WB-1286 · Unassigned · 4h ago
Data handling concern
WB-1284 · Marc T. · 1d ago
Safety incident
WB-1280 · Sarah L. · 3d ago
Activity logging
Every status change and action is recorded in an audit-ready timeline.
Activity log
WB-1287Report acknowledged
Sarah L. · 12 min ago
Internal discussion
Sarah L., Marc T. · 2h ago
Viewed report
Sarah L. · 8 min ago
Viewed report
Marc T. · 3h ago
Report submitted
3h ago
Customizable form
Customize the report form with your company logo and name.
Channel settings
Auto-savedReport URL
View all settings
Voice reporting
Voice intake. Zero audio liability.
Let reporters speak instead of typing — without ever creating a recording your organization has to retain. The audio is transcribed on their device and deleted the moment the text is ready.
- Audio never uploaded — transcribed on the reporter's device
- Audio file deleted the instant transcription completes
- No recordings, no biometric data, no audio to retain
Recording — 0:14
Audio stays in your browser
Transcript (on-device)
I noticed the manager was altering vendor invoices before submitting them to finance. It's been happening for at least two months across three different suppliers…
Audio deleted — only the transcript is sent.
Two-way messages
Investigate without compromising anonymity.
Your case workers need context to resolve them — but the reporter must stay anonymous. Ashio's two-way channel keeps the conversation open without ever exposing identity.
- End-to-end encrypted reply threads
- Reporter identity never leaves their device
- Status updates synced to your audit-ready case file
Anonymous · 2h ago
Submitted report anonymously.
Sarah L. · 1h ago
Thanks for raising this. We're reviewing your report now.
Anonymous · 30m ago
I have additional context I can share.
Sarah L. · 12m ago
Acknowledged. Please share — we'll keep it confidential.
How it works
A clear path from setup to employee adoption.
Get your reporting channel online, receive submissions, and manage cases — end to end.
Create your report page
Sign up, name your company, and publish your report form — with a custom URL and your choice of theme.
Share with employees
Share the link from your intranet, code of conduct, or onboarding email. Employees submit reports anonymously.
Manage cases
Track reports from received to resolved, invite team members, and keep a full activity log.
Comparison
How Ashio compares to basic reporting tools.
Most organizations start with what they already have. Here's the difference.
Before Ashio
Email, shared inboxes, spreadsheets
The tools many companies patch together — and why they fall short.
- No guaranteed anonymity: email headers, IP logs, and server access expose identities
- No audit trail: scattered threads and spreadsheets can't prove compliance
- Manual deadlines: scattered across inboxes and calendars, easy to miss
With Ashio
Ashio
Purpose-built for whistleblowing. Compliant by design.
- True anonymity: no IPs, no cookies, no fingerprinting, no identifying data
- Immutable audit trail: every action timestamped, exportable in one click
- Deadlines at a glance: pending acknowledgments and legal windows, always in view
Security architecture
End-to-end encrypted reports.
We can't read your reports — and neither can anyone else you haven't explicitly invited.
Encrypts on submit
A fresh AES-256-GCM key is generated and wrapped for each recipient using P-256 ECDH — no shared secret.
Stores ciphertext
We hold encrypted blobs. No key material lives here — no path to plaintext, even with full server access.
Unwraps and decrypts
Each handler unwraps their copy of the key. Messages are verified with ECDSA P-256 signatures.
Submitter
AES-256-GCM key generated
0x7f3a...b8e2
Ashio server
a3f7c9d2e8b1f4a6... ciphertext blob
7c2e9a4b8d3f6e1c... ciphertext blob
[no key material stored]
Recipient (Sarah L.)
ECDH unwrap + AES decrypt
I observed repeated pressure to bypass internal controls during the Q3 vendor review process…
FAQ
Common questions before you start.
Everything you need to know about pricing, compliance, anonymity and onboarding.
Start free 14-day trialHow much does Ashio cost?+
From 29€/month billed monthly or 23€/month billed yearly (276€/year). One plan, all features included — no per-report fees, no hidden add-ons. 14-day free trial, no credit card required, cancel anytime.
Is Ashio compliant with the EU Whistleblowing Directive and national laws?+
Yes. Ashio is built for the EU Whistleblowing Directive (2019/1937), Germany's HinSchG, France's Loi Sapin II and Loi Waserman, Spain's Ley 2/2023, Italy's D.Lgs. 24/2023 and 10+ other national implementations. The platform automates the 7-day acknowledgment, the 3-month follow-up, and logs every action in an immutable audit trail.
How long does it take to set up Ashio?+
About 10 minutes — and you don't need a demo call. Sign up, customize your form, share the link with employees, and you're live. No technical integration, no sales conversation, no waiting for a consultant.
Do I need a credit card to start the free trial?+
No credit card required. Start your 14-day free trial with just your email — full access to all features. At the end of the trial, choose to subscribe or let it lapse.
Can my team manage cases together?+
Yes. Invite unlimited team members by email with role-based permissions — admins and case workers. Everyone sees the same dashboard with the same report details and full activity log. Built for collaboration, not single-user.
From report to resolution
Both sides of the story.
Your team and the submitter each get a clear view of progress — without compromising anonymity.
For your team
Report arrives
Your team gets an email alert with the incident type and a link to the dashboard.
Review and act
Team members review the report, discuss internally, and update the status as the case progresses.
Resolve
Mark the case as resolved. The activity log keeps a full record of every action taken.
For the submitter
Submit a report
Submitters pick an incident type, describe what happened, and send it — fully anonymous, no personal details.
Receive a tracking link
After submitting, they get a private URL to check progress. No account, no login — just bookmark and revisit.
Follow progress
The status page updates automatically as your team moves the case from received to acknowledged to resolved.
Ready to build a safer reporting culture?