Trust and impartiality
The system must be designed to earn and maintain the trust of all stakeholders. Reports are handled impartially, without prejudice or bias.
ISO 37002:2021
ISO 37002:2021 — The global standard for whistleblowing management
ISO 37002:2021 provides international guidelines for establishing, implementing, and maintaining an effective whistleblowing management system. Ashio's platform is built in alignment with these principles — helping organizations meet the highest global standard for whistleblower protection.
Overview
What is ISO 37002:2021?
ISO 37002:2021 is the international standard published by the International Organization for Standardization (ISO) that provides guidelines for whistleblowing management systems. Published in July 2021, it offers a framework for organizations to receive, assess, and act on reports of wrongdoing — protecting whistleblowers from retaliation and ensuring due process. Unlike the EU Whistleblowing Directive (which is a legal obligation), ISO 37002 is a voluntary standard that represents best practice in whistleblowing management.
Key principles
The six core principles of ISO 37002
ISO 37002 defines six foundational principles that underpin an effective whistleblowing management system:
Protection from retaliation
Whistleblowers must be protected from any form of retaliation — whether direct (dismissal, demotion) or indirect (harassment, exclusion).
Confidentiality and anonymity
The identity of the whistleblower must be protected. Anonymous reporting must be accepted and processed with the same diligence as named reports.
Visibility and accessibility
The reporting channel must be clearly communicated and accessible to all relevant parties — including employees, contractors, suppliers, and other stakeholders.
Timely and transparent process
Reports must be acknowledged promptly and processed within defined timeframes. Whistleblowers should be kept informed of progress throughout.
Continuous improvement
The system should be regularly reviewed, monitored, and improved. Feedback loops ensure the process evolves with organizational needs and emerging risks.
Context
ISO 37002 vs. the EU Whistleblowing Directive
While the EU Whistleblowing Directive (EU) 2019/1937 creates a legal obligation for organizations in EU member states, ISO 37002 provides a voluntary, internationally recognized framework for best practice. The Directive tells you what the law requires; ISO 37002 tells you how to do it well. Many organizations use ISO 37002 as a benchmark even where the EU Directive does not apply — covering jurisdictions worldwide and going beyond minimum legal compliance.
Who it's for
Who benefits from an ISO 37002-aligned system?
ISO 37002 is designed for organizations of all sizes, in all sectors, worldwide. It is particularly relevant for:
- Multinational corporations seeking a consistent global standard for whistleblowing across jurisdictions
- Organizations in countries without specific whistleblowing legislation who want to follow international best practice
- Compliance teams looking to benchmark their existing whistleblowing program against a recognized standard
- Public sector bodies, NGOs, and international organizations committed to transparency and accountability
Your solution
How Ashio aligns with ISO 37002
Ashio was designed in alignment with ISO 37002 principles. While ISO 37002 is a management system standard (not a product certification), Ashio's platform provides the technical infrastructure to operationalize its guidelines:
End-to-end confidentiality
No IP collection, no cookies, no fingerprinting on reporting pages. True anonymity means no technical trace back to the reporter — fully aligned with ISO 37002's confidentiality requirements.
Structured case management
Every report follows a clear workflow: intake, acknowledgment, investigation, resolution. Timelines are tracked automatically, and whistleblowers can follow their case status via a private link.
Audit-ready documentation
An immutable activity timeline records every action taken. One-click export provides a complete audit trail — supporting ISO 37002's requirements for documented processes and review.
Multi-jurisdiction, one platform
Whether you're aligning with ISO 37002, the EU Directive, or national laws like HinSchG or Sapin II — Ashio covers all your obligations in one unified platform.
ISO 37002 aligned🇨🇭 Swiss hostingGDPR compliant
FAQ
Common questions about ISO 37002
Is ISO 37002 a legal requirement?
No. Unlike the EU Whistleblowing Directive or national laws like the German HinSchG, ISO 37002 is a voluntary standard. It represents international best practice — organizations adopt it to demonstrate a commitment to excellence in whistleblowing management beyond minimum legal requirements.
Can a software product be 'ISO 37002 certified'?
ISO 37002 is a management system standard, not a product certification. Organizations implement and operate an ISO 37002-aligned system — software supports that system. Ashio provides the technical infrastructure to operationalize ISO 37002's guidelines, but the standard is about the overall management system, not any single tool.
How does ISO 37002 relate to ISO 37001?
ISO 37001 is the anti-bribery management system standard. ISO 37002 complements it by providing specific guidance on whistleblowing — which is a key component of any anti-bribery program. Organizations with ISO 37001 certification often adopt ISO 37002 guidelines to strengthen their reporting mechanisms.
Does Ashio help with ISO 37002 audits or certification?
Ashio's platform provides the documentation, audit trails, and process structure that support ISO 37002 compliance. While Ashio itself is not a certification body, our activity logs and case management workflows give auditors the evidence they need to verify your whistleblowing processes.
Ready to align with ISO 37002 best practice?
Set up a whistleblowing system that meets the highest international standards. ISO 37002-aligned processes, GDPR compliance, and Swiss hosting — all in one platform.