End-to-end encrypted in the browser
Reports are encrypted in the reporter's browser before they reach our servers. Only your authorised recipients can decrypt and read them โ not even Ashio.

Film and TV sets run on tight hierarchies, with line producers, UPMs, 1st ADs and heads of department in daily contact with cast, crew, talent agencies, equipment hires and multi-jurisdiction payroll. Every one of those relationships is a potential friction point โ harassment, near-misses, wage disputes, IP leaks, insurance fraud. Ashio gives every production a single, anonymous, end-to-end encrypted channel that bypasses hierarchy and surfaces everything to the right recipient without breaking the chain of custody.
Overview
Film and TV productions involve freelance crews, model and talent agencies, location rentals, equipment hires, and payroll across multiple jurisdictions. Each of these relationships is an opportunity for harassment, discrimination, safety negligence, wage theft, IP leaks, or insurance fraud. Traditional HR channels don't work on a set: there's no trusted HR person, the power dynamic between director and crew is enormous, and any complaint has to be made while the production is still in progress. Ashio gives every production a single, anonymous, end-to-end encrypted channel that bypasses hierarchy and goes straight to the producer, legal counsel or works-council representative authorised to act.
Regulations
Film and production companies operating in the EU are bound by the same whistleblower protection laws as any other employer. From 50 employees upward, the EU Whistleblowing Directive (2019/1937) and national transpositions like the German HinSchG require a confidential internal reporting channel. Additional sector-specific rules may apply: GDPR for talent and crew personal data, works-council co-determination on any health-and-safety question, and the EU Pay Transparency Directive for productions with 250+ employees.
Confidential internal channel required for any production company with 50 or more employees across the EU.
The German transposition requires confidential handling for any production house with regularly 50+ employees, with Buรgeld up to โฌ20,000 for non-compliance.
Talent, crew and applicant personal data must be processed lawfully โ pseudonymisation is mandatory when handling sensitive reports.
Required for productions with 250+ employees to provide a confidential channel for pay-equity concerns.
For productions with a Betriebsrat, certain categories of report (e.g. health & safety) must be co-determined with the council.
Why Ashio
Hotlines require a person to be on the other end, and they leave a paper trail. Email is just a forwarded inbox. Ashio is end-to-end encrypted in the browser โ the platform never sees plaintext โ and it gives the producer, legal counsel or compliance officer a structured case-management dashboard without any software to install.
Reports are encrypted in the reporter's browser before they reach our servers. Only your authorised recipients can decrypt and read them โ not even Ashio.
Cast, crew and external freelancers can report from a personal device without leaving a digital trace. Reports stay anonymous by default.
Each report is encrypted with a fresh AES-256-GCM key that's wrapped to the producer, legal counsel and works-council representative. Anyone outside the recipient set sees only ciphertext.
Built-in workflow enforces the EU-mandated timing: 7 days to acknowledge, 3 months to give feedback. Miss a deadline and we surface it in the dashboard.
Open, classify, escalate and close cases. The reporter stays pseudonymous unless they voluntarily re-identify.
Every action is logged immutably for the period required by applicable national law (typically 3โ7 years depending on member state; the German HinSchG sets 3 years). Export a regulator-ready report at any time.
Checklist
Use this when evaluating whistleblower software for a production:
If the vendor can read your reports, the vendor is a risk. Pick software that encrypts in the reporter's browser.
Anyone on set โ cast, crew, freelancer โ should be able to report without leaving a digital trace on the device or the network.
The reporter should be able to stay anonymous by default, but disclose identity if they choose. Both options must be supported.
The EU Whistleblowing Directive mandates specific timing. Your software should enforce it and flag missed deadlines.
Producer, legal and works-council need separate access. Every action is logged for the 5-7 year retention period.
FAQ
Yes. From 50 employees upward the EU Whistleblowing Directive applies, and a single production with a long-running series (soap, daily news, sports) can easily reach that headcount. Ashio is priced per company, not per headcount, so a 55-person production pays the same as a 200-person one. Set-up is under 10 minutes.
Yes โ Ashio collects no IP, no cookies, no browser fingerprinting and no email. A model or crew member can report from a personal device without leaving any digital trace, and the case handler sees only the report contents. If the reporter chooses to identify themselves, they can provide their details; otherwise the report stays anonymous by design.
Each report can be routed to multiple recipients simultaneously โ for example, the producer, legal counsel, and the works-council chair. The same report can be classified differently by each recipient, and the immutable audit trail records who saw what when. The reporter can add supporting evidence (photos, audio, screenshots) that's encrypted the same way.
Ashio is well suited to safety incidents: a witness on set can submit a report in under a minute from their phone, and the report is end-to-end encrypted in their browser. The case handler (typically the line producer or 1st AD) is alerted immediately and can mark the report as urgent. The 7-day-acknowledgement / 3-month-feedback deadlines required by the EU Whistleblowing Directive are tracked automatically.
Yes. Ashio is priced per company, not per production, so a single subscription covers an entire production slate for the year. You can tag each report with the production it relates to (e.g. 'SKAM S05', 'Quo Vadis 2026') and filter the case-management dashboard by production. When the production wraps, the audit trail remains queryable for the required retention period.
Related
End-to-end encrypted, EU-compliant, ready in 10 minutes.