Ashio whistleblowing software
For film production

Whistleblowing software for film production companies.

Film and TV sets run on tight hierarchies, with line producers, UPMs, 1st ADs and heads of department in daily contact with cast, crew, talent agencies, equipment hires and multi-jurisdiction payroll. Every one of those relationships is a potential friction point โ€” harassment, near-misses, wage disputes, IP leaks, insurance fraud. Ashio gives every production a single, anonymous, end-to-end encrypted channel that bypasses hierarchy and surfaces everything to the right recipient without breaking the chain of custody.

Overview

Why film and production companies need an anonymous whistleblower channel.

Film and TV productions involve freelance crews, model and talent agencies, location rentals, equipment hires, and payroll across multiple jurisdictions. Each of these relationships is an opportunity for harassment, discrimination, safety negligence, wage theft, IP leaks, or insurance fraud. Traditional HR channels don't work on a set: there's no trusted HR person, the power dynamic between director and crew is enormous, and any complaint has to be made while the production is still in progress. Ashio gives every production a single, anonymous, end-to-end encrypted channel that bypasses hierarchy and goes straight to the producer, legal counsel or works-council representative authorised to act.

Regulations

What the law requires of a film or production company.

Film and production companies operating in the EU are bound by the same whistleblower protection laws as any other employer. From 50 employees upward, the EU Whistleblowing Directive (2019/1937) and national transpositions like the German HinSchG require a confidential internal reporting channel. Additional sector-specific rules may apply: GDPR for talent and crew personal data, works-council co-determination on any health-and-safety question, and the EU Pay Transparency Directive for productions with 250+ employees.

EU Whistleblowing Directive (2019/1937)

Confidential internal channel required for any production company with 50 or more employees across the EU.

Hinweisgeberschutzgesetz (HinSchG, DE)

The German transposition requires confidential handling for any production house with regularly 50+ employees, with BuรŸgeld up to โ‚ฌ20,000 for non-compliance.

GDPR (EU 2016/679)

Talent, crew and applicant personal data must be processed lawfully โ€” pseudonymisation is mandatory when handling sensitive reports.

EU Pay Transparency Directive (2023/970)

Required for productions with 250+ employees to provide a confidential channel for pay-equity concerns.

Works Constitution Act (BetrVG, DE)

For productions with a Betriebsrat, certain categories of report (e.g. health & safety) must be co-determined with the council.

Why Ashio

Why film production teams pick Ashio over a hotline or email.

Hotlines require a person to be on the other end, and they leave a paper trail. Email is just a forwarded inbox. Ashio is end-to-end encrypted in the browser โ€” the platform never sees plaintext โ€” and it gives the producer, legal counsel or compliance officer a structured case-management dashboard without any software to install.

End-to-end encrypted in the browser

Reports are encrypted in the reporter's browser before they reach our servers. Only your authorised recipients can decrypt and read them โ€” not even Ashio.

No IP, no cookies, no fingerprinting

Cast, crew and external freelancers can report from a personal device without leaving a digital trace. Reports stay anonymous by default.

Per-recipient key wrapping

Each report is encrypted with a fresh AES-256-GCM key that's wrapped to the producer, legal counsel and works-council representative. Anyone outside the recipient set sees only ciphertext.

7-day acknowledgement, 3-month follow-up

Built-in workflow enforces the EU-mandated timing: 7 days to acknowledge, 3 months to give feedback. Miss a deadline and we surface it in the dashboard.

Pseudonymous case management

Open, classify, escalate and close cases. The reporter stays pseudonymous unless they voluntarily re-identify.

Immutable audit trail

Every action is logged immutably for the period required by applicable national law (typically 3โ€“7 years depending on member state; the German HinSchG sets 3 years). Export a regulator-ready report at any time.

Checklist

What a film or production company should look for in a whistleblower channel.

Use this when evaluating whistleblower software for a production:

  • 1

    End-to-end encryption in the browser

    If the vendor can read your reports, the vendor is a risk. Pick software that encrypts in the reporter's browser.

  • 2

    No IP, no cookies, no fingerprinting

    Anyone on set โ€” cast, crew, freelancer โ€” should be able to report without leaving a digital trace on the device or the network.

  • 3

    Anonymous by default, identifiable if chosen

    The reporter should be able to stay anonymous by default, but disclose identity if they choose. Both options must be supported.

  • 4

    7-day acknowledgement, 3-month follow-up

    The EU Whistleblowing Directive mandates specific timing. Your software should enforce it and flag missed deadlines.

  • 5

    Per-recipient routing and audit trail

    Producer, legal and works-council need separate access. Every action is logged for the 5-7 year retention period.

FAQ

Frequently asked questions by film producers and heads of production.

Is Ashio suitable for small production houses?+

Yes. From 50 employees upward the EU Whistleblowing Directive applies, and a single production with a long-running series (soap, daily news, sports) can easily reach that headcount. Ashio is priced per company, not per headcount, so a 55-person production pays the same as a 200-person one. Set-up is under 10 minutes.

Can a model report anonymously?+

Yes โ€” Ashio collects no IP, no cookies, no browser fingerprinting and no email. A model or crew member can report from a personal device without leaving any digital trace, and the case handler sees only the report contents. If the reporter chooses to identify themselves, they can provide their details; otherwise the report stays anonymous by design.

How do we route a report that involves both a crew member and an external vendor?+

Each report can be routed to multiple recipients simultaneously โ€” for example, the producer, legal counsel, and the works-council chair. The same report can be classified differently by each recipient, and the immutable audit trail records who saw what when. The reporter can add supporting evidence (photos, audio, screenshots) that's encrypted the same way.

What happens when a report involves an on-set safety incident?+

Ashio is well suited to safety incidents: a witness on set can submit a report in under a minute from their phone, and the report is end-to-end encrypted in their browser. The case handler (typically the line producer or 1st AD) is alerted immediately and can mark the report as urgent. The 7-day-acknowledgement / 3-month-feedback deadlines required by the EU Whistleblowing Directive are tracked automatically.

Can we use Ashio on a single production that runs for a few months?+

Yes. Ashio is priced per company, not per production, so a single subscription covers an entire production slate for the year. You can tag each report with the production it relates to (e.g. 'SKAM S05', 'Quo Vadis 2026') and filter the case-management dashboard by production. When the production wraps, the audit trail remains queryable for the required retention period.

Related

More on whistleblower software.

Set up your film-production whistleblower channel today.

End-to-end encrypted, EU-compliant, ready in 10 minutes.