Ashio is a whistleblowing software solution that gives organizations a secure, user-friendly internal reporting channel for anonymous reporting, case management and compliance with the EU Whistleblowing Directive (EU) 2019/1937. Employees and stakeholders can confidentially report misconduct, so organizations can address issues promptly while the reporter stays anonymous.
**Key features of Ashio include:**
- **Anonymous Reporting**: Reporters can submit incidents without creating an account, with no IP logging or cookies, ensuring complete anonymity.
- **End-to-End Encryption**: Report contents are encrypted end to end, so Ashio cannot read them.
- **Secure Two-Way Communication**: Organizations can engage in encrypted dialogues with whistleblowers, allowing for follow-up questions and updates without compromising anonymity.
- **Voice Reporting**: Reporters can submit reports verbally using speech-to-text technology. The audio is transcribed on the reporter's device and deleted immediately after transcription, so no audio data is stored.
- **Structured Case Management**: Each report is organized into a case file with clear status indicators, assigned owners and comprehensive notes, tracking it from submission to resolution.
- **Deadline Monitoring**: Built-in tools monitor acknowledgment (7 days) and feedback (3 months) deadlines — the periods set by Directive (EU) 2019/1937 and by national laws such as Germany's HinSchG — so responses are timely.
- **Unlimited Team Members**: Organizations can invite an unlimited number of team members with role-based permissions, allowing collaborative case management.
- **Audit-Ready Logging**: Every action taken within the platform is timestamped and recorded in an immutable log, providing a transparent audit trail for compliance purposes.
- **Customizable Branding**: Organizations can personalize the reporting form with their logo and name, creating a familiar environment for reporters.
- **Multi-Language Support**: The platform supports 18 languages — Czech, Danish, Dutch, English, Estonian, Finnish, French, German, Hungarian, Italian, Latvian, Lithuanian, Polish, Portuguese, Romanian, Slovak, Spanish and Swedish — so reporters and case handlers each work in their preferred language.
**What the EU Whistleblowing Directive requires — and how Ashio maps to it:**
Directive (EU) 2019/1937 sets the baseline for internal reporting channels across the EU, and national laws implement it — Germany's HinSchG, Spain's Ley 2/2023, France's Loi Sapin II and Loi Waserman, Italy's D.Lgs. 24/2023, and equivalents in the other member states.
- **Channel obligation**: private organizations with 50 or more workers must provide an internal reporting channel. Ashio provides it as a hosted web channel at any size, including below the threshold.
- **Acknowledgment within 7 days**: Ashio starts a deadline clock on every report and flags overdue acknowledgments.
- **Feedback within 3 months**: the case file carries the response deadline, and the reporter can be answered through the encrypted dialogue.
- **Documented record of every report**: the immutable, timestamped log keeps the record regulators and auditors ask for.
- **Confidentiality and anonymity**: no account, no IP logging, no cookies, and encrypted contents.
- **Protection from retaliation**: reports and their handling are separated from HR records, and access is limited by role.
**How a report is handled:**
1. The reporter opens the organization's branded reporting page and submits a report in their own language — by text, or by voice if they prefer.
2. The case handler receives it with a deadline already attached: 7 days for the acknowledgment, 3 months for feedback.
3. The handler can ask follow-up questions through the encrypted two-way dialogue, with the reporter remaining anonymous.
4. The investigation is documented in the case file — status, owner, notes and every action, timestamped.
5. The reporter receives the outcome, and the full audit trail stays exportable for the compliance file.
**Deployment and administration:**
Ashio is cloud-based and self-service. An organization configures its form, invites team members with role-based permissions and publishes the reporting link — typically in under 10 minutes, with no technical integration, no server to run and no onboarding project. Administrators control the channel and its branding; case handlers only see the reports they are assigned. There is no limit on the number of team members.
**What you need to get started:** a name and logo for the reporting page, and at least one team member to handle reports. No servers, no IT project and no integration with existing HR or payroll systems.
**Hosting and pricing:**
Ashio is hosted in ISO 27001-certified data centers in Switzerland, where no reporter IP addresses are logged. Pricing is flat: €23 per month with annual billing or €29 per month with monthly billing for the whole organization, regardless of headcount or how many team members are invited. There is no per-employee, per-report or implementation fee. Enterprise plans start at €99 per month, and a 14-day trial requires no credit card.
**At a glance:** whistleblowing software for internal reporting channels · Directive (EU) 2019/1937 and national laws (e.g. HinSchG, Ley 2/2023, Sapin II, D.Lgs. 24/2023) · 7-day acknowledgment, 3-month feedback tracked · ISO 27001-certified data centers in Switzerland · anonymous intake with no IP logging, end-to-end encrypted contents · 18 languages, unlimited seats · €23–29/month flat, 14-day trial · live in under 10 minutes.
**Who uses Ashio:** small and mid-sized organizations that need a compliant channel without an implementation project, and larger or multi-country organizations that need one channel across all their languages and entities.
Ashio is **not** a GRC suite, a hotline outsourcing service or a general ethics case platform — it is the reporting channel, the case workflow and the audit trail.
Who Is the Company Behind Ashio?
