Fidavia · Whistleblowing channel · In development

The internal channel that protects whoever reports.

Fidavia is a reporting and enquiry channel compliant with Spain's Law 2/2023 on whistleblower protection. Anyone can report anonymously and follow their case with a code; the organisation handles it with legal deadlines, traceability and encrypted data.

For organisations required to have an internal channel.

Companies with 50 or more employees, corporate groups and the entire public sector.

Anonymous by default

Send an enquiry or a report without an account, get a code and a passphrase, and talk to whoever handles the case.

Every case, with its deadline

An inbox with filters, a case file with the full timeline, internal notes and deadline alerts in working or calendar days.

Traceability you can prove

A tamper-proof record of every action, and statistics by status, type and response time.

Temporary, limited access

A temporary link with a one-time code to view the redacted version of the case and reply with a report.

Reporting

Report without fear.

A step-by-step form in Catalan, Spanish or English. The draft is saved encrypted in the browser itself, attachments are virus-scanned and stripped of metadata, and a PDF receipt is downloaded at the end.

  • Anonymous by default
  • Attachments without metadata
  • PDF receipt

Follow-up

Talk without revealing who you are.

With the case code and passphrase, the reporter reads replies, answers and adds documents when asked.

  • Code and passphrase
  • Two-way messages
  • New attachments

Case handling

The manager's inbox.

Filters by status, type, tag, assignee and deadline. In each case: the timeline, the original account (which can't be changed), messages, internal notes and reassignment with a reason.

  • Filters and tags
  • Original account untouched
  • Reassignment with reason

Anonymisation

A redacted version to share.

Detection of names and personal data without sending anything to external services, and an editor to prepare the version that experts or third parties will see.

  • Local detection
  • Redaction editor
  • Original untouched

Deadlines

Law 2/2023, on the calendar.

Deadline rules in working or calendar days using the work calendar, alerts in the case file and a summary of what's due.

  • Acknowledgement of receipt
  • Reply on time
  • Work calendar

Reports

The data for accountability.

Statistics by status, type and response time, with export to CSV and Excel.

  • Statistics dashboard
  • CSV and Excel
  • By period

Protection without surveillance.

The reporter's IP isn't stored, there are no third-party cookies or analytics, and each case is encrypted with its own key.

Report

A step-by-step form, with attachments stripped of metadata and a PDF receipt.

Manage

Assignment, messages, internal notes, tags and legal deadlines in each case file.

Prove

A chained record of every action, statistics and a full data export.

Whistleblowing channel

Comply with the law without exposing anyone.

The starting point

A mailbox or a generic form doesn't protect the reporter: it leaves traces, doesn't track deadlines and can't show how each case was handled.

What changes

Fidavia encrypts each case, tracks the legal deadlines and records every step.

What's included.

Unlimited users and cases in each organisation.

Channel

  • Enquiries and reports
  • Anonymous by default
  • Catalan, Spanish and English

Cases

  • Inbox with filters
  • Internal notes
  • Tags

Deadlines

  • Working or calendar days
  • Work calendar
  • Deadline alerts

Privacy

  • Encryption per case
  • No IP or cookies
  • Local anonymisation

Control

  • Two-step verification
  • Role-based permissions
  • Tamper-proof log

Platforms

  • Web
  • iOS and Android app
  • Full export

Frequently asked questions

What compliance officers usually ask.

It is built for it and for EU Directive 2019/1937: anonymous reporting, acknowledgement and reply deadlines, confidentiality, a record of every action and data protection.

The channel doesn't store IPs or use third-party cookies, each case is encrypted with its own key and attachments are stripped of metadata. What the person doesn't say, the system doesn't know.

In the European Union, with the database in Madrid.

Yes. The portal and app can carry each organisation's logo, colours and wording.

Rollout is planned for about two weeks, with manuals for administrators and case managers.

Write to us from the contact page and we will go through your case together.

See Fidavia with a test case.