A reporting channel people actually trust.

A reporting channel without reports is not evidence of integrity; usually it is evidence of missing trust. People stay silent when they fear retaliation, when the channel looks like IT rather than like a person, when they never learn what became of a report, or when they cannot report in their own language. SafePort is built around those four reasons.

The scope is set in its main lines. Details may still change before launch.

Multilingual access by web and telephone — anonymously as well, with a secure return channel for follow-up questions. Your case handlers record in-person conversations directly in the system.

Case management with deadline control: acknowledgement within 7 days, feedback within 3 months — the directive's deadlines sit in the system, not in one person's calendar.

A role and permission model that keeps affected persons and accused persons cleanly apart and prevents conflicts of interest technically.

Audit-proof logging: every step of handling is traceable, without exposing the identity of the whistleblower.

Analysis and reporting for the board and audit committee — aggregated, not personal.

Shared platform: fully operated by us (multi-tenant). We handle hosting, security, updates and set-up — your case handlers log in and work. For companies and groups that want to start quickly and with predictable costs.

Dedicated instance: your own environment, for you alone. Full separation, your own retention rules and, on request, your own look and interfaces. For large groups, regulated industries, and law firms and ombuds offices that serve several clients as an external reporting channel.

Both models are to run exclusively in Switzerland, in an operation certified to ISO/IEC 27001 and 27701. The edition names will follow with the product name.

The EU Whistleblower Directive (2019/1937), including national implementations in Germany, Austria and further EU states.

Swiss data protection law, the revised Swiss Data Protection Act (revDSG), and the GDPR, with ISO/IEC 27701 as an audited framework for processing sensitive personal data.

The duty-of-care argument under Art. 102 StGB: a functioning, documented reporting channel is one of the organisational measures against which a company is judged.

The recipient of reports is always you — or a law firm or ombuds office you appoint. Prism Discovery never receives or handles reports; we provide the platform and the service.

Internal: your compliance, legal or HR function handles reports itself. We provide the platform, set-up, training and operation.

External: a law firm or ombuds office you trust handles reports as your external reporting channel. We provide the platform, on request as its own dedicated instance for all of its clients.

Our service: set-up and configuration, languages and report forms, roles and permissions, training for case handlers, operation, updates and support from Switzerland.

The moment a report escalates is the moment most organisations damage evidence. When your case handlers decide to open an investigation, the path from SafePort to Prism Investigate runs without a change of system and without a break in the Chain of Custody. Clients who hold both do not lose that moment.