WHISTLEBLOWER KIT · EDITION 2026 · GERMAN OR AUSTRIAN VERSION
Ready-to-fill documents for the internal reporting office: policy and rules of procedure, reporting channel concept, case handling with deadlines, confidentiality and deletion concept, protection against retaliation and the bridge to the GDPR. The evidence file is included; from package Plus, training materials and a knowledge test as well. You choose your jurisdiction and receive the version for your country — Germany (German Whistleblower Protection Act, HinSchG) or Austria (Austrian Whistleblower Protection Act, HSchG).
ARE WE IN SCOPE?
The duty to set up and operate at least one internal reporting office applies to employers with, as a rule, at least 50 employees — § 12(1) sentence 1, (2) HinSchG. Irrespective of headcount, it applies to certain undertakings in the financial, crypto and payment sectors § 12(3) HinSchG. Employers with, as a rule, 50 to 249 employees may set up and operate a shared office; the duty to remedy a breach and to provide feedback remains with the individual employer § 14(2) HinSchG. In Austria, undertakings and public sector legal entities with 50 or more employees must establish an internal whistleblowing system — § 11(1) HSchG.
Inside the kit: checklists for the material and the personal scope — with a legal reference for every criterion. The material scope is drawn more narrowly in Austria than in Germany (§ 2(1) HinSchG compared with § 3(3) HSchG).
INSIDE THE KIT
TRAINING PACK · FROM PACKAGE PLUS
For in-person or online training: a slide deck with 49 slides in ten chapters, from the basics through procedure, confidentiality and protection against retaliation to practical scenarios. Plus a conversation script for the reporting office’s initial interview, a knowledge test with 50 questions and explanations, and the template for the certificate of participation. In Germany this helps build the expertise that the employer must ensure among the persons of the internal reporting office (§ 15(2) HinSchG). In the kit, the e-learning is included only in package Complete.
WHY TWO VERSIONS
That is why your kit comes as one version per country: you buy DE or AT — no mixed “DACH” templates. The difference is not cosmetic: in Germany the person causing the detriment must prove that it was not based on the report (§ 36(2) HinSchG); in Austria prima facie evidence suffices, and the person acting must in turn make a different motive credible (§ 23 HSchG). The authorities differ as well — the Federal Office of Justice (BfJ) here, the Federal Bureau of Anti-Corruption (BAK) there.
Legal references in the Word and Excel documents checked against the official full texts (EUR-Lex · gesetze-im-internet.de · RIS) — edition 2026, legal status August 2026.
E-LEARNING · IN PACKAGE COMPLETE OR SEPARATELY
Path A for all employees: three chapters in around 20 minutes, told as a story from the workforce’s point of view. Path B for the reporting office and management: eight chapters in around 90 minutes (three introductory chapters and five in-depth ones), covering procedure, deadlines, confidentiality and the GDPR. German and English in one file, with audio. Runs as a standalone HTML file without installation or as SCORM 1.2/2004 in your LMS. At the end: a test and a certificate of participation with a verification code.
ONE PAYMENT. NOT 36.
A kit is paid once. Subscription software bills every month for as long as you use it.
WHAT YOU GET AND WHAT YOU KEEP
| Compliance kit | Subscription software | Law firm or consultancy | Free template | |
|---|---|---|---|---|
| Payment | once, from EUR 990 net | recurring, monthly or yearly | fee per engagement | EUR 0 purchase price |
| After the contract ends | all files remain usable | access usually ends | as agreed | the template |
| Jurisdiction | DE or AT as separate editions; EU AI Act Kit as one EU-wide edition | varies by provider | individual | varies by publisher |
| Legal reference per statement | checked against EUR-Lex, gesetze-im-internet.de, RIS (Word and Excel documents) | varies by provider | depends on the mandate | varies by publisher |
| Legal-status updates | 12 months included | included in the subscription | on request | varies by publisher |
| Training | Plus: training pack; Complete: plus e-learning | varies by provider | on request | varies by publisher |
| Case-by-case legal advice | no — no legal advice | no | yes | no |
The columns describe models, not providers; no third-party prices. Terms: see the terms and conditions.
PACKAGES AND PRICES
All prices net and one-off. German or Austrian edition, 12 months of legal-status updates included, company licence. In the kit, the e-learning is included only in package Complete.
The documentation
EUR 990
Documentation + internal training
EUR 1,390
Documentation + training + e-learning
EUR 1,690
| Enthalten | Basic | Plus | Complete |
|---|---|---|---|
| Documents in folders 00 to 12 | ✓ enthalten | ✓ enthalten | ✓ enthalten |
| Training slide deck (49 slides) | – nicht enthalten | ✓ enthalten | ✓ enthalten |
| Conversation script for the reporting office’s initial interview | – nicht enthalten | ✓ enthalten | ✓ enthalten |
| Knowledge test and certificate of participation template | – nicht enthalten | ✓ enthalten | ✓ enthalten |
| Whistleblower protection e-learning as an HTML file and SCORM 1.2/2004, up to 25 users | – nicht enthalten | – nicht enthalten | ✓ enthalten |
| 12 months of legal-status updates | ✓ enthalten | ✓ enthalten | ✓ enthalten |
| Company licence, personalised with company name, logo and licence ID | ✓ enthalten | ✓ enthalten | ✓ enthalten |
| Price net, one-off | EUR 990 | EUR 1,390 | EUR 1,690 |
Licence: one legal entity and its group companies under the licence terms in the kit; further companies or consultant use on request. Done-for-you completion: coming soon. Questions or an individual quote? Write to us via the contact form. Without a VAT ID, please order via the contact form. Contact
UPDATES
If the legal situation changes, you receive an updated document version by e-mail or download link — for 12 months from delivery. Afterwards, existing customers receive further updates on preferential terms. Your documents stay with you even after the update period (Terms § 8(6)) — nothing is locked, nothing expires.
HONEST LIMITS
THE KIT AT A GLANCE
| Scope | 53 documents in 14 folders (00 to 13) |
|---|---|
| Formats | Word (42), Excel (11), PowerPoint (1); e-learning as an HTML file and SCORM 1.2/2004 only in package Complete |
| Target group | Employers with, as a rule, at least 50 employees and the persons who run their internal reporting office |
| Jurisdiction | German edition (HinSchG) or Austrian edition (HSchG), you choose when ordering |
| Legal status | 17.08.2026, the legal references in the Word and Excel documents checked against the official full texts |
| Delivery | Download link within 48 hours of receipt of payment (working days), personalised with company name, logo and licence ID |
| Licence | Company licence for one legal entity and its group companies as set out in the licence terms in the kit |
| Updates | 12 months of legal-status updates included, the documents remain usable afterwards |
FREQUENTLY ASKED
No. Internal reporting channels must allow reports to be made orally or in text form; oral reports must be possible by telephone or by another means of voice transmission, and at the request of the reporting person a personal meeting must be made possible within a reasonable time (§ 16(3) HinSchG). The internal reporting office should process anonymous reports, but an anonymous reporting channel is not mandatory (§ 16(1) HinSchG). The kit provides a reporting channel concept and the rules of procedure for this.
Yes. An internal reporting office may be set up by entrusting the tasks to an employee, an organisational unit or a third party; entrusting a third party does not release the employer from taking suitable measures itself to remedy a breach (§ 14(1) HinSchG). Private employers with, as a rule, 50 to 249 employees may operate a shared office; remedial action and feedback remain with the individual employer (§ 14(2) HinSchG). In Austria, undertakings may transfer the tasks of the internal body to a shared body or commission third parties with them (§ 13(4) HSchG). Inside the kit: model ombudsperson agreement and group reporting office policy.
Choose Basic, Plus or Complete, confirm that you are buying as a business and pay by card or SEPA direct debit via Stripe, or by bank transfer against invoice; you receive an invoice with VAT ID. We deliver the personalised kit as a download link within 48 hours of receipt of payment (working days). No subscription. Questions or a custom quote: contact form.
Yes — for 12 months from delivery you receive updated document versions when relevant law changes. Afterwards, existing customers receive further updates on preferential terms; the delivered documents stay with your company permanently: perpetual right of use, no lock, no account.
You choose your jurisdiction when ordering and receive the version for your country. There is deliberately no mixed "DACH" version.
No. The kit is standardised compliance documentation with legal references — no advice on your individual case. For the final sign-off we recommend a review by your legal counsel where needed.
Legal status of the documents: 17.08.2026. The basis in Germany is the Whistleblower Protection Act (HinSchG), last amended by Art. 2 of the Act of 22.07.2026 (BGBl. 2026 I No. 223); since 29.07.2026 it also covers breaches of the AI Act (Regulation (EU) 2024/1689). In Austria the Austrian Whistleblower Protection Act applies (HinweisgeberInnenschutzgesetz, HSchG, BGBl. I No. 6/2023), at EU level Directive (EU) 2019/1937. The legal references in the Word and Excel documents have been checked against the official full texts. Standardised documentation, not legal advice in individual cases.