Acceptable Use Policy
Last updated: October 31, 2025
1. Introduction
This Acceptable Use Policy ("Policy") governs your use of the Whistla Platform and services. By using the Platform, you agree to comply with this Policy.
Scope: This Policy applies to:
- Company users (employees, administrators, case managers)
- External investigators using the Marketplace
- Whistleblowers submitting reports
- Any person accessing the Platform
2. Acceptable Uses
✅ Permitted Activities
- Managing whistleblowing reports and investigations
- Creating and maintaining compliance policies
- Conducting workplace investigations
- Communicating with whistleblowers and witnesses
- Storing investigation evidence and documentation
- Tracking case timelines and outcomes
- Generating compliance reports
- Training employees on whistleblowing procedures
- Accessing External Investigators for conflict-of-interest situations
3. Prohibited Activities
❌ Illegal Activities
The following activities are strictly prohibited and may result in immediate account suspension or termination:
- Using the Platform to commit or facilitate crimes
- Money laundering or terrorist financing
- Fraud, embezzlement, or theft
- Bribery or corruption
- Harassment, stalking, or threats
- Child exploitation or abuse
- Violating GDPR or other data protection laws
- Violating employment laws
❌ Retaliation and Intimidation
Retaliation against whistleblowers is illegal under EU Directive 2019/1937 and Norwegian law:
- Firing, demoting, or disciplining whistleblowers
- Threatening or intimidating whistleblowers
- Harassing or bullying whistleblowers
- Revealing whistleblower identity without consent
- Creating a hostile work environment for whistleblowers
We will report suspected retaliation to appropriate authorities and terminate accounts of retaliators.
❌ System Abuse
- Attempting to gain unauthorized access to accounts or data
- Hacking, cracking, or penetration testing (without permission)
- Introducing viruses, malware, or harmful code
- Denial-of-service (DoS) attacks
- Exploiting security vulnerabilities
- Circumventing access controls or security measures
- Using automated tools to scrape or download data
- Reverse engineering or decompiling the Platform
❌ False Reports
Submitting knowingly false or malicious reports is prohibited:
- Making up allegations to harm others
- Exaggerating or distorting facts
- Reporting trivial issues as serious misconduct
Note: Good-faith reports that turn out to be incorrect are NOT prohibited. Only intentionally false reports are a violation.
❌ Breach of Confidentiality
- Sharing case details with unauthorized persons
- Posting case information on social media
- Discussing investigations in public forums
- Leaking whistleblower identities
- Using case information for personal gain
4. Reporting Violations
4.1 How to Report
If you witness a violation of this Policy, please report it immediately:
Email: abuse@whistla.io
Subject Line: AUP Violation Report - [Brief Description]
Include:
- Your name and contact information (confidential)
- Description of the violation
- Date and time of violation
- Evidence (screenshots, links, logs)
- Names of individuals involved (if known)
4.2 What We Do
Upon receiving a report:
- Acknowledge receipt within 24 hours
- Investigate the alleged violation (1-7 days)
- Take Action if violation is confirmed
- Notify Reporter of outcome (if appropriate)
5. Enforcement and Consequences
5.1 Consequences for Violations
Warning
First-time minor violations - Written warning sent via email
Temporary Suspension
Repeat violations - Account suspended for 7-30 days
Permanent Termination
Severe violations (illegal activity, retaliation, fraud) - Account permanently deleted, no refund
Legal Action
Criminal activity reported to law enforcement, civil lawsuits for damages
5.2 Appeals Process
If your account is suspended or terminated, you may appeal:
- Email appeals@whistla.io within 14 days
- Provide account information and explanation
- Include evidence supporting your position
- We will review within 7 days
- Decision is final
6. Whistleblower Protections
Special Protections
If you are a whistleblower reporting misconduct through the Platform, you are protected by:
- EU Directive 2019/1937
- Norwegian Whistleblower Protection Act
- This Acceptable Use Policy
Your Rights:
- Report anonymously (identity never required)
- Protection from retaliation
- Confidentiality of your identity
- Access to remedies if retaliation occurs
Reporting Retaliation
If you experience retaliation after making a whistleblowing report:
- Report to your organization's whistleblowing system
- Report to ICM AS: retaliation@whistla.io
- Report to Norwegian authorities: Arbeidstilsynet (Norwegian Labour Inspection Authority)
- Consult a lawyer (you may be entitled to compensation)
7. Contact Information
Policy Questions
Report Violations
Report Retaliation
Security Issues
Platform IP Owner: SAAZLY FZCO (License No. 23488, Dubai, UAE)
Company: ICM AS | Organization Number: 995 372 304 | VAT Number: NO 995 372 304 MVA
ICM AS distributes the Whistla platform in Europe. The platform is owned and developed by SAAZLY FZCO and licensed to ICM AS.