Confidentiality and Anonymity: Whistleblowing channels must guarantee that the whistleblower’s identity remains confidential and, if desired, that reports can be made anonymously.

Accessibility: The channel should be easily accessible to all individuals associated with the organization, allowing reports to be submitted through various means such as telephone, email, online platforms, and mobile applications.

Impartiality: The channel must be managed by impartial individuals or an external third party to ensure that reports are handled without conflicts of interest.

Protection against retaliation: It is crucial that whistleblowers are protected from any form of retaliation or discrimination as a result of their report.

Information management procedure: There must be a transparent process for receiving, investigating, and resolving reports, including specific deadlines for each stage (e.g., acknowledgment of receipt within 7 days and resolution within a maximum of 3 months).

Shared System: A system shared among different Responsible parties but with isolated and independent spaces.

Communication and Follow-up: Whistleblowers must receive updates on the status of their report and any follow-up actions, ensuring transparency throughout the process.

Different Roles and Permissions: The system must allow controlled access and grant only the necessary privileges.

Record book of information received and internal investigations.

Anonymization and Deletion of personal data.

Traceability that allows recording the evolution of the different cases in which informants provide data that may be of interest to the complaint.

Security: which allows for the collection of appropriate and proportionate measures to ensure the integrity, availability and confidentiality of the information within the system.

Data Protection: Custom data protection clauses tailored to each company, as well as contractual clauses for data processors and controllers.