You have important information that we handle confidentially

Each organisation has its own whistleblowing policy, whistleblowing guideline or similar governing document, which regulates who is allowed to report a whistleblowing case, what is allowed to be reported and what a report should contain. For terms and conditions of reporting, you are referred to the organization's whistleblowing policy, which can be found on the organization's website and/or intranet.

Whitepaper Advisors is the company behind the Trumpet service — a whistleblower function for all kinds of organisations (everything from associations to companies, corporations, municipalities and states). Trumpet offers a secure channel of reporting for people who have something they wish to share.
Whitepaper Advisors is a company that believes that credibility and a high degree of integrity are prerequisites for our business to exist. We have extensive experience in examining and helping organisations in preventing improprieties.

The entire purpose of Trumpet is to offer organisations an external function that complies with valid legislation, in which potential whistleblowers are able to report misconduct in a secure manner. The system is a technically secure solution, in which the whistleblower is anonymous, and in which, as administrators of the system, we cannot identify the whistleblower if the person does not actively choose to be open with their contact details.
As suppliers of this service, we must comply with valid legislation. Based on how the system and function have been designed, we may not — and we cannot — collect personal data about the whistleblower if he/she chooses to remain anonymous. Even if the whistleblower chooses to disclose his/her identity to the case worker, we act in the role of controller and may not pass on the whistleblower’s personal data.

In the whistleblower system, you will always start off by being anonymous. When you are anonymous, your personal data is not saved. If you wish to disclose your identity, this is something you can choose to do at a later stage — when you create your report. Then you will receive the question of whether you wish to disclose your identity to the case worker who is handling the report. You can also choose to disclose your identity to the organisation that the report concerns.
We hope that you will choose to disclose your contact details to the case worker, as this facilitates the handling of the case. Please note that when you choose this option, you will only disclose your identity to the external case worker, and not to the organisation that your report concerns.

Yes, you will always start off as anonymous in the system. You will then later make an active choice as to whether you wish to submit your contact details.

If you do not state your name in the report, it will not be possible to see who submitted the case to the system. Trumpet has been developed based on the highest standards of confidentiality and security:

• All submitted information is encrypted according to a method that allows only the whistleblower and authorized persons to access your personal data or read the complete report. The encryption algorithms that we use (AES-256) are always updated, secure and evaluated methods that follow the highest security standards.
• All communication with the service, i.e. between the visitor’s computer and the service’s servers, is encrypted according to the most secure internet standard SSL OV. "SSL" means encrypting the information, which effectively protects against interception. "OV" is an extension that, in addition to encryption, also guarantees the protection of the identity of the server with which the visitor is communicating, which protects against fraudsters.
• The system has been designed to not store any information regarding either those visiting the web service, or those submitting reports. Traceable information is not stored in either visitor statistics or system logs.

There is always a risk of leaving traces on the device and networks used. If you wish to ensure that your employer does not have the opportunity to trace your activity, you should use a private computer or phone, and visit the service from a network you trust, such as your home network.

“Incognito mode” is a way to reduce the number of traces that your visit to the service leaves on the computer or phone you are using. The web browser will not save information, such as website history and the temporarily downloaded files that the computer receives every time you visit a website (web pages, images, cookies, etc.).
However, if you want to be completely sure that you are not leaving any traces in your employer’s IT environment, you should use your own private computer or phone, and visit the service from a network you trust, such as your home network.

Start by identifying the problem, and think through what occurred. Describe all the facts you are aware of. Develop your statement carefully, as well as anything else that is relevant to the report. The information you provide must be as accurate and detailed as possible. Omit private opinions or speculations.
Use the questions below to provide as clear a picture as possible:

• What type of event the complaint concerns?
• Who is/are involved?
• When it happened?
• Where it happened?
• If it was a one-off event, or if the problem is ongoing or recurring?

Include contact information of potential witnesses, or state where to find any evidence (e.g. in paper or electronic format).

You may report what you feel is a problem, on the condition that it is subject to the requirements set out in your organisation’s whistleblower policy, e.g. that it constitutes violations of legislation in specially designated areas. A problem often consists of one or more events that are connected to a time and a person. By events, we mean observable behaviour or occurrences, i.e. some type of course of events that has occurred, is occurring, or is about to occur. It facilitates the process if you highlight who is involved, but you are not required to do so in order to submit a report.

The report is always received by an independent case worker. (The case worker is independent of the organisation that your report concerns. As a whistleblower, you always start out being anonymous to the case worker. You can, however, choose to disclose your personal data to the case worker. If you wish, you can also choose to disclose your identity to both the case worker and the organisation that your report concerns.) We will provide you with feedback about the case’s status via this channel. The case worker raises the issue to the organisation’s committee that handles whistleblower cases. It is ultimately the organisation’s committee that decides whether an investigation should take place. What happens depends on the scope and significance of your report.

The system is owned and run by Whitepaper Advisors, and a case worker who works for Whitepaper Advisors will be the first to receive and handle the case with your report. All contact via the whistleblower system is conducted with the case worker.
All organisations that use our service have a committee, to which the case worker reports any incoming cases. It is ultimately the organisation’s committee that decides how each case should be handled. Before the committee gains access to the case, it is reviewed to ensure that the report does not name anyone in the committee as being is involved. If this is the case, the person(s) will be excluded from any further handling of the case. A description of how the committee works is available on your organisation’s website (where you found the login information for the whistleblower system).
The system has been technically constructed in such a way that no one without authorised access is able to retrieve your report, according to the choice you made when the report was created.

The event that you report causes a case to be directly created in the whistleblower system with a unique case number. The content will be stored as long as the case remains open. (You will receive feedback about the case’s status through the whistleblower system. In connection with a case being closed, all the content that has been saved in the whistleblower system will be erased, i.e. all the information that you submitted in your report. No personal data given in your report will remain in the whistleblower system once the content of a case has been erased.)