About this plugin
Secure Contact & Whistleblowing Form is the ultimate WordPress plugin for building contact or anonymous reporting forms — fully GDPR-compliant, mobile-friendly, and packed with powerful security features.
It provides a user-friendly interface for creating secure, encrypted communication channels, including support for the EU Whistleblower Directive (2019/1937). All submitted data is fully encrypted at rest, and uploaded files are stored in encrypted form on the physical server, ensuring maximum confidentiality and protection against unauthorized access.
Whether you’re a company, school, NGO, or club, you can handle sensitive and confidential submissions with confidence, privacy, and legal compliance.
The plugin also serves as a full-featured drag & drop form builder with multi-step forms, conditional logic, and unlimited submissions — all for free.
Short demo video
🔑 Key Features (Free Version)
- 🔒 Full Data Encryption – Encrypt submissions before storage for maximum confidentiality.
- 🕵️ Anonymous Submissions – Allow users to report anonymously or include contact details voluntarily.
- 🔁 Two-Way Anonymous Communication – Secure, token-based messaging between reporter and admin.
- 📱 Mobile-Friendly & Responsive – Works seamlessly on all devices.
- 🧠 Conditional Logic (Free) – Show or hide fields dynamically based on user input.
- 🛠 Drag & Drop Form Builder – Create forms visually without coding.
- ♾️ Unlimited Whistleblowers & Submissions – No restrictions on the number of reports or users.
- 📧 Email Notification – Send automatic notifications to one selected email address.
- 📑 Multiple Forms & Shortcodes – Use for whistleblowing, feedback, or contact forms.
💼 Pro Plugin Features (Upgrade)
- 🔒 Uploaded Files Full Encryption – All uploaded files are fully encrypted and securely stored on the server.
- 📤 File Uploads – Receive supporting documents securely with file size and type restrictions.
- 🧩 Multi-Step Forms – Split long forms into logical steps for better usability.
- 🎨 Customizable Themes – Match your site’s design with advanced styling options.
- 📊 Export to CSV – Download and manage submissions offline.
- 📧 Multi-Recipient Notifications – Send alerts to multiple recipients or departments.
- 🔗 Incoming Webhook – Accept external data into your forms.
- 🔗 Outgoing Webhook – Send submissions to external services or integrations.
- 👤 Access Management – Access and permission settings.
Useful Links:
Website
Use Cases
- Internal HR feedback systems
- GDPR-compliant contact forms
- School or university reporting tools
- Secure NGO communication
- Clubs and associations subject to EU regulations
Privacy Notices
Whistleblowing System plugin does not collect and store any data of your users on Whistleblowing-form’s end. All data submitted by your website visitors is stored in your website database. From this perspective, you may be subject to GDPR compliance.
Whistleblowing System imply interaction between website visitors and website owner. As such you may publish forms that require input of Private data. You need to get explicit consent from your users to comply with GDPR.
Under GDPR your users may request access and/or erasure of their entry data at any time. Here you can find how to export and/or delete reports.
Notes
Whistleblowing system, with the variety of functions, is working to make your experience the best it can be. We’re one of the only form builders around that offers support for all users. With us you can make sure that your forms are safe, anonymous and designed as per your expectations.
If you have any questions or suggestions, we’re always happy to hear from you. Our dedicated support team will help you with technical questions every Monday to Friday. We are also open for feedback.
It helps us see what we lack and which direction to grow towards. It is the key to our success.
Contact us!
World Class Support
- ⏱ Quick responses – typically within a few hours
- 🧑💻 Resolutions in under 24 hours
- 📣 Feedback-driven development
Have questions or suggestions? Reach us anytime via Contact Page
External Services
Deactivation Feedback Endpoint
This plugin optionally sends deactivation feedback when the user chooses to submit it during plugin deactivation.
de/
-Purpose: To receive voluntary plugin deactivation feedback from the admin user.
-Data Sent:
Admin email (or custom email provided in the feedback form)
Selected deactivation reason
Optional message entered by the user
Site URL
-When Data Is Sent:
Data is sent only if the administrator chooses to submit the deactivation feedback form.
If the administrator clicks “Skip”, no personal information, site content, or other identifiable data is transmitted. Only a simple request indicating that the plugin was deactivated.
On plugin activation, a minimal request is sent for anonymous activation statistics. No personal information, site content, or other identifiable data is transmitted during activation.
- Terms and conditions
- Privacy Policy