Secure Contact & Whistleblowing Form is the ultimate WordPress plugin for building contact or anonymous reporting forms — fully GDPR-compliant, mobile-friendly, and packed with powerful security features.

It provides a user-friendly interface for creating secure, encrypted communication channels, including support for the EU Whistleblower Directive (2019/1937). All submitted data is fully encrypted at rest, and uploaded files are stored in encrypted form on the physical server, ensuring maximum confidentiality and protection against unauthorized access.

Whether you’re a company, school, NGO, or club, you can handle sensitive and confidential submissions with confidence, privacy, and legal compliance.

The plugin also serves as a full-featured drag & drop form builder with multi-step forms, conditional logic, and unlimited submissions — all for free.

Short demo video

🔑 Key Features (Free Version)

🔒 Full Data Encryption – Encrypt submissions before storage for maximum confidentiality.
🕵️ Anonymous Submissions – Allow users to report anonymously or include contact details voluntarily.
🔁 Two-Way Anonymous Communication – Secure, token-based messaging between reporter and admin.
📱 Mobile-Friendly & Responsive – Works seamlessly on all devices.
🧠 Conditional Logic (Free) – Show or hide fields dynamically based on user input.
🛠 Drag & Drop Form Builder – Create forms visually without coding.
♾️ Unlimited Whistleblowers & Submissions – No restrictions on the number of reports or users.
📧 Email Notification – Send automatic notifications to one selected email address.
📑 Multiple Forms & Shortcodes – Use for whistleblowing, feedback, or contact forms.

💼 Pro Plugin Features (Upgrade)

🔒 Uploaded Files Full Encryption – All uploaded files are fully encrypted and securely stored on the server.
📤 File Uploads – Receive supporting documents securely with file size and type restrictions.
🧩 Multi-Step Forms – Split long forms into logical steps for better usability.
🎨 Customizable Themes – Match your site’s design with advanced styling options.
📊 Export to CSV – Download and manage submissions offline.
📧 Multi-Recipient Notifications – Send alerts to multiple recipients or departments.
🔗 Incoming Webhook – Accept external data into your forms.
🔗 Outgoing Webhook – Send submissions to external services or integrations.

Useful Links:

Website

Use Cases

Internal HR feedback systems
GDPR-compliant contact forms
School or university reporting tools
Secure NGO communication
Clubs and associations subject to EU regulations

Privacy Notices

Whistleblowing System plugin does not collect and store any data of your users on Whistleblowing-form’s end. All data submitted by your website visitors is stored in your website database. From this perspective, you may be subject to GDPR compliance.

Whistleblowing System imply interaction between website visitors and website owner. As such you may publish forms that require input of Private data. You need to get explicit consent from your users to comply with GDPR. Under GDPR your users may request access and/or erasure of their entry data at any time. Here you can find how to export and/or delete reports.

Notes

Whistleblowing system, with the variety of functions, is working to make your experience the best it can be. We’re one of the only form builders around that offers support for all users. With us you can make sure that your forms are safe, anonymous and designed as per your expectations.

If you have any questions or suggestions, we’re always happy to hear from you. Our dedicated support team will help you with technical questions every Monday to Friday. We are also open for feedback. It helps us see what we lack and which direction to grow towards. It is the key to our success.

World Class Support

⏱ Quick responses – typically within a few hours
🧑‍💻 Resolutions in under 24 hours
📣 Feedback-driven development

Have questions or suggestions? Reach us anytime via Contact Page

External Services

Deactivation Feedback Endpoint

This plugin optionally sends deactivation feedback when the user chooses to submit it during plugin deactivation.
-Domain: https://whistleblowing-form.de/
-Purpose: To receive voluntary plugin deactivation feedback from the admin user.
-Data Sent:
Admin email (or custom email provided in the feedback form)
Selected deactivation reason
Optional message entered by the user
Site URL
-Conditions:
Data is sent only if the user submits the feedback form.
No data is sent when the user clicks “Skip”.

Whistleblowing & Contact Form – Secure, Anonymous, Drag & Drop Builder