Whistleblowing portal
Comply with Icelandic Act no. 40/2020 with a secure whistleblowing portal.

In a nutshell
- Encryption
- Legal compliance
- Anonymity
- Key-based access
- File uploads
- Case management
The product
One secure channel. No report gets lost.
A necessary safety valve for every business — and a legal requirement for 50+ employees. Protect your reputation with an Icelandic solution that keeps data securely within the EEA.
If an employee notices wrongdoing and has no safe way to report it, they often turn elsewhere — to a union, a regulator, or the press.
- Legal requirement
- Mandatory for businesses and organisations with 50 or more employees under Act no. 40/2020
- Anonymity
- Staff can report completely anonymously — no IP addresses or location data are stored
- Communication
- Encrypted, two-way messaging with whistleblowers, with no email address required
- Data storage
- All data stored on secure servers within the EEA, in line with GDPR
- Implementation
- A ready-made link, button, or form for your website or intranet — no software to install
- Getting started
- Live in 5 minutes, no technical knowledge required
For whistleblowers
Three simple steps — no account, no risk
Staff don't need to log in or provide an email address to report.
- 01
Submit a report
The employee describes the incident in a form and can attach supporting files — fully anonymously if they choose.
- 02
Get a unique key
As soon as the report is sent, the employee receives a key (e.g. NB-8824-XY) — the only way to follow up on the case.
- 03
Check for a reply
The key lets them log back in later, read replies from case handlers, and continue secure, encrypted communication.
The platform
A safety valve that protects your business
Netbox brings legal compliance, anonymity, and simple case management into one platform that's ready in five minutes.
Act no. 40/2020
Meet your legal obligation
Businesses and organisations with 50 or more employees are required to set up an active whistleblowing process. Netbox meets this legal obligation immediately.
- Meets the requirements of Act no. 40/2020 on the protection of whistleblowers
- Reduces the risk of liability and reputational damage
- Works well for smaller businesses too, as a sign of good governance
Catch issues early
Protect your reputation
Without a safe way to report wrongdoing, employees often turn elsewhere — to a union, a regulator, or the press. Netbox gives you the chance to resolve issues inside the company first.
- A safe channel for reports of bullying, embezzlement, or safety breaches
- Issues get resolved before they become a public matter
- Shows staff and customers that safety and transparency are taken seriously
No login, no trace
Anonymity and security
Staff can submit a report without logging in or providing an email address. All communication is encrypted, and no IP addresses or location data are stored.
- Full anonymity available to whistleblowers
- Encrypted, two-way messaging using a unique key instead of an email
- Files and documents can be attached to a report
Every case in one place
A dashboard for case management
The dashboard lets managers see every case, reply to whistleblowers securely, and track case status in real time.
- A case overview with search and filters
- Move cases between statuses and store supporting files
- Multiple case handlers with access, e.g. HR, a union rep, and the CEO
Implementation
Live in 5 minutes
A simple process with no complications — no software installation or technical knowledge required.
- 01
Register
You register the company with its name, company ID, and email. We verify the details automatically.
- 02
Activate
We send you a link to activate the account. Click the link and you're ready to go.
- 03
Add it to your website
Add the ready-made link, button, or form to your intranet or website — no software installation needed.
- 04
Tell your staff
Share the link on your intranet or in the staff handbook so everyone knows about the secure channel.
We can set the system up with you
Novamedia built Netbox and runs the platform. We help with registration, choosing the right plan, and setting up case handlers.
Get implementation helpSupport and operations
Help from the team that knows the platform best
Netbox is built and run by Novamedia, so your company gets support directly from the team responsible for the product — from the first setup through ongoing operations.
Hands-on implementation
We help with registration, choosing the right plan, and setting up case handlers — with you or for you.
Ongoing support
We help with new cases, changes to case handlers, and everyday questions. Reach us at netbox@netbox.is.
Privacy by design
Data is stored within the EEA in line with GDPR, and communication is encrypted end to end.
Pricing
Plans that fit the size of your business
Pricing is based on headcount. Every plan meets the requirements of Act no. 40/2020 on the protection of whistleblowers.
Netbox Basic
For 1–49 employees — for smaller businesses that just want to check the box and stay compliant
ISK 14,900
per month
- Meets Act no. 40/2020
- 1 case handler (access)
- 3 GB storage
- Basic security — SSL and encryption
Netbox Business
For 50–100 employees — for businesses that want to look professional and need more eyes on cases
ISK 24,900
per month
- Meets Act no. 40/2020
- 3 case handlers, e.g. HR, a union rep, and the CEO
- Custom branding — logo and text
- 15 GB storage
- Priority support
Netbox Enterprise
For 100+ employees — for larger workplaces that need extensive administration
ISK 39,900
per month
- Meets Act no. 40/2020
- Unlimited case handlers
- Custom branding — logo and text
- 50 GB storage
- Implementation assistance
All prices exclude VAT. Every plan includes SSL encryption and compliance with Act no. 40/2020.
See the full price list on netbox.isQuestions
Frequently asked questions about Netbox
What does the service cost?
Pricing depends on headcount, from ISK 14,900 per month for smaller businesses up to ISK 39,900 for larger workplaces. See the full breakdown in the pricing above.
Does the system meet Act no. 40/2020?
Yes. Netbox is built specifically to meet the requirements of the Whistleblower Protection Act, with a secure process for receiving, handling, and logging cases.
Do we need to install any software?
No. Netbox is entirely web-based — you get a ready-made link, button, or form to add to your intranet or website. No software installation or maintenance is required.
Where is the data stored?
All data is stored on secure servers within the European Economic Area (EEA), in line with GDPR and Icelandic data protection law.
Is staff reporting really anonymous?
Yes. Staff can choose to report completely anonymously. No IP addresses or location data are stored, and communication is encrypted end to end.
How does an employee get a reply if they don't give an email address?
As soon as a report is sent, the employee gets a unique key. With it, they can log back in later to read replies and continue the conversation, without creating an account or providing an email.
Try Netbox — or let us manage the implementation
Apply for access and be live in 5 minutes. If you would like Novamedia to help choose a plan and manage the implementation, we will handle the process with your team.