VoiCase's compliance settings allow you to configure the platform for your specific regulatory environment.

EU Whistleblowing Directive

Enable Directive-specific features under Settings → Compliance → EU Directive:

Acknowledgment automation — automatically acknowledge receipt of reports within the 7-day statutory window, with configurable templates
Feedback tracking — track the 3-month feedback obligation and generate notifications when feedback is due
Designated person assignment — assign the designated person(s) responsible for receiving and following up on reports per Article 8(1)
External reporting channel documentation — record and display information about external reporting channels as required by Article 9(1)(g)

GDPR and Data Protection

Data retention policies — configure automatic data deletion schedules per case category, aligned with your GDPR Article 5 retention policies
Legal hold — override retention policies for specific cases where data must be preserved for legal proceedings
Data subject access requests (DSAR) — tools for identifying and exporting personal data associated with a data subject across all case records
Data Processing Agreement (DPA) — VoiCase provides a GDPR Article 28-compliant DPA covering all data processing activities

VoiCase supports data residency requirements:

Select your primary data region (EU, US, or other available regions) during onboarding
Case data is stored exclusively in your selected region
Cross-region access can be restricted to comply with data transfer regulations
Processing activities are documented in a Records of Processing Activities (ROPA) template available under Settings → Privacy