Enterprise DNA

Instead of NAVEX EthicsPoint

Stop renting NAVEX EthicsPoint. Own your whistleblowing system.

We build your version around how your organisation takes reports, investigates and reports to the board. We bring your EthicsPoint case history across, set up a reporting line that feeds it, and run it for you.

NAVEX lists EthicsPoint Essentials from US$1,980 a year, for US businesses with 250 staff or fewer. Larger and non-US programmes are quoted privately.

Get your version built See it working
  • check_circleYour data in a database you own
  • check_circleOpen source, no lock-in
  • check_circleBuilt and run by Enterprise DNA

Read the invoice first

What the subscription is paying for

NAVEX publishes one EthicsPoint price, for small US businesses. Everyone else gets a quote. Before the renewal, check what the quote is really for.

groups

The price follows your headcount

The published Essentials price covers organisations with 250 employees or fewer. Above that, the programme is quoted privately.

public

The published price is for the US

Essentials is built for US-based businesses with US-based support. A New Zealand or Australian group is priced privately.

call

The reporting line is the visible part

Web and phone reporting around the clock, with anonymous options. Behind the line, each case is a record with dates, an owner and an outcome.

dashboard

Standard dashboards, standard workflows

Essentials lists simple case management, preconfigured workflows and standard dashboards. The question your audit committee asks next is not always on one of them.

gavel

Local rules are still your job

The New Zealand 20 working day timeline and the Australian whistleblower policy rule apply to you whatever the platform. The records have to show you met them.

move_up

Leaving means pulling reports out

NAVEX does not publish an export format. Case history comes out as the reports your account is set up to run.

The system you own

Start from what a case officer does every week

Deadlines

Never miss the date that protects the discloser

Every report carries its acknowledgement date, worked out in New Zealand working days with your holidays taken out.

  • check Reports not acknowledged, with the days left on each
  • check Disclosers not updated in 30 days, and what they were last told
  • check Australian cases where the discloser went to ASIC or APRA, with the 90-day point shown
  • check Cases past your own target, oldest first

Confidentiality

Know exactly who has been told

The database never stores a discloser's name. Every time someone is told who they are, the basis is recorded, and anything without a lawful basis is flagged.

  • check An identity register by case: who was told, by whom, and why
  • check Consent, regulator, police or lawyer recorded against each one
  • check Board reports with numbers and categories only, never case detail
  • check Case records that cannot be deleted, with every change logged

Investigation

Run the case from report to outcome

Each case moves from received to closed through its own steps, and it cannot close with work still open.

  • check Protection assessed and the reasoning written down
  • check Investigation actions with owners and due dates
  • check Closing blocked while actions are open or protection is unassessed
  • check Outcome messages drafted for the discloser, ready to review

After the case

Check the discloser is not paying for speaking up

Closing a case books two retaliation checks, and any concern stays on the record.

  • check Checks due and overdue across every closed case
  • check Concerns and detriment kept on the file with notes
  • check Training dates for every eligible recipient and case officer
  • check Policy review dates for each company in the group

Make it yours

Design your own NAVEX EthicsPoint replacement

Everything starts from the open-source base. Then it gets your name, the parts you run, your rules and your data from NAVEX EthicsPoint. Try it here, and we build the real one.

2. What it runs

3. Make it fit

4. Your colour

Your business · your NAVEX EthicsPoint replacement Your version
YB Your business

auto_awesome

Answered from your own database

Build my version

We build it from the open-source base, bring your NAVEX EthicsPoint data across and run it for you.

What it looks like

Ask it like you would ask a colleague

Real answers from the demo data that ships with Whistleblowing for Claude Code. It runs in Claude Code inside the Claude app, so it feels like any chat you already use.

forum

Whistleblowing for Claude Code

Connected to your own database

What needs dealing with in the speak-up programme this week?

1

Ref
E-AU
Category
Compliance
Detail
Kowhai Freight Australia Pty Ltd POLICY: Policy last revi...

1

Ref
WB-101
Category
Compliance
Detail
Kowhai Freight Ltd NZ-20-WORKING-DAYS: Received 2026-10-0...

1

Ref
WB-102
Category
Compliance
Detail
Kowhai Freight Australia Pty Ltd PUBLIC-INTEREST: Disclos...

1

Ref
WB-104
Category
Compliance
Detail
Kowhai Freight Ltd ACKNOWLEDGE: Received 2026-10-17, not ...

1

Ref
WB-104
Category
Compliance
Detail
Kowhai Freight Ltd IDENTITY: Site manager, Auckland wareh...

1

Ref
WB-105
Category
Compliance
Detail
Kowhai Freight Australia Pty Ltd RETALIATION: Check due 2...

1

Ref
WB-104
Category
High severity, no next step
Detail
safety at Kowhai Freight Ltd (Priya Shah)

1

Ref
WB-103
Category
Unassigned
Detail
bullying report from Kowhai Freight Ltd, received 2026-11...

2

Ref
WB-101
Category
Discloser not updated
Detail
Blue Kea: last update 2026-10-04 (40 days open)

2

Ref
WB-102
Category
Discloser not updated
Detail
Supplier contact: last update 2026-09-12 (100 days open)

2

Ref
WB-106
Category
Outcome not told
Detail
Grey Heron: closed 2026-08-13 (not_substantiated), disclo...

2

Ref
A-02
Category
Overdue action
Detail
WB-101: Interview the depot supervisor (Morgan Hale) was ...

2

Ref
A-05
Category
Overdue action
Detail
WB-107: Request mail log extract from IT (Ben Lacey) was ...

2

Ref
WB-101
Category
Overdue step
Detail
fraud at Kowhai Freight Ltd: Interview the depot supervis...

2

Ref
WB-104
Category
Protection not assessed
Detail
safety at Kowhai Freight Ltd, received 2026-10-17

3

Ref
WB-102
Category
Past target
Detail
corruption at Kowhai Freight Australia Pty Ltd open 100 days

3

Ref
WB-104
Category
Quiet case
Detail
safety at Kowhai Freight Ltd: last activity 2026-10-20

3

Ref
WB-107
Category
Quiet case
Detail
privacy at Kowhai Freight Australia Pty Ltd: last activit...

3

Ref
RC-04
Category
Retaliation check due
Detail
WB-101: check due 2026-11-18

3

Ref
O-02
Category
Training
Detail
Ben Lacey (officer) last trained 2024-09-02

3

Ref
R-01
Category
Training
Detail
Jo Whitcombe (recipient) last trained never

Ask it anything

Questions your speak-up programme can answer on day one

Each one is answered from the records in the free version today.

chat_bubble Which reports are still not acknowledged, and how many New Zealand working days are left on each?
chat_bubble Which disclosers have not heard from us in 30 days, and what did we last tell them?
chat_bubble Who has been told a discloser's identity, by whom, and on what basis?
chat_bubble Which Australian cases had the discloser go to ASIC or APRA, and when is the 90-day point?
chat_bubble Which closed cases are due a retaliation check, and where did a check find a concern?
chat_bubble Which open cases have no protection assessment after two weeks?
chat_bubble Which group company has the most reports in the last 12 months, and how many were anonymous?
chat_bubble How long do substantiated cases take from receipt to close, by category, quarter by quarter?
chat_bubble Which eligible recipients and case officers have not been trained in the last two years?
chat_bubble Which Australian companies in the group need a whistleblower policy, and when is each one due for review?

Switching

How to switch from NAVEX EthicsPoint

In practice, the move involves exporting your case list, mapping your fields, testing the import and checking the records before you switch over.

  1. 1

    Prepare the case report

    NAVEX does not publish an export format, so check with NAVEX EthicsPoint and export what your account allows, usually CSV or Excel. The import uses a case list saved as CSV from an EthicsPoint report. Decide which history you need in the new records. Reporter names are not imported, and message threads and attachments stay in EthicsPoint, read-only, until your retention period ends.

  2. 2

    Run a test import

    Load the case list into the new system with a test run first. If the report's column headings differ from the fields in the new records, map the columns so each value goes to the right place. Review the test results before importing the records for ongoing use. If you are having Enterprise DNA run the system, they handle this import and mapping with you.

  3. 3

    Check the import results

    Review the import's flags and compare the record counts with the EthicsPoint report. Check any flagged records against the source report and resolve discrepancies before relying on the new records. Confirm that the fields you need are present. Keep the source report available while you do these checks, and remember that reporter names, message threads and attachments are not part of the imported records.

  4. 4

    Run both systems briefly

    Keep the new records and EthicsPoint available together for a short period while your team checks its case handling. Keep using the current reporting line until the replacement secure form, mailbox or phone line is live. Then confirm that new reports are reaching the new records and that your team can manage them there. Message threads and attachments remain read-only in EthicsPoint until your retention period ends.

  5. 5

    Switch off EthicsPoint

    Once you have checked the imported records and flags, and the replacement reporting route is live, stop using EthicsPoint for new cases. Keep its message threads and attachments available read-only for as long as your retention period requires. Make sure your team knows where to find the new case records and how incoming reports reach them before you close off the old process.

construction

Where the real effort goes

The work is usually in mapping your own fields and rules, checking the imported records, and deciding how much history to bring across. The case list comes across, but message threads and attachments stay in EthicsPoint until your retention period ends. If Enterprise DNA installs and runs the system for you, Enterprise DNA handles the migration, column mapping, test import and count checks.

Not ready for a call?

Get your NAVEX EthicsPoint switch plan by email

We will send you the step-by-step plan for moving your business off NAVEX EthicsPoint, what the move really involves, and how we would do it for you.

One email with your plan. No spam, and you can unsubscribe any time.

Three ways to own it

Choose how much you want us to handle

Open source

Do it yourself

Free, open source

  1. 1 Clone the repo, run npm install and npm run demo
  2. 2 Open it in Claude Code, Codex, OpenCode or Cursor and ask for /attention
  3. 3 Save your EthicsPoint case list as CSV and run a test import
  4. 4 Add your companies, case officers and holidays, then change the settings to your rules
Get it on GitHub

Built around your business

We customise it

One setup fee, then a retainer for ongoing work

  • check Your categories, severity levels, targets and review cycle
  • check Your EthicsPoint case history mapped across and checked against the originals
  • check A secure reporting form and mailbox that file reports straight in
  • check A web front end on the same records if your team wants one
Get your version built

Omni by Enterprise DNA

We run it for you

One setup fee, then a retainer

  • check Installed, backed up and looked after under your access rules
  • check Connected to your reporting line, email and document store
  • check Deadline alerts and board reports prepared on your schedule
  • check Run inside Omni by Enterprise DNA with the rest of your business
Talk to Sam

Questions

Instead of NAVEX EthicsPoint, answered

Who receives the reports if we leave EthicsPoint? expand_more

Your people, the same as now: the case officers and eligible recipients named in your policy. The free version does not take reports from the public, so in your version we set up a secure form, mailbox or phone line that files each report straight into your records. Until that is live, your current line keeps running.

Can anonymous reporters still talk to us? expand_more

Yes. Each report carries a contact route the discloser chose, such as a mailbox thread or a hotline reference, and every message to and from them is logged against the case. The records never hold their name.

Is the case data safe? expand_more

It sits in a database you own, under your own access rules, not on a shared vendor platform. Records cannot be deleted, every change is logged, and nothing is sent anywhere without someone on your team approving it.

How does our EthicsPoint history come across? expand_more

We run your case report, map the columns, do a test import and check the counts with you before anything is switched off. Reporter names never come across. Message threads and attachments stay in EthicsPoint, read-only, until your retention period ends.

What does it cost compared with EthicsPoint? expand_more

The free version has no licence fee. Our version is one setup fee, then a monthly retainer, sized to your programme. Bring your EthicsPoint quote to the call and we will compare them honestly.

Bring your EthicsPoint quote to Sam

Spend 30 minutes with Sam. Bring your EthicsPoint quote, your whistleblower policy and the report your audit committee receives. We will show what moves across, what we build and what it takes to run your version.

Book a 30-minute call Get the free version

Whistleblowing for Claude Code is free and open source, published by Enterprise DNA.

Done paying for NAVEX EthicsPoint?

Get your version built