Latest News
- 2026-07-03Norn selected by ESA BIC Estonia
- 2026-06-09Norn pitches for ESA BIC Estonia incubation
Offerings
Built for European governments, operators, and the public interest.
- →
- →
- →
- →
Capabilities
- →
- →
- →
- →
- →
- →
- →
- →
- →
Whistleblowing & compliance
A reporting channel your people trust, and regulators expect.
Kaja is a secure whistleblowing and case-management platform. Give everyone a confidential way to raise concerns, and give your organisation the tools to handle them properly, on time, and in line with the law.
- 01
Report
Anonymously or named, in a few guided steps.
- 02
Access code
A private code to come back with. No email, no account.
- 03
Follow up
Secure two-way messages with the case handler.
The case
The EU Whistleblower Directive requires organisations to offer secure internal reporting channels, acknowledge a report within seven days, and give feedback within three months. Meeting that with shared inboxes and spreadsheets is a liability, and it asks people to trust a process they cannot see.
Kaja gives you a compliant channel out of the box, a secure way for reporters to follow up without giving up their anonymity, and an intake that adapts to the national law of each entity in your group.
What's inside
For your organisation
- Embeddable channel
- A confidential reporting link to place in your legal notices, intranet, or code of conduct.
- Case management
- Triage, status, priority, and assignment, with a full audit trail on every case.
- Deadline tracking
- Acknowledge within seven days, give feedback within three months. Kaja counts the clock for you.
- Multi-entity groups
- Map every company in your group, by file upload or manual entry, and Kaja identifies each jurisdiction.
- Encrypted & retained
- Encrypted attachments, private storage, and retention controls, with EU data residency.
For reporters
- Anonymous or identified
- The reporter chooses. Anonymity is preserved end to end where the law allows it.
- Secure follow-up
- A private access code lets a reporter return, check status, and exchange messages, without revealing who they are.
- Guidance by country
- The intake adapts to the national law of the entity being reported, with plain-language guidance at each step.
Legal coverage
- FRFrance
- DEGermany
- GBUnited Kingdom
- EEEstonia
- FIFinland
- ESSpain
- NLNetherlands
- PLPoland
- CHSwitzerland
- CACanada
- MAMorocco
National whistleblower law researched for each jurisdiction on top of EU Directive 2019/1937, so the intake reflects local obligations. Further jurisdictions added on request. This is informational and not legal advice.
How it works
01
Set up your channel
Add the companies in your group, by uploading an org chart or entering them by hand. Kaja identifies each country's regime.
02
Embed the link
Place your confidential reporting link where employees, suppliers, and partners can find it.
03
Handle cases
Triage reports, message reporters securely, and meet every statutory deadline from one workspace.
Who uses Kaja
- Compliance & ethics
- A single, defensible channel for concerns across the whole group.
- Legal & data protection
- Directive-aligned handling, retention, and per-jurisdiction adaptation.
- Human resources
- A trusted route for raising misconduct that protects the reporter from retaliation.
- Groups operating across borders
- One platform that adapts to the law wherever each entity is based.
Access
For organisations. Kaja is licensed to companies and groups that need a compliant whistleblowing channel and case management. Contact us for access →
Trust signals
EU Whistleblower Directive 2019/1937Anonymous reporting supportedEU data residencyEncrypted, access-code follow-upNorn Labs OÜ
What Kaja is and isn't
Kaja provides the reporting channel and the case-management tools. It does not provide legal advice: the per-country guidance is informational and should be confirmed with your own counsel.
A whistleblowing channel that people trust and regulators recognise.