Terms of Use

ReportSecurely

Skiwo AS · Pilestredet 17, 0164 Oslo · legal@reportsecurely.com

Effective date: 23 January 2026

These Terms of Use ("Terms") govern access to and use of the ReportSecurely platform and related services (the "Service").

ReportSecurely is operated by:

Skiwo AS

Org. no.: 916 636 660

Pilestredet 17, 0164 Oslo, Norway

("Operator", "we", "us")

"ReportSecurely" refers to the whistleblowing and secure reporting platform and brand operated by the Operator.

By accessing or using the Service, you agree to be bound by these Terms. If you do not agree, you must not use the Service.

1. Purpose of the Service

ReportSecurely is a secure digital platform intended to support the confidential submission, receipt, handling, investigation, and follow-up of whistleblowing reports and other sensitive communications, in accordance with applicable law.

ReportSecurely is a technical platform only. It does not replace legal, investigative, or professional judgment.

2. Who May Use the Service

ReportSecurely may be used by:

• Customers: organizations subscribing to the Service

• Authorized users: employees or representatives of Customers

• External report handlers: e.g. law firms, ombuds, or other designated third parties (including Kvale or similar firms)

• Reporters (whistleblowers): individuals who submit reports through the Service, including reporters who are granted access to follow up on their own reports

These Terms apply equally to all users, regardless of role.

3. Accounts and Access

3.1 Access methods

Access to ReportSecurely may be provided through:

• Email-based login

• Case-specific access links or credentials

• Other secure authentication mechanisms

Reporters may be given access credentials to view, supplement, or communicate regarding reports they have submitted.

3.2 Responsibility for access

You are responsible for:

• Safeguarding your access credentials

• All activity carried out using your access

You must notify the Operator without undue delay if you suspect unauthorized access.

4. Acceptable Use

You agree to use ReportSecurely only for lawful, legitimate, and appropriate purposes.

You must not:

• Submit reports in bad faith or with intent to harass, retaliate, or knowingly provide false information

• Attempt to access reports, data, or systems you are not authorized to access

• Interfere with the security, integrity, or availability of the Service

• Upload malicious code or attempt to bypass security measures

Nothing in these Terms limits lawful whistleblowing rights under applicable law.

5. Whistleblowing-Specific Safeguards

ReportSecurely is designed to support confidentiality, integrity, and controlled access.

However, you acknowledge that:

• Absolute anonymity cannot be guaranteed if identifying information is voluntarily disclosed

• Disclosure to public authorities may be required by law in limited circumstances

• Ongoing investigations or legal obligations may restrict access to information or the exercise of certain rights

ReportSecurely must not be used to retaliate against reporters or to obstruct lawful investigations.

6. Data Protection and Roles

Personal data processed through ReportSecurely is handled in accordance with applicable data protection law, including the GDPR.

Depending on context, when processing personal data in relation to the Services:

• Customer organizations typically act as data controllers

• The Operator typically acts as data processor

• External report handlers typically act as independent data controllers

• Reporters are data subjects

The Operator's role is limited to providing and securing the technical platform.

The Operator's processing of personal data in the role of controller is further described in our Privacy Policy: https://www.reportsecurely.com/privacy

7. Confidentiality

Users who gain access to reports or case-related information must treat such information as strictly confidential and must not disclose it except where authorized or legally required.

External report handlers remain subject to any professional secrecy, confidentiality, or statutory obligations applicable to them.

8. No Professional Advice

ReportSecurely does not provide legal advice, investigative conclusions, or compliance determinations through the Service.

Any actions taken based on information submitted through ReportSecurely are the responsibility of the relevant Customer, authority, or external report handler.

9. Intellectual Property

All intellectual property rights in and to the Service, including software, design, and documentation, belong to the Operator or its licensors.

Users are granted a limited, non-exclusive, non-transferable right to use ReportSecurely solely for its intended purpose.

No other rights are granted.

10. Availability and Changes

ReportSecurely is provided on a best-effort basis. Continuous or uninterrupted availability is not guaranteed.

The Operator may:

• Modify or improve the Service

• Add or remove functionality

• Temporarily suspend access for maintenance, security, or legal reasons

Material changes will be published on the website.

11. Suspension and Termination

Access may be restricted or suspended where necessary to:

• Protect security or personal data

• Investigate misuse

• Comply with legal obligations

• Enforce these Terms

Termination of access does not affect obligations relating to confidentiality, data protection, or applicable law.

12. Disclaimer

ReportSecurely is provided "as is" and "as available".

The Operator does not guarantee outcomes, completeness of reports, or actions taken by Customers, authorities, or external handlers.

13. Limitation of Liability

To the extent permitted by law:

• The Operator is not liable for indirect or consequential loss

• The Operator is not responsible for actions or decisions taken by Customers, external report handlers, or authorities based on use of the Service

Nothing in these Terms limits liability that cannot be excluded under Norwegian law.

14. Governing Law and Jurisdiction

These Terms are governed by Norwegian law.

Any dispute arising out of or in connection with ReportSecurely shall be subject to the exclusive jurisdiction of Oslo District Court, unless mandatory law provides otherwise.

15. Language

These Terms are made available in multiple languages for convenience.

In the event of any inconsistency or conflict between versions, the English version shall prevail.

16. Contact

ReportSecurely

Operated by Skiwo AS

Pilestredet 17, 0164 Oslo, Norway

Email: legal@reportsecurely.com