Success story: AENOR and the implementation of an internal reporting system
AENOR contributes to the transformation of society by building trust between organisations and individuals through conformity assessment services (certification, inspection and testing), training and information, as well as business transformation consulting provided by AENOR Conocimiento.
As a leader in building trust in Spain, more than 91,000 workplaces worldwide hold one of its certificates in fields such as quality management, artificial intelligence, cybersecurity, and ESG-related areas like criminal compliance, good corporate governance, equality, environmental management and sustainable construction.
AENOR’s competitive advantages include the highest brand recognition among companies and consumers; employing its own staff, which allows it to manage the knowledge it has accumulated for the benefit of customers; innovating in the resolution of new competitiveness gaps thanks to its proximity to sources of knowledge; and its geographical and sectoral capillarity.
Today, AENOR is a global entity, already operating in 87 countries. In Spain, it maintains offices in all the autonomous communities with its own auditors, and has a permanent presence in 12 other countries, mainly in Latin America and Europe.
The challenge: Promoting ethics as the foundation of corporate culture
In an increasingly demanding business environment, AENOR recognised the need to strengthen its ethical and compliance culture, aligning with values of transparency, integrity, and responsibility. The challenge was to establish a secure, confidential, and accessible channel — both for employees and external business partners — where concerns could be reported without fear of retaliation.
As an entity that certifies compliance and corporate ethics systems, AENOR committed to leading by example by implementing internal mechanisms that protect whistleblowers and ensure compliance with applicable laws. This included adherence to Law 2/2023 of 20 February, which transposes the EU Whistleblower Protection Directive into Spanish legislation.
This evolution has enabled it to strengthen its commitment to good governance and compliance, positioning itself at the forefront of best practices in corporate integrity and transparency. AENOR’s Ethical Channel initiative not only responds to regulatory requirements, but also reflects a firm commitment to consolidating a solid ethical culture throughout the AENOR Group.
The solution: Whistlelink as AENOR’s internal reporting platform
To address this challenge, AENOR selected Whistlelink’s technology platform, a specialised solution for managing internal reporting channels. The Whistlelink system meets all the requirements established by Law 2/2023, including data protection in accordance with the General Data Protection Regulation (GDPR), case traceability, whistleblower anonymity, and secure communication management.
AENOR’s Ethics Channel allows employees and collaborators to report concerns easily, confidentially, and securely, guaranteeing system independence and impartial case handling.
✔️ Reputation and impartiality: As a leading organisation in conformity assessment and business transformation, AENOR applies best practices in ethics and governance internally.
✔️ Confidentiality and data integrity: Operating in a high-trust environment requires a system that ensures confidentiality while complying with data protection regulations (GDPR).
✔️ Legal and regulatory compliance: With the implementation of Law 2/2023, AENOR required a system capable of meeting the legislative requirements set by European regulations.
✔️ Cross-functional adoption: As a global organisation, AENOR needed a solution that could be easily adopted across its network of subsidiaries and by all technical, legal, and administrative staff, regardless of their level of digital proficiency.
✔️ Leadership committed to fostering a culture of integrity, transparency, honesty, and compliance.
Implementation and results:
The implementation of the Ethical Channel was agile and efficient, supported by internal training sessions, corporate communications, and technical onboarding from Whistlelink.
The platform has been successfully integrated into AENOR’s organisational culture as a key governance and compliance tool.
- AENOR’s achievements:
- Increased employee trust: AENOR employees now have a safe and confidential way to report misconduct without fear of retaliation, while personal data and anonymity are protected.
- Full compliance with Law 2/2023: The platform ensures that AENOR meets all legal requirements for internal reporting channels, following ISO 37002 guidelines.
- Cultural reinforcement: AENOR strengthens its leadership in governance, ethics, and compliance, demonstrating its ongoing commitment to business best practices.
“The integration of AENOR’s Ethical Channel with Whistlelink allows us to ensure that our internal integrity is aligned with the rigorous standards we certify for others. This initiative represents a logical and robust extension of our unwavering commitment to excellence.”
— Carmen Morato Garcia, Chief Legal and Internal Compliance Officer at AENOR
Key takeaways: Whistleblowing in professional services & certification
AENOR’s experience highlights key lessons for organisations in the certification and professional services sector:
- ✔️ Ethical leadership starts within. Organisations that assess others on compliance must set a strong internal example.
- ✔️ Secure and anonymous channels encourage reporting. Confidential systems increase employee trust and reduce fear of retaliation.
- ✔️ Cross-functional usability matters. Solutions should be intuitive for staff at all levels and across departments.
- ✔️ Cultural integration boosts long-term impact. A whistleblowing platform is most effective when embedded into the organisation’s governance and values.
Do you want to learn more about Whistlelink?
Whistlelink provides secure whistleblowing solutions designed to help professional service and certification organisations meet regulatory requirements while promoting a culture of transparency and integrity. With features like voice messaging, anonymous reporting, and secure case management, Whistlelink is an ideal solution for firms seeking to strengthen governance, uphold ethical standards, and ensure compliance across complex operations.
