Whistle Blowing Policy Sbp

INSTITUTIONAL CORPORATE POLICY

GLOBAL WHISTLEBLOWER POLICY AND INCIDENT REPORTING PROCEDURE (SBP)

Document ID: CORP-POL-LEG-SBP-2026-V1
Effective Date: [Effective Date]
Version: 1.0
Governing Jurisdiction: [Jurisdiction / State / Country]
Applicability: Enterprise-Wide ([Company Full Legal Name] and all Global Subsidiaries, Affiliates, Officers, Directors, Employees, Contractors, and Agents)

---

1. STATUTORY & LEGAL COMPLIANCE NOTICE

Clinical Disclaimer: This document constitutes an institutional-grade corporate compliance policy designed to satisfy international regulatory frameworks, including the Sarbanes-Oxley Act (SOX), Dodd-Frank Wall Street Reform and Consumer Protection Act, the EU Whistleblowing Directive (2019/1937), and applicable national employment and labor statutes. This policy does not constitute formal legal advice for specific local labor jurisdictions. Legal counsel in relevant operational jurisdictions must review local statutory notice requirements, mandatory works council consultations, and specific statutory damages provisions prior to enterprise-wide deployment.

---

2. RECITALS & SCOPE OF APPLICATION

WHEREAS, [Company Full Legal Name], having its principal place of business at [Principal Address] (hereinafter referred to as the "Company"), is committed to conducting its business operations with uncompromising integrity, transparency, and adherence to all applicable laws, rules, regulations, and ethical standards;

WHEREAS, the Company recognizes that maintaining a corporate culture of openness and accountability requires robust mechanisms enabling directors, officers, employees, contractors, consultants, and stakeholders to raise concerns regarding unlawful, unethical, or improper conduct without fear of retaliation, intimidation, or professional disadvantage;

NOW, THEREFORE, the Company hereby adopts, promulgates, and implements this Global Whistleblower Policy and Incident Reporting Procedure (SBP) as a binding corporate standard effective as of the [Effective Date].

---

3. EXHAUSTIVE OPERATIVE CLAUSES & LEGAL TERMS

SECTION 1: PURPOSE AND OBJECTIVES

1.1 Primary Purpose. The primary purpose of this Whistleblower Policy (SBP) is to provide an accessible, secure, confidential, and fully protected reporting channel for any individual to disclose actual or suspected Wrongdoing (as defined herein) committed within or against the Company. 1.2 Compliance Commitment. This policy ensures that the Company complies fully with statutory whistleblower protection mandates, deters corporate fraud, safeguards institutional assets, maintains financial integrity, and protects reporting individuals against retaliatory measures.

SECTION 2: SCOPE OF COVERAGE AND DEFINITIONS

2.1 Personal Scope. This policy applies universally to all personnel associated with the Company, including:

• (a) Executive officers, directors, and members of the Board of Directors;
• (b) Full-time, part-time, and temporary employees;
• (c) Independent contractors, consultants, agents, vendors, and suppliers;
• (d) Interns, volunteers, and former employees regarding matters arising from or relating to their prior engagement with the Company. 2.2 Definition of "Wrongdoing". For the purposes of this policy, "Wrongdoing" includes any actual, suspected, or attempted act or omission that is:
• (a) A violation of any federal, state, provincial, or local law, rule, or regulation (including financial fraud, securities fraud, insider trading, and accounting irregularities);
• (b) A violation of the Company’s Code of Conduct, anti-corruption policies, anti-bribery policies (including the US Foreign Corrupt Practices Act and UK Bribery Act), or antitrust regulations;
• (c) Criminal activity, theft, embezzlement, bribery, extortion, or corruption;
• (d) Gross mismanagement, significant waste of corporate funds, abuse of authority, or severe conflicts of interest;
• (e) Workplace discrimination, severe harassment, retaliation, or violations of occupational health and safety standards that endanger human life or environmental integrity;
• (f) Any deliberate concealment, destruction, or falsification of financial, legal, or operational records.

SECTION 3: REPORTING CHANNELS AND PROCEDURES

3.1 Standard Reporting Channels. Good-faith reporting individuals are encouraged to report suspected Wrongdoing through any of the following designated channels:

• (a) Direct Supervisory Reporting: Reporting directly to an immediate supervisor, department head, or local Human Resources Director. (If the report involves such individuals, the reporting individual shall bypass this channel).
• (b) Dedicated Compliance Officer: Reporting to the Chief Compliance Officer (CCO) at [Compliance Officer Email / Secure Phone Number].
• (c) Independent Whistleblower Hotline (SBP Portal): Utilizing the Company’s 24/7/365 confidential, multilingual, third-party managed reporting platform accessible at [Insert SBP Portal URL] or via toll-free telephone at [Insert Hotline Number]. Reports via this channel may be submitted anonymously where permitted by local law.
• (d) Audit Committee Chair: If the complaint involves executive management, financial malfeasance, or accounting controls, reports may be submitted directly in writing, marked "CONFIDENTIAL – TO BE OPENED BY AUDIT COMMITTEE ONLY," to the Chair of the Board Audit Committee at [Principal Address].

3.2 Content of Report. To facilitate effective investigation, reports should be submitted with as much factual specificity as possible, including:

• (a) The name(s) of the individual(s) or entity involved in the alleged Wrongdoing;
• (b) Specific dates, times, and physical or virtual locations of the incidents;
• (c) A detailed factual description of the event, transaction, or policy violation;
• (d) Supporting documentation, evidence, or identification of potential witnesses.

SECTION 4: INVESTIGATION PROTOCOL AND CONFIDENTIALITY

4.1 Receipt and Preliminary Review. Upon receipt of a report, the CCO, Audit Committee, or designated Independent Investigator shall log the report within three (3) business days and conduct a preliminary assessment to determine whether the allegations fall within the scope of this policy and warrant a formal investigation. 4.2 Conduct of Investigation.

• (a) Investigations shall be conducted promptly, impartially, and thoroughly by qualified personnel who possess no conflict of interest regarding the subject matter or individuals involved.
• (b) Accused individuals ("Respondents") shall be afforded due process, including the right to be informed of the substance of the allegations at an appropriate stage of the investigation and the opportunity to respond to findings, subject to the preservation of confidentiality and integrity of evidence. 4.3 Strict Confidentiality.
• (a) All reports, investigative notes, documents, and witness statements shall be treated as strictly confidential to the fullest extent permitted by law.
• (b) Information shall be disclosed only on a strict need-to-know basis required to conduct an effective investigation, remedy the Wrongdoing, or comply with mandatory legal or regulatory reporting obligations.
• (c) The identity of the reporting individual shall not be disclosed without their explicit written consent, unless required by an order of a court of competent jurisdiction or statutory investigative authority.

SECTION 5: PROTECTION AGAINST RETALIATION

5.1 Zero-Tolerance for Retaliation. The Company maintains a strict zero-tolerance policy regarding retaliation against any individual who, in good faith, reports suspected Wrongdoing, participates in an investigation, or refuses to participate in unlawful activities. 5.2 Definition of Retaliation. Retaliation includes, but is not limited to: termination, demotion, suspension, disciplinary action, wage reduction, transfer, adverse performance evaluation, threats, harassment, bullying, blacklisting, or discrimination of any kind arising from a protected disclosure. 5.3 Remedies for Retaliation. Any employee or affiliate found to have engaged in retaliatory conduct against a reporting individual shall be subject to immediate disciplinary action, up to and including summary termination of employment or commercial contract, independent of civil or criminal legal liability. 5.4 Protection of Reporting Individuals. If a reporting individual believes they are being subjected to retaliation, they must immediately report such conduct directly to the CCO or Audit Committee Chair. Expedited protective and remedial measures shall be enacted immediately.

SECTION 6: OBLIGATIONS OF REPORTING INDIVIDUALS (GOOD FAITH REQUIREMENT)

6.1 Good Faith Standard. All reports must be made in "good faith," meaning the reporting individual holds a reasonable belief that the information provided is truthful, accurate, and discloses actual or potential Wrongdoing. 6.2 Sanctions for Malicious Reports. Making a report known to be false, malicious, reckless, or submitted for the purpose of personal grievance, harassment, or defamation constitutes a severe violation of Company policy. Any individual found to have filed a bad-faith or intentionally fabricated report shall be subject to formal disciplinary action up to and including termination, and potential civil litigation for damages.

SECTION 7: RECORD RETENTION AND AUDIT

7.1 Retention Period. All documentation, logs, investigative reports, and evidentiary records relating to whistleblower complaints shall be securely retained by the Compliance Department for a minimum period of seven (7) years, or longer if required by applicable statutory or regulatory mandates. 7.2 Annual Review. The Audit Committee and executive management shall review the operational effectiveness, utilization rates, and legal compliance of this SBP annually and implement necessary amendments.

SECTION 8: GOVERNING LAW AND JURISDICTION

8.1 This policy, and all disputes, claims, or controversies arising out of or relating to its interpretation, enforcement, or administration, shall be governed by and construed in accordance with the laws of [Governing Jurisdiction], without regard to its conflict of laws principles. 8.2 Any legal action or proceeding pertaining to this policy shall be brought exclusively in the state or federal courts located within [Jurisdiction / City, State], and each party irrevocably submits to the personal jurisdiction of such courts.

---

4. EXECUTION & FORMAL SIGNATURE BLOCKS

IN WITNESS WHEREOF, the undersigned authorized executive officers have executed this Institutional Whistleblower Policy and Incident Reporting Procedure (SBP) as of the Effective Date written below.

FOR [Company Full Legal Name]:
Signature: _____________________________________
Printed Name: [Authorized Signatory Name]
Title: [Title / Role, e.g., Chief Executive Officer / General Counsel]
Company: [Company Legal Name]
Date: [Date]

FOR [Client / Counterparty / Affiliate Legal Name, if applicable]:
Signature: _____________________________________
Printed Name: [Authorized Signatory Name]
Title: [Title / Role]
Company: [Client / Counterparty Legal Name]
Date: [Date]

---

5. STEP-BY-STEP EXECUTION & FILING GUIDE

1. Document Customization: Open this document in Microsoft Word or Google Docs. Utilize the Find & Replace function (Ctrl+H / Cmd+H) to substitute all bracketed placeholders (e.g., [Company Full Legal Name], [Principal Address], [Effective Date], [Jurisdiction]) with verified legal data.
2. Legal & Compliance Review: Submit the populated draft to regional legal counsel and labor compliance officers to verify alignment with local statutory notification periods, works council requirements (if applicable in EU/APAC jurisdictions), and statutory whistleblower bounty laws.
3. Board / Executive Approval: Secure formal corporate resolution approval from the Board of Directors or Audit Committee authorizing the implementation of this SBP.
4. Digital Execution (DocuSign / Adobe Sign): Upload the finalized PDF document to an enterprise-grade digital signature platform (such as DocuSign or Adobe Sign). Route the execution blocks to the designated corporate officers ([Authorized Signatory Name]). Ensure audit trail verification is enabled.
5. Enterprise Publication & Employee Acknowledgment: Publish the fully executed policy to the corporate intranet, employee handbook, and vendor portal. Require all existing and new personnel to execute a digital acknowledgment of receipt and compliance with this SBP.
6. Central Repository Archiving: File the fully executed, timestamped PDF in the corporate legal vault and compliance records management system under Document ID: CORP-POL-LEG-SBP-2026-V1 for the mandatory 7-year retention lifecycle.