Qnister

Subscribe to our newsletter and get news, articles and offers straight to your inbox.

Webinar: How to handle current sanctions. Secure your spot!

thumbnail_Aunetic-logo.png

Aunetic-logo.png

GDPR

Whistleblowing

Sanctions

Solutions

News and articles

Safety

Knowledge

References

About us

Contact us

Career

Book a demo

Software for GDPR

Whistleblowing software

Search in sanctions lists

thumbnail_Kvinna i konferensrum.jpg

Kvinna i konferensrum.jpg

Qnister is your support in compliance. Our digital solutions help you meet legal requirements, so you can focus on your core business.

Qnister_GDPR_Symbols_4-3.webp

No more self-composed excel documents. With Qnister GDPR, we guide you through the data protection regulation and create the registers for handling personal data you need by law. It includes ongoing monitoring of legal development and template documents, and you get everything gathered in one place. It doesn´t get simpler than that.

*   Easy to follow, step by step
*   Multiple levels of licence
*   Two separate modules
*   Developed by corporate lawyers

Trusted by more than 500 companies

Man med moln i bakgrunden.jpg

The Data Protection Regulation entered into force in 2018 and entails protection for physical persons with regard to the processing of personal data.

Omvärldsbevakning GDPR.jpg

As a user of Qnister GDPR, you benefit from monitoring of data protection developments, directly within the tool.

We keep track of everything relevant to data protection and the processing of personal data, so you don’t have to. You receive the latest news from across Europe, summarized within the tool.

 OnePartnerGroup was early with GDPR and whistleblowing

Leende kvinna konferensrum.jpg

Want to see the software before you decide? Book a demo and we will show you how it works.

Do you have any questions? Get answers to the most common questions our customers ask.

Una forma sencilla de trabajar con las rutinas de la protección de datos según el RGPD.

Qnister RGPD

System för att administrera personuppgiftsarbetet enligt dataskyddsförordningen.

GDPR-verktyg

A simple way to work with data protection routines according to GDPR.

Qnister GDPR

Whistleblowing_software_Symbols.webp

Our whistleblowing software makes you compliant with the requirements. Qnister Whistle is our secure and anonymous whistleblowing software for receiving and managing whistleblowing cases. Qnister Whistle is User-friendly and organized – all by the whistleblowing directive.

*   Anonymous and secure
*   Easy to administrate
*   Templates, policies, and checklists
*   Created by lawyers

Man på arbetsplats artikel om visselblåsarlagen.jpg

In 2019, the Whistleblower Directive was adopted within the EU, which aims to strengthen control of EU rules and that there is a high level of protection for people who report violations of these. The directive has been implemented in Sweden through a law (2021: 890) on the protection of persons who report malpractice (the Whistleblower Act). The law entered into force on 17 December 2021 and covers all types of activities, regardless of the form of association. Authorities are also covered by the law.

Balder chose Qnister's system and case management

Want to see our whistleblowing software before you decide? Book a demo and we will show you how it works.

Kvinna hanterar inkomna visselblåsarärenden.jpg

Add our receiver function to your whistleblower system. Resolve the issue of monitoring and access to independent assessment.

With us as recipients, you get an assigned lawyer who receives , makes an initial assessment and gives feedback to you – and to the whistleblower according to the legal requirements. If necessary, we have a dialogue with the whistleblower and are available for legal support and further action.

The investigation function is handled by our own lawyers with experience from global group companies, authorities, the public prosecutor's office and law and auditing firms.

Sköld svart.png

Qnister's solutions are designed to make you confident that they meet high security standards. Below are some examples of our security measures:

*   ISO 27001-certified 
*   Swedish servers 
*   Daily backups 
*   Penetration tested by a third party. Contact our CTO if you want to read their statements. 
*   Security logs 
*   Login with Swedish BankID 
*   Access control 
*   Encryption of information

135A3392.jpg

With our startup package, you will get everything you need to get started with your whistleblowing function. All templates and policies are created and updated by the lawyers at our sister company, Insatt AB.

*   Whistleblower policy 
*   Whistleblowing procedure 
*   Information text about the organization's whistleblowing function for employees and other relevant stakeholders 
*   Information for the data subjects - information about the processing of personal data in connection with the whistleblowing function to comply with GDPR 
*   Implementation checklist for a whistleblowing function 
*   Informational video to be shown to employees and other relevant stakeholders

Software seguro para recibir y gestionar los casos de denuncia de irregularidades.

Qnister Whistle

Säkert visselblåsarsystem för hantering, uppföljning och utredning av visselblåsningsärenden. 

System för visselblåsning

Secure whistleblowing software for receiving and managing whistleblowing cases. 

Qnister Whistle 

Sök i sanktionslistor kvinna konferensrum.jpg

Qnister Sanctions makes it easy to find blacklisted companies and individuals. Search multiple lists at once and see if there are sanctions that could affect your collaboration with a particular actor.

*   Compliance on Autopilot
*   Daily updated
*   All sanction registers within the EU, UK, Switzerland, UN and the US

_Sweden does not impose its own sanctions but adheres to those issued by the EU and the United Nations._

två kvinnor med olika hårfärger på Elmiafältet som skulle kunna vara visselblåsare

två kvinnor på Elmiafältet.jpg

Over the past few years, sanctions lists have grown exponentially. With a single search in **Qnister Sanctions**, you can instantly see whether an organization or individual is subject to any sanctions — information that can be crucial for deciding whether to continue a partnership.

If an entity appears on any of the sanctions lists, you’ll receive an immediate match, along with details about which specific list the organization or person is listed on.

Man på arbetsplats artikel om visselblåsarlagen-MacBook Pro som tillhör GWI.webp

**Since the summer of 2025, Sweden has had a new Sanctions Act. Under this law, a much wider range of actions that violate international sanctions are considered criminal — including attempts to circumvent sanctions and minor violations. At the same time, the current global situation means that politicians and authorities are under pressure to ensure sanctions are effective. The risk of committing a sanctions offence — knowingly or unknowingly — is now greater than ever.**

*   The definition of a sanctions offence has been broadened to include not only direct violations but also circumvention.
*   The maximum penalty for aggravated sanctions offences has increased from four to six years’ imprisonment.
*   The minimum penalty for a standard sanctions offence has been raised from fines to imprisonment.
*   A new offence, _minor sanctions violation_, has been introduced, making even small breaches punishable.
*   A new offence, _repeated sanctions offence_, introduces harsher penalties for those committing multiple violations.
*   Attempting or aiding a sanctions offence is now punishable.
*   Several authorities are now required to report suspected sanctions offences, increasing the likelihood that violations will be detected.
*   The risk for organizations to face corporate fines for sanctions offences has increased.

två män och en kvinna i konferensrum.webp

To stay ahead and avoid legal and financial consequences, consider the following steps:

*   **Understand the international sanctions applicable in Sweden.**  
    Sweden does not impose its own sanctions but follows those issued by the EU and the UN. Conduct a risk analysis of your operations — identify areas with higher exposure to sanctions risks, decide how to manage them, and document your reasoning.
*   **Establish a sanctions policy.**  
    Define how risks should be identified on an ongoing basis and how to act if a potential sanctions violation is suspected. Clarify roles and responsibilities within the organization.
*   **Train your employees.**  
    Ensure your staff understands the sanctions regulations relevant to your business, the key risks involved, and how to act according to your sanctions policy. Emphasize the importance of everyone’s contribution.
*   **Document your compliance efforts.**  
    Keep records of the measures taken to prevent violations — such as what checks were performed, the outcomes, and the rationale behind each decision. Document both transactions you proceeded with and those you declined — demonstrating an active effort to comply can be valuable.
*   **Let Qnister simplify the process.**  
    Although this may seem like a large undertaking, Qnister can help you automate much of the work of screening individuals and companies against sanction lists. Use our logging feature to ensure your compliance efforts are properly documented.
*   **Stay up to date.**  
    Having an existing agreement with an organization before it was added to a sanctions list is not a valid excuse. Since sanction lists are frequently updated, regular follow-ups are essential. Qnister can help you minimize the effort required to maintain ongoing compliance.

Check your business relationships quickly and easily with our search tool — instantly see if a person or company appears on any sanctions list before starting a new partnership.

artikel om sanktioner man på arbetsplats.jpg

Sanctions impose restrictions on the freedom of action of a state, a group or individuals through a unilateral decision of one state or collective decision of other states. This is because the states want to try to influence the behavior of the state, group or individual through various economic and political measures.

Visseblåsarfunktion har positiv påverkan, få personal att titta framåt.

Man tittar bort från bild med molnigt väder.jpg

Averigua si hay personas físicas o empresas en alguna de nuestras listas de sanciones vinculadas.

Qnister Screening

Ta reda på om personer eller företag har sanktioner utfärdade mot sig. 

Sök i sanktionslistor

Find out if persons or companies are listed in any of our linked sanction lists.  

Qnister Sanctions

thumbnail_Leende kvinna konferensrum.jpg

We started out of a need to make laws and regulations easier to understand and comply with. Contact us or book a demo to see how we can help you.

"The software gives us a structured way of working, and a partner who makes sure we are doing things correctly and by law."

 OnePartnerGroup fue un adelantado en materia del RGPD y la denuncia de irregularidades

OnePartnerGroup var tidiga med visselblåsarfunktion

thumbnail_03_OPG_Logo_Svart_RGB.png

03_OPG_Logo_Svart_RGB.png

Kontakta oss personer i konferensrum.jpg

Do you have any questions or want to book a demo? We are ready to guide you through the compliance jungle.

**Another supervisory authority (SA) has struck down on the use of Google Analytics.**

Previously, the Austrian SA and others have disallowed the use of Google Analytics. The Italian SA started an investigation of the Italian company Caffeina Media S.r.l’s use of Google Analytics after a complaint from the interest group NOYB (None of Your Business). The SA found that visitors to the company’s website got their personal data transferred to the US without supplementary measures in addition to the Standard Contractual Clauses. Therefore, the SA concluded that American authorities could access the personal data. The company has got 90 days to make the use of Google Analytics compliant with the GDPR or otherwise the company’s use of Google Analytics will be prohibited.

**Read more:** [Italian SA bans use of Google Analytics: no adequate safeguards for data transfers from Caffeina Media S.r.l. to the U.S. | European Data Protection Board (europa.eu)](https://edpb.europa.eu/news/national-news/2022/italian-sa-bans-use-google-analytics-no-adequate-safeguards-data-transfers_en)

La autoridad de la supervisión competente de Italia prohíbe el uso de Google Analytics

Italienska tillsynsmyndigheten förbjuder användandet av Google Analytics

Italian supervisory authority prohibits use of Google Analytics

**The French data protection authority (CNIL) has fined the company Clearview AI 20 million euros due to their collection of over 20 billion images from web sites and social media platforms.**

By collecting images from websites, social media and videos, the Clearview AI company has created an image bank that they market as an image search engine. Using facial recognition, the search engine can find a person based on their photograph and a "biometric template", that is, a digital representation of a person's physical characteristics (the face in this case). Many data subjects in the image bank are unaware of this and of the possibility of identifying them using the biometric template. According to the CNIL, the processing lacks a legal basis as the company has not obtained consent from the data subjects and cannot be considered to have a legitimate interest in the processing. The CNIL attaches particular importance to the fact that the processing poses very serious risks to the data subjects' fundamental rights.

After Clearview AI did not stop processing the data after the CNIL called on them to do so, the CNIL has now decided to fine the company 20 million euros. The CNIL also announced that Clearview AI must cease all illegal collection and processing of French citizens' personal data. The company is given two months to delete all personal data already collected and for each day that passes these two months, the penalty fee is increased by 100,000 euros.

**Source:** [Facial recognition: 20 million euros penalty against CLEARVIEW AI | CNIL](https://www.cnil.fr/en/facial-recognition-20-million-euros-penalty-against-clearview-ai)

La autoridad francesa «Commission Nationale de l'Informatique et des Libertés» (CNIL) ha impuesto una sanción administrativa de 20 millones de euros contra la empresa Clearview AI

CNIL har utfärdat en sanktionsavgift på 20 miljoner euro mot Clearview AI 

CNIL has issued a penalty fine of 20 million euros against Clearview AI

**Following the disclosure of a data breach, an investor demanded the acquisition of a majority stake in the affected company Vastaamo to be rescinded due to lack of disclosures during the due diligence process.**

During 2018 and 2019, the psychotherapy clinic Vastaamo experienced a data breach that resulted in the leakage of approximately 30,000 patient records. The data breach was not reported to the Finnish supervisory authority until 2020, which subsequently led to a fine of €608,000. The company had taken inadequate security measures, had not reported the data breach to the supervisory authority, and lacked the necessary documentation. Therefore, the supervisory authority deemed that the company had neglected its obligations under the GDPR (General Data Protection Regulation).

During the period after the data breach occurred (but before it was reported to the supervisory authority), an investor acquired a majority stake in Vastaamo. When the data breach was finally reported, and the severity of the breach became public knowledge, the investor demanded that the acquisition be canceled. The investor argued that the failure to disclose the data breach constituted a lack of disclosure during the due diligence process. The acquisition was subsequently canceled.

Source: [Administrative fine imposed on psychotherapy centre Vastaamo for data protection violations | Data Protection Ombudsman’s Office (tietosuoja.fi)](https://tietosuoja.fi/en/-/administrative-fine-imposed-on-psychotherapy-centre-vastaamo-for-data-protection-violations)

Our services for compliance

Our solutions

Qnister GDPR

Qnister Whistle

Qnister Sanctions

We are simplifying compliance

"The software gives us a structured way of working, and a partner who makes sure we are doing things correctly and by law."

Immerse yourself

Italian supervisory authority prohibits use of Google Analytics

CNIL has issued a penalty fine of 20 million euros against Clearview AI

Data protection and data security should be considered during due diligence

Qnister is now on aunetic.com