betterjobs

Free policy template · Word

Whistleblower Policy

A whistleblower policy (also called a vigil mechanism or speak-up policy) lets employees and others report suspected fraud, bribery, financial misstatement, safety violations or serious policy breaches — including anonymously — and protects them from retaliation. It sets how reports are received, investigated and escalated to the Audit Committee or leadership.

  • Editable Word (.docx)
  • Made for India
  • 16 fill-in fields highlighted
  • Free, no sign-up

Preview of the policy

[Highlighted] = fill in
[Company Logo][Company Name]

WHISTLEBLOWER POLICY (VIGIL MECHANISM)

Policy No.:
[Reference Number]
Version:
[Version Number]
Effective Date:
[Date]
Policy Owner:
[Ethics / Vigilance Officer]

1. Purpose

[Company Name] encourages directors, employees and stakeholders to raise genuine concerns about wrongdoing without fear. This policy provides safe channels and protects those who report in good faith.

2. Scope

It is open to directors, employees, contract staff, vendors and customers. It covers concerns about the company's business, not personal grievances, which are handled under the Grievance Policy.

3. Definitions

  • Whistleblower: a person who reports a concern under this policy.
  • Protected disclosure: a report made in good faith about suspected wrongdoing.
  • Ethics Officer: [Name], responsible for receiving and coordinating investigations.

4. Policy

Concerns that may be reported include fraud, theft or embezzlement; bribery or corruption; manipulation of accounts or records; breach of law or regulation; serious health, safety or environmental risks; leakage of confidential or personal data; abuse of authority; and serious breaches of the Code of Conduct.

  1. Reports may be made by email to [Ethics Email], hotline [Phone Number], or letter marked 'Confidential' to [Address]. Concerns involving senior management may be sent directly to the [Audit Committee Chair / Board] at [Email].
  2. Anonymous reports are accepted and will be examined if they contain enough detail.
  3. The identity of the whistleblower is kept confidential and shared only where necessary for investigation or required by law.
  4. No whistleblower acting in good faith will be dismissed, demoted, harassed or otherwise retaliated against.
  5. Deliberately false reports made with malicious intent may lead to disciplinary action.

5. Procedure

  1. The Ethics Officer acknowledges the report within [Number] working days where contact details are available.
  2. A preliminary review decides whether the concern falls under this policy.
  3. An investigator independent of the area concerned is appointed; the subject is given an opportunity to respond.
  4. Investigation is completed within [Number] days where possible; findings and actions are recorded.
  5. The whistleblower is informed that the matter has been addressed, subject to confidentiality.
  6. A summary of reports and outcomes is presented to the [Audit Committee / Board] every [Number] months.

6. Responsibilities

  • Employees: report genuine concerns promptly and cooperate.
  • Ethics Officer: receive, record, coordinate and protect identities.
  • Investigators: act impartially.
  • Audit Committee / Board: oversee the mechanism.

7. Non-compliance

Anyone who retaliates against a whistleblower, breaches confidentiality or obstructs an investigation will face disciplinary action, up to termination.

8. Review & Approval

This policy is reviewed annually and approved by the [Board / Audit Committee].

Approved by
[Authorised Signatory]
[Designation]
Date: [Date]
Ethics Officer
[Name]
Date: [Date]

What this template includes

  • Reportable concerns — fraud, bribery, accounting, safety, data leaks
  • Multiple channels — email, hotline, letter, direct access to Audit Committee chair
  • Anonymity and confidentiality options
  • Protection from retaliation and good-faith requirement
  • Investigation process and timelines
  • Reporting to Audit Committee / Board

When to use it

  • Setting up a vigil mechanism required for certain companies
  • Employees fear raising fraud concerns with their managers
  • Launching an anonymous ethics hotline or email
  • Investors or global clients require a speak-up channel

How to customise this template

  1. 1Insert hotline, email and postal address
  2. 2Name the Ethics/Vigilance Officer and Audit Committee chair
  3. 3Check whether the Companies Act vigil mechanism applies to you
  4. 4Set investigation timelines
  5. 5Decide how anonymous reporters receive updates

HR tips

  • Publish the channels on notice boards and the intranet
  • Separate grievances (personal issues) from whistleblower concerns
  • Protect the reporter's identity strictly
  • Report trends to leadership even if individual cases are small

Certain companies must establish a vigil mechanism under the Companies Act, 2013, and listed entities have additional requirements. Review this template with your company secretary or legal adviser.

For HR & hiring managers

Hire top talent from BetterJobs

Experienced and fresher candidates across India — blue, grey and white collar. Post a job in 5 minutes and start receiving applications.

  • Post in 5 minutesDescribe the role in one line — we write the job description.
  • Verified applicantsEvery applicant has a verified mobile number.
  • Resume databaseSearch experienced candidates by skill, city and experience.

Frequently asked questions

What is a vigil mechanism?+

It is the formal whistleblower channel that certain companies are required to set up under the Companies Act, 2013, allowing directors and employees to report genuine concerns, with safeguards against victimisation.

Can a whistleblower complaint be anonymous?+

Many policies accept anonymous reports, though investigation is easier when the reporter can be contacted. Offer channels that allow anonymous follow-up.

Is a salary complaint a whistleblower issue?+

Usually no. Personal employment issues go through the grievance policy. Whistleblower channels are for wrongdoing that affects the company or others, such as fraud or safety violations.

All 50 hr policies →