Intermediary AS

Whistleblower Reporting Channel — Varslingskanal

R-15 · Intermediary AS · Published April 2026
R-15

Document Information

R-15
Whistleblower Reporting Channel
Intermediary AS
NO 925 615 471 MVA
CEO / Daglig leder
A.7 · Personnel Security
Active
1.0 — April 2026

1 Introduction

Intermediary AS (org. no. 925 615 471) is committed to conducting business with integrity, transparency, and responsibility. We encourage employees, suppliers, partners, and other stakeholders to report concerns about serious misconduct or unethical behavior in a safe and confidential manner.

🛡️ Your protection is guaranteed

Whistleblowers are protected against retaliation under the Norwegian Working Environment Act (arbeidsmiljøloven) §§ 2A-1 to 2A-7. You may report anonymously, and all reports are treated with strict confidentiality.

2 What Can Be Reported?

You may report concerns related to:

⚠️ Not covered by this channel

General dissatisfaction, salary disputes, or personal grievances should be addressed through normal HR processes. This channel is for serious, reportable concerns.

3 Who Can Report?

CategoryDescription
EmployeesCurrent and former employees, including part-time and temporary staff
Students & InternsAll students and interns engaged with Intermediary AS
ContractorsConsultants, freelancers, and temporary workers
Suppliers & PartnersBusiness partners, vendors, and supply chain participants
Other StakeholdersAny party connected to Intermediary AS operations

4 Reporting Channels

You can report concerns through any of the following channels. All channels are available 24/7.

📝

This Form (below)

Submit a report directly through this page. Can be done anonymously.

📧

Email

contact@intermediary.no
Available 24/7

📞

Phone — CTO

+47 965 03 953
Priority incidents 24/7

💬

Microsoft Teams

Direct message to CTO
During business hours

5 How Reports Are Handled

All reports follow a structured 6-phase incident response process (A16-POL-001):

PhaseActionTimeframe
1. DetectReport is received and logged in the QMS system automaticallyImmediate
2. AssessSeverity is evaluated; preliminary investigation initiatedWithin 48 hours
3. InvestigateThorough investigation by independent function1–4 weeks
4. RespondCorrective actions are determined and assignedUpon completion
5. ResolveActions are implemented and verifiedPer action plan
6. CloseCase is closed; lessons learned documentedAfter verification

🔒 Automatic QMS Registration

All reports submitted through this form are automatically registered as a deviation (avvik) in the company's QMS System (ISO 27001) under area A.7 — Personnel Security. This ensures full traceability and that corrective actions are tracked until closure.

6 Anonymity & Data Protection

All personal data is handled in accordance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.

7 External Reporting

If you do not wish to report internally, or if you believe your report has not been adequately handled, you may contact the relevant public authorities:

AuthorityAreaWebsite
ArbeidstilsynetWorking environment, labor lawarbeidstilsynet.no
ØkokrimEconomic and environmental crimeokokrim.no
DatatilsynetData protection, GDPR violationsdatatilsynet.no
NSM / NCSCCybersecurity incidentsnsm.no
PolitietCriminal matterspolitiet.no

8 Submit a Report

Please complete the form below with as much detail as possible. Fields marked with (optional) may be left blank.


Your contact information (fully optional — leave blank for anonymous reporting)

✓ Report Submitted Successfully

Your report has been received and automatically registered as a deviation in the QMS system.

Reference ID:

If you provided contact information, you will be contacted within 48 hours. The case will be tracked in the QMS system until closure.

9 Related Documents

DocumentTitleStatus
R-15Varslingskanal — Whistleblower Reporting Channel (this document)Active
R-16Åpenhetsloven — Transparency Act Statement 2026Active
R-17Sustainability Report (ESG) 2025Active
R-18Etiske retningslinjer — Code of ConductActive
R-56CSRD Voluntary ESG Report 2025Active
A16-POL-001Hendelseshåndtering — Incident Response PolicyActive

10 Approval

This document is approved and maintained by the management of Intermediary AS.

Morten Ims
CEO / Daglig leder · Intermediary AS
Document Owner
Approved April 2026 · Version 1.0