Included
- Anonymous speak-up and whistleblowing intake
- Case management and investigation workflow
- Conflicts-of-interest and gifts registers
- Code-of-conduct attestation and policy management
- Ethics and compliance training records
15 platforms
UBSW.EU rates software sold to organisations for internal reporting, investigations or ethics-programme records such as conflicts, gifts, policy attestations and training. A product must document at least one of these functions to be included. Each listing is assessed against the same 25 criteria across five areas. Scores reflect the evidence a vendor publishes and the access reviewed; they are not legal certifications or procurement recommendations.
Entries last verified 22 October 2026. 9 requirement shortlists in this category.
Scope and rating
Same test for every listing
25 criteria
Five areas: speak-up, case work, ethics programme, security and hosting, and commercial transparency. An explicit “no” scores zero. If an answer is not found in the reviewed vendor pages, it scores zero and is marked not found.
Read the scoring methodRatings are assessments of published evidence, not legal compliance certificates. Each platform profile lists the vendor pages reviewed, the review date, the full criterion breakdown and any findings that could not be confirmed.
11 / 15
publish no entry price
A published price can be approved before a call; a quote cannot.
7 / 15
do not name an EU hosting country
An EU region with no country named is recorded as a narrower fact.
2 / 15
publish no security certification
No ISO 27001, SOC 2 or national scheme on the pages reviewed.
12 / 15
publish no conflicts-of-interest register
A speak-up channel is not an ethics programme.
UBSW ratings
Ethics and compliance
Atlanta, Georgia, United States Languages not published
Ethics and compliance module inside the OneTrust privacy, security and GRC platform, covering speak-up intake, case management and disclosures.
Ethics and compliance
Tallinn, Estonia 60 languages
Estonia-headquartered platform with a published rate card from 89 €/month, EU hosting and an on-premise option.
Ethics and compliance
Lake Oswego, Oregon, United States 60 languages
EthicsPoint hotline and WhistleB speak-up products inside the NAVEX One governance, risk and compliance suite.
Ethics and compliance
Richmond, Virginia, United States 200 languages
Managed ethics hotline with case management, compliance training and sanction screening.
Ethics and compliance
Stockholm, Sweden 50 languages
Swedish speak-up platform with published employee-band pricing and EU hosting.
Ethics and compliance
Munich, Germany 80 languages
Whistleblowing module of the EQS Compliance COCKPIT, sold with published country-level starting prices.
Ethics and compliance
Toronto, Ontario, Canada 60 languages
Risk and compliance suite whose ethics module covers intake, investigations and reporting.
Ethics and compliance
Sydney, Australia 70 languages
Enterprise speak-up and investigation platform with EU hosting options and a documented API.
Ethics and compliance
Stockholm, Sweden 60 languages
Swedish-built speak-up channel, now sold inside NAVEX, with EU hosting and handled cases.
Ethics and compliance
Amsterdam, Netherlands 100 languages
Amsterdam-built speak-up platform with EU hosting and 100 reporting languages.
Ethics and compliance
Prague, Czech Republic 113 languages
Czech speak-up and employee-relations platform with 113 languages and EU hosting.
Ethics and compliance
Cagliari, Italy 10 languages
Italian whistleblowing platform from DigitalPA, with published starting prices for SMEs.
Ethics and compliance
Los Angeles, California, United States Languages not published
Employee speak-up and feedback platform with anonymous intake, case management and AI-assisted triage.
Ethics and compliance
Ottawa, Ontario, Canada 150 languages
Case-management platform used for whistleblowing, HR and ethics investigations, with a documented API.
Ethics and compliance
Charlotte, North Carolina, United States Languages not published
Ethico's managed hotline and case-intake service, previously presented under the ComplianceLine name.
Shortlists
The vendor names an EU country where report data is stored.
8 of 15 platforms qualify
An entry price appears on the vendor's own website.
4 of 15 platforms qualify
You can open an account and evaluate the product yourself.
2 of 15 platforms qualify
A current ISO 27001 certificate is published, with scope stated.
12 of 15 platforms qualify
Conflicts declarations are collected, reviewed and retained in the product.
3 of 15 platforms qualify
Gifts, hospitality and entertainment are declared and approved in the product.
2 of 15 platforms qualify
Report content does not pass through a published AI feature.
12 of 15 platforms qualify
Directive 2019/1937 is referenced on the product or legal pages.
10 of 15 platforms qualify
A documented API lets cases reach an existing GRC or case system.
6 of 15 platforms qualify
UBSW.EU includes software sold to organisations to receive internal concerns, manage investigations or run ethics-programme records. A product must document at least one of those functions. General-purpose GRC suites without a separately identifiable ethics product, hotline answering services without software, and HR case tools without ethics or speak-up intake are excluded.
A whistleblowing channel satisfies the reporting duty in Directive 2019/1937. An ethics programme usually needs more: conflicts declarations, a gifts register and attestation records are audit evidence rather than legal duties. Most platforms in this category sell the channel alone, which is why the directory lists the two separately.
The Directive does not require EU hosting. It requires confidentiality, secure processing and a documented data-protection posture, and many EU buyers add residency as a procurement condition. Vendors headquartered outside the EU are flagged on every entry so the question is visible before a shortlist is built.
Directive 2019/1937 sets the minimum: confidential intake, acknowledgment within seven days, feedback within three months, protection against retaliation and a documented retention policy. National transposition laws add requirements, and several member states go further than the Directive on anonymity and on external reporting.
No. A conflicts declaration has to be attributable to the person making it, or it cannot be reviewed or retained as a record. The anonymity question belongs to the speak-up channel, not to the declarations register, and vendors that conflate the two are usually selling a channel with a form attached.
In this category, eleven of fifteen platforms publish no entry price. Of those that do, starting points range from roughly 29 € to 99 € per month for a reporting channel, with audit logs and single sign-on often gated to higher tiers. A full ethics programme with conflicts and gifts registers is quoted rather than priced.
Under Directive 2019/1937 the reporting person must be acknowledged within seven days and receive feedback within three months, extendable to six in complex cases. Deadline tracking is recorded as a capability on every entry, because a channel that cannot show the timer cannot evidence compliance.
It is not. No vendor pays for a listing, a position or a score, there is no affiliate revenue, and outbound links carry a utm_source parameter only so vendors can attribute traffic. Vendors can correct any fact or dispute any score, and every correction is dated on the entry.