Confide

Singapore-based whistleblowing and case-management platform with AI-assisted intake and investigations, published annual pricing, and default Frankfurt hosting.

Non-EU HQ

Non-EU headquarters — data sovereignty risk

Singapore. This vendor is headquartered outside the European Union. EU personal data processed by the vendor is a cross-border transfer under GDPR Chapter V and depends on an adequacy decision, Standard Contractual Clauses, or a derogation. Non-EU providers introduce jurisdictional exposure to third-country data-access regimes. For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: Echo asks follow-up questions during intake; Compose drafts investigation documents; Sentinel analyses connections across cases. These are vendor-described features, not independently tested.

Rubric score

24 / 50

Evidence tier P

Selected public-source evidence refreshed on 2026-10-18; earlier product-testing scope and date are retained. No reporter submission or handler retest.

How this score is produced →

Facts

Website: www.confide.ai/(opens in new tab)
Headquarters: Singapore
Hosting: Frankfurt, Germany by default; other deployment regions are available by arrangement (vendor-stated).
Pricing: The public calculator initially shows USD 2,000/year for the 0-500 employee band. Enterprise security and complex data migration are each USD 1,500/year extra; premium onboarding is quote-based. Other employee bands are selectable.
Base fee includes unlimited users, reporters, cases, channels and storage, all languages, standard migration and three hours of onboarding. Confirm the selected employee band and deployment region with sales. No self-serve free trial found.
Languages on reporting form: Not published
Founded: 2023
Domain registered: September 2023 confide.ai
Ownership: Private, Confide Global Pte. Ltd.
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (quarantine)
DNSSEC: Unsigned
Legal entity: Confide Global Pte. Ltd.

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API ✓
Free trial ✗
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001
SOC 2 (AICPA)

National laws referenced

EU Directive 2019/1937

Typical buyer

Organizations seeking AI-assisted whistleblowing intake and investigation workflows, with sales-led deployment and default EU hosting.

Distinctive features

Founder-led by Pav Gill, the whistleblower who exposed the Wirecard fraud
ISO 27001, SOC 2, and GDPR compliance stated on public pages
Multi-channel intake via forms, voice, meetings, and API
Case management from intake to resolution with dashboards, reports, and export
Anonymous reporting listed as a supported feature
Default report-data hosting in Frankfurt, Germany

Add-ons and conditions

Costs or terms not included in the headline price.

Enterprise security and complex data migration each add USD 1,500/year
No self-serve free trial found on public pages reviewed
Other deployment regions require agreement; confirm the selected region
All languages are included in the published base offer; an exact language list was not verified
EU Directive 2019/1937 article-level mapping was not documented on public pages reviewed

Notable

Operated by Confide Global Pte. Ltd., headquartered in Singapore and founded by Wirecard whistleblower Pav Gill.
Public intake options include online forms, voice and API, with anonymous two-way messaging and reporter-selected language.
AI features support follow-up questions during intake, preparation of investigation documents, and analysis of connections across cases. Investigators review the resulting material.
Case management includes evidence, configurable workflows, dashboards, role-based case access, conflict checks and a vendor-described immutable audit trail.
The public calculator initially displays USD 2,000/year for 0-500 employees. Company size and optional services affect the quote; enterprise security and complex migration each add USD 1,500/year.
Default hosting is Frankfurt, Germany; other regions can be arranged. ISO 27001 certification and SOC 2 Type II assurance are vendor claims on the public page.
Public sources only were reviewed. No reporter submission, authenticated handler environment, certificate validity check or AI behavior test was performed.

Frequently asked questions about Confide

Answers derived from vendor-published materials dated on this page.

Is Confide suitable for SMEs under 250 employees?

Confide's entry-tier pricing starts above €100/month, on the heavy side for a 50–249-employee organisation comparing to flat-rate alternatives. The public calculator initially shows USD 2,000/year for the 0-500 employee band. Enterprise security and complex data migration are each USD 1,500/year extra; premium onboarding is quote-based. Other employee bands are selectable. Organizations seeking AI-assisted whistleblowing intake and investigation workflows, with sales-led deployment and default EU hosting.

Which national whistleblower laws does Confide explicitly reference?

Confide explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Confide process whistleblower report content with AI?

Yes — Confide processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. Echo asks follow-up questions during intake; Compose drafts investigation documents; Sentinel analyses connections across cases. These are vendor-described features, not independently tested.