FaceUp

Whistleblowing, employee-relations, and workplace-compliance platform from the Czech Republic.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: AI-Powered Hotline conducts natural voice conversations, asks follow-ups, and converts calls into structured reports.

Rubric score

28 / 50

Evidence tier P

Selected public-source evidence corrected on 2026-10-23 and 2026-10-24 (d21, e25); historical product-review date and access tier retained. No reporter submission or handler retest.

How this score is produced →

Facts

Website: www.faceup.com(opens in new tab)
Headquarters: Czech Republic
Pricing: Not published — pricing page now uses quote/contact-sales CTAs instead of the previously embedded EUR/GBP/USD/CZK matrix.
Current pricing pages lead to a quote or demo. The pricing FAQ describes a platform fee plus chosen capabilities, priced on headcount, with monthly, quarterly or annual billing; annual billing saves up to 30%. Terms of Service section 2.8 provides for a 14-day or otherwise agreed trial only if granted, and also permits paid evaluations. The previous public seven-day trial form was not found in the rendered pricing page.
Languages on reporting form: 113
Founded: 2017
Domain registered: August 2001 faceup.com
Customers: 3,800+ organizations across 70+ countries (vendor homepage claim; the pricing page still says 3,600+)
Product scope: Standalone whistleblower product
Encryption posture: End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (reject)
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API ✓
Free trial ✓
Two-factor authentication —
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001:2022
SOC 2 (hosting servers; current public wording)

National laws referenced

EU Directive 2019/1937
Germany (HinSchG)
California workplace-violence prevention

Typical buyer

Organizations needing a broad reporting and case-management platform with hotline options, 113 languages and selectable data hosting, through sales-led procurement.

Distinctive features

Trial subscriptions are described in the terms, subject to provider agreement; no public self-serve trial form was found
113 languages, web/mobile/hotline intake, two-way anonymous chat, iOS/Android apps, multiple forms, webhooks, API, Zapier, and Make integrations
ISO 27001:2022, SOC 2 hosting servers, optional E2EE, metadata removal, no IP logging, altered voice messages, SSO, 2FA, penetration testing, public DPA, and public subprocessor details

Add-ons and conditions

Costs or terms not included in the headline price.

The previously visible employee-band price matrix was not found on current public pricing page output reviewed
Pricing and trial access are sales-led; paid evaluations are also permitted by the terms
Exact EU official-language list was not disclosed on public pages reviewed

Notable

FaceUp’s current pricing page output reviewed no longer exposes the previous EUR employee-band price matrix; visible CTAs are quote/contact-sales and demo oriented.
Public pages support 3,800+ organizations in 70+ countries (homepage; the pricing page says 3,600+), 113 languages, anonymous reporting, two-way chat, case management, investigation workflows, audit traceability, webhooks/API, Zapier/Make, and iOS/Android apps.
The current rendered pricing page has quote and demo calls to action. Terms section 2.8 allows a 14-day or otherwise agreed trial if granted and warns that trial features may be limited; it also permits paid evaluations.
Hotline options are add-ons: automated phone hotline, live hotline, and AI-powered hotline.
The security page states ISO 27001:2022, SOC 2 hosting servers, no IP storage, metadata removal, altered voice messages, optional E2EE, SSO, 2FA, penetration testing, and flexible data hosting.
The DPA publishes subprocessor details, including AWS regions in California, Ireland/EU, UAE, and Australia, plus OpenAI for the AI-powered hotline with API usage and no training on customer data.
Current vendor pages reviewed did not disclose pricing amounts. The pricing FAQ describes a platform fee plus chosen capabilities priced on headcount, with monthly, quarterly or annual billing. Trial subscriptions require provider agreement; no current self-serve trial form was verified.

Frequently asked questions about FaceUp

Answers derived from vendor-published materials dated on this page.

Is FaceUp suitable for SMEs under 250 employees?

FaceUp does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Organizations needing a broad reporting and case-management platform with hotline options, 113 languages and selectable data hosting, through sales-led procurement.

Which national whistleblower laws does FaceUp explicitly reference?

FaceUp explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG), California workplace-violence prevention. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does FaceUp process whistleblower report content with AI?

Yes — FaceUp processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. AI-Powered Hotline conducts natural voice conversations, asks follow-ups, and converts calls into structured reports.