Hintbox

German whistleblowing platform with employee-band pricing from EUR 99/month, 30 languages, AI translation, and ISO 27001 certification.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it.

Rubric score

30 / 50

Evidence tier P

Selected public-source evidence refreshed on 2026-10-18; earlier product-testing scope and date are retained. No reporter submission or handler retest.

How this score is produced →

Facts

Website: www.hintbox.de(opens in new tab)
Headquarters: Germany
Hosting: Germany; Hetzner-hosted ISO/IEC 27001-certified data centre (vendor-stated)
Pricing: EUR 99/month (1-49 employees), EUR 129/month (50-99), EUR 149/month (100-249), from EUR 249/month (250+). Billed annually: EUR 1,188 / 1,548 / 1,788 / from 2,988, excluding 19% VAT.
Unlimited handler accounts. Optional onboarding EUR 390 once; training EUR 199/hour; email intake from EUR 29/month, telephone voice bot from EUR 49/month, own domain from EUR 29/month, billed annually. Free test/demo offered by request.
Languages on reporting form: 30
Founded: 2019
Customers: 1,000+ companies and government agencies (vendor claim)
Product scope: Standalone whistleblower product
Encryption posture: End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (reject)
DNSSEC: Unsigned
Legal entity: lawcode GmbH HRB 28116 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API ✗
Free trial ✓
Two-factor authentication ✓
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001

National laws referenced

Germany (HinSchG)
Austria

Typical buyer

DACH-region companies subject to HinSchG with ISO 27001 procurement requirements.

Distinctive features

Published employee-band pricing with unlimited handler accounts
ISO 27001 certification and German data residency are stated by the vendor
30 reporting languages with AI translation between handler and reporter

Add-ons and conditions

Costs or terms not included in the headline price.

19% German VAT added to all prices
Phone bot, email intake, custom domain, onboarding, and training are paid add-ons
No public subprocessor list was found on the public pages reviewed

Notable

One public whistleblowing offer priced by employee band, from EUR 99/month for 1-49 employees, billed annually.
Handler accounts are unlimited; employee count determines the price band.
Reporting form available in 30 languages; AI-based translation between handler and reporter.
End-to-end encryption; 2FA; isolated per-customer database (no shared multi-tenant DB).
Automatic virus scanning and metadata removal from uploads.
Multi-client capability for group companies operating multiple entities.
Optional add-ons: phone bot intake, email intake, custom domain, onboarding, and training.
Premium tier adds dynamic no-code forms, live chat for caseworkers, and granular external-editor permissions.
Hosted by Hetzner in a German ISO-certified data centre, according to vendor copy reviewed.
No public API documentation or subprocessor list was found on the public pages reviewed.

Frequently asked questions about Hintbox

Answers derived from vendor-published materials dated on this page.

Is Hintbox suitable for SMEs under 250 employees?

Likely yes — Hintbox's entry-tier pricing sits in the €50–100/month band, workable for most 50–249-employee organisations. EUR 99/month (1-49 employees), EUR 129/month (50-99), EUR 149/month (100-249), from EUR 249/month (250+). Billed annually: EUR 1,188 / 1,548 / 1,788 / from 2,988, excluding 19% VAT. DACH-region companies subject to HinSchG with ISO 27001 procurement requirements.

Which national whistleblower laws does Hintbox explicitly reference?

Hintbox explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Germany (HinSchG), Austria. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Hintbox process whistleblower report content with AI?

Yes — Hintbox processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement.