HiTrust

Notable

• HiTrust is a Dutch provider based in Breda that sells an external whistleblowing channel (meldkanaal) for the Wet bescherming klokkenluiders (Wbk), the Netherlands transposition of EU Directive 2019/1937.
• The product is aimed at SMEs and organizations with 50 or more employees, the threshold at which a reporting procedure became mandatory in the Netherlands from 17 December 2023.
• Reporters can submit anonymously or with their identity disclosed; access to reports is restricted to authorized confidants (vertrouwenspersonen).
• Two subscription tiers are published: Standard at EUR 45/month (scaling with employee count) and Plus at EUR 75/month, which adds an external confidant service; a one-time EUR 495 implementation fee covers the internal procedure and a communication kit.
• A two-month free trial is offered with cancellation during the trial, and the vendor states a channel can be set up in about five minutes.
• Security is described as encryption in transit and at rest, firewalls, intrusion detection, 2FA, and strict access controls, with no IP addresses or identifying data logged to preserve anonymity.
• Public content maps the statutory 7-day acknowledgement and 3-month feedback deadlines and outlines a multi-step handling process.
• No ISO 27001 certification was found on public pages reviewed; the platform is described as GDPR (AVG) compliant.
• Hosting location, specific EU data residency, a sub-processor list, API access, and reporter-facing languages beyond Dutch were not documented on public pages reviewed.
• HiTrust also runs a one-day confidant training (Stoomcursus vertrouwenspersoon) and works with the legal firm RIDE; it is unrelated to the US HITRUST security-certification body.