EQS Integrity Line

Whistleblowing module of the EQS Compliance COCKPIT with Essential, Professional, and Enterprise packages. EQS acquired France's Data Legal Drive (DLD Sapin II) in 2024.

Expired certificate Part of EQS Compliance COCKPIT

Published certificate has expired

The ISO/IEC 27001:2022 certificate this vendor publishes (DQS, 541715 ISMS22) expired on 8 May 2025. No current certificate was published when we checked on 24 October 2026. The security page still states that EQS Group is ISO 27001 certified, and the certificate's own verification link returned "page not found".

Ask the vendor for its current certificate and scope before you rely on this certification.

View the expired certificate

DQS certificate 541715 ISMS22 for EQS Group GmbH, ISO/IEC 27001:2022, valid from 2024-07-28, valid until 2025-05-08 — Page 1 of the certificate the vendor links, captured 24 October 2026: www.integrityline.com/wp-content/uploads/2024/12/2024_certificate_ISO27001_EQS_en.pdf

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: EQS Group's main site markets AI-powered case management for its suite. Integrity Line pages reviewed on 2026-10-24 name integrated machine translation of reports but no other AI features.

Rubric score

27 / 50

Evidence tier P

Public pages only. Essential free trial was not exercised.

How this score is produced →

Facts

Website: www.integrityline.com(opens in new tab)
Headquarters: Munich, Germany
Pricing: Prices vary by country page. UK package page: Essential from £85 / month, Professional from £170 / month. French package page: Essential from 99 € / month, Professional from 200 € / month. Spanish home page: Essential from 99 € / month, Professional from 129 € / month (the Spanish package page shows no prices). German package page shows no prices; the global English package URL returned 404. Enterprise on request everywhere. No page states VAT or the billing term.
Essential offers a free trial (UK: Start free trial; FR: Demander un essai gratuit), trial length not stated. Professional and Enterprise are demo-led. Telephone reporting channel, training and machine translation are on Professional and Enterprise only.
Languages on reporting form: 80
Founded: 2000
Domain registered: January 2012 integrityline.com
Ownership: Private — owned by Thoma Bravo since February 2024, delisted from the Frankfurt open market that year. Acquired Data Legal Drive SAS (RCS Nanterre B 839 793 791, Levallois-Perret) in 2024 for €35m.
Customers: 14,000+ customers across the EQS Group platform (vendor claim)
Product scope: Module of EQS Compliance COCKPIT
Encryption posture: End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (reject)
DNSSEC: Unsigned
Legal entity: EQS Group GmbH VAT DE208208257 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✓
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

~~ISO/IEC 27001:2022 (DQS 541715 ISMS22)~~ Expired certificate
ISAE 3000 Type I and II
WACA Bronze

National laws referenced

EU Directive 2019/1937
Germany (HinSchG)
United Kingdom (PIDA)
France (Sapin II / Loi Waserman)

Typical buyer

Organizations wanting an EQS suite module with EU hosting, over 80 reporting languages, accessibility certification, and an Essential free trial.

Distinctive features

80+ reporting languages with automated or configurable translation
ISAE 3000 Type I/II audits and WACA Bronze accessibility certification
Anonymous dialogue, no IP/location/device data storage, and Europe-hosted ISO 27001-certified data storage

Add-ons and conditions

Costs or terms not included in the headline price.

German package page and the Spanish package page show no prices; the global English package URL returns 404
Prices are shown only on some country pages (UK, France, Spain home page) and differ by market; none states VAT or billing term
API access was not disclosed on public pages reviewed

Notable

EQS publishes three packages: Essential, Professional, and Enterprise.
EQS’ main site states 14,000+ customers around the globe; this appears to be an EQS Group platform-scale claim, not an Integrity Line-only count.
Prices differ by country page (checked 2026-10-24): UK Essential from £85 / month and Professional from £170 / month; France Essential from 99 € / month and Professional from 200 € / month; Spanish home page Essential from 99 € / month and Professional from 129 € / month. The German and Spanish package pages show no prices, and the global English package URL returns 404. Enterprise is on request. No page states VAT or billing term.
Essential has a public free-trial CTA. Professional and Enterprise use Book a demo. The UK FAQ says out-of-the-box setups can be ready within a few days and customised setups usually take 4 to 8 weeks.
Package features include anonymous dialogue, over 80 reporting languages, case management, automated or configurable translation, deadline monitoring, case documentation, 2FA, and European ISO 27001-certified hosting.
The security page states EQS Group and data centres are ISO 27001 certified, the hotline has ISAE 3000 Type I and II audits, the Munich East data centre hosts the system, and EQS says it cannot access customer or whistleblower data.
The UK packages FAQ states that no IP addresses, location data or device details are stored, that reports are encrypted with PGP 2048-bit RSA, and that the key is in the customer’s hand.
The features page lists a revision log per case and activity, Excel download of cases, and handler-created cases from a letter, email, phone call or meeting.
EQS’ product counts differ by page: the home page says 4000 customers use Integrity Line, the product page says over 2,500.
Public pages reviewed did not disclose API access, a public DPA, or a public subprocessor list.

Data Legal Drive - 2026-09-25

EQS bought the French compliance-software vendor Data Legal Drive (RGPD plus DLD Sapin II, the French anti-corruption and internal-alert product) in 2024 for €35m against roughly €5m ARR. The brand is now being absorbed: datalegaldrive.com returns 301 to www.eqs.com/fr, and the Sapin II product page redirects to the EQS anti-corruption solution page, which markets a “dispositif d’alerte professionnelle” and names Integrity Line as the product behind it. Only legacy blog and legal pages still resolve on the old domain.

No separate directory entry is warranted, on the same reasoning that keeps EthicsPoint and WhistleB inside the NAVEX entry: a retired brand pointing at this product is this product. The old brand names redirect here instead.

The French-market consequence for a buyer is simply that EQS entered France by acquisition rather than by localisation, so a French organisation evaluating “Data Legal Drive” today is evaluating EQS.

Their French-law coverage survived the move. integrityline.com/fr/ names Loi Sapin 2, Loi Waserman and Directive 2019/1937 in its own heading, and eqs.com/fr carries a Sapin 2 resource hub, so France and the French laws are recorded here alongside Germany and the UK. An earlier draft of this section claimed the Sapin II mapping had not reappeared under the EQS brand; that was inferred from one solution page that happens not to name it, and it is wrong.

Frequently asked questions about EQS Integrity Line

Answers derived from vendor-published materials dated on this page.

Is EQS Integrity Line suitable for SMEs under 250 employees?

Likely yes — EQS Integrity Line's entry-tier pricing sits in the €50–100/month band, workable for most 50–249-employee organisations. Prices vary by country page. UK package page: Essential from £85 / month, Professional from £170 / month. French package page: Essential from 99 € / month, Professional from 200 € / month. Spanish home page: Essential from 99 € / month, Professional from 129 € / month (the Spanish package page shows no prices). German package page shows no prices; the global English package URL returned 404. Enterprise on request everywhere. No page states VAT or the billing term. Organizations wanting an EQS suite module with EU hosting, over 80 reporting languages, accessibility certification, and an Essential free trial.

Which national whistleblower laws does EQS Integrity Line explicitly reference?

EQS Integrity Line explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG), United Kingdom (PIDA), France (Sapin II / Loi Waserman). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does EQS Integrity Line process whistleblower report content with AI?

Yes — EQS Integrity Line processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. EQS Group's main site markets AI-powered case management for its suite. Integrity Line pages reviewed on 2026-10-24 name integrated machine translation of reports but no other AI features.