Skip to main content
EU Whistleblower Directory
Phoenix logo

Phoenix

Swiss whistleblowing SaaS with Bulgarian and Romanian language pages, public pricing, and a free starter tier.

Non-EU headquarters — data sovereignty risk

Switzerland. This vendor is headquartered outside the European Union. EU personal data processed by the vendor is a cross-border transfer under GDPR Chapter V and depends on an adequacy decision, Standard Contractual Clauses, or a derogation. Non-EU providers introduce jurisdictional exposure to third-country data-access regimes. For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.

Typical buyer

Buyers who want a multilingual whistleblowing SaaS with real self-serve pricing and a free entry tier, but do not require country-specific Bulgaria or Romania law positioning.

Distinctive features

  • Bulgarian- and Romanian-language public site and pricing pages are live
  • Public pricing includes both monthly and annual options plus a free starter tier
  • map[Broad product surface is visible publicly:multi-channel intake, case management, and multi-role accounts]

Add-ons and conditions

Costs or terms not included in the headline price.

  • The named hosting posture is Switzerland, not an EU country
  • No ISO 27001 or equivalent certification is stated publicly

Notable

  • Phoenix is not a Bulgaria- or Romania-native vendor, but it does maintain Bulgarian- and Romanian-language home and pricing pages, which is a stronger entry signal than most cross-border tools expose publicly.
  • The commercial surface is unusually open: a free starter tier, published euro pricing, annual and monthly billing options, and no-credit-card messaging on the starter path.
  • Publicly documented product scope is broad: multi-organisation support, 50+ languages, web / phone / instant-message / post / chat channels, case management, and three named user roles (Manager, Operator, Agent).
  • The Bulgaria and Romania weakness is legal rather than commercial. I did not find a public Bulgaria-law page, a public Law 361/2022 page, or a local customer / partner motion in either market.
  • Security messaging emphasizes Switzerland and “Swiss security” rather than named EU hosting, which weakens both country modifiers under this rubric.
  • The public pricing page also exposes a WordPress TinyMCE asset chain, which is a real trust deduction under criterion D20.

Scoring review - 2026-04-23

Scored under the 25-criterion rubric v2 at access tier P (public pages only; no reporter submission or handler account reviewed).

Base score: 21 / 50 in Bulgaria and Romania contexts. Bulgaria country bonus: 1 / 6. Romania country bonus: 1 / 6.

CategoryScoreMax
A. Legal compliance416
B. Reporter experience (BG)310
B. Reporter experience (RO)310
C. Handler experience710
D. Security18
E. Commercial66

What lifts Phoenix up: buyers can actually evaluate the commercial model without a sales conversation. That alone makes it more legible than many Bulgaria- and Romania-facing local offers. The public product surface also looks like real software, not a service wrapper.

What caps it: Phoenix does not show enough Bulgaria- or Romania-specific legal posture to compete with the best local-facing tools. Under this rubric, Bulgarian- or Romanian-language marketing alone is not enough. The public pricing page’s TinyMCE asset chain also blocks a clean score on the EOL-components check.

Similar to Phoenix

Other platforms in the directory with overlapping pricing model, certifications, or procurement path.

Frequently asked questions about Phoenix

Answers derived from vendor-published materials dated on this page.

Is Phoenix suitable for SMEs under 250 employees?
Phoenix does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Procurement is self_serve. Buyers who want a multilingual whistleblowing SaaS with real self-serve pricing and a free entry tier, but do not require country-specific Bulgaria or Romania law positioning.
Which national whistleblower laws does Phoenix explicitly reference?
Phoenix explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Whistleblower Directive (generic), GDPR. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.
Does Phoenix process whistleblower report content with AI?
No — Phoenix does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.

Compare Phoenix with another platform

Direct side-by-side comparisons against other tools in this directory.