SpeakUp

Whistleblowing and ethics platform from People Intouch / SpeakUp (Amsterdam).

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: Sienna AI markets an AI Voice Agent, Sienna Insights, and AI translation/transcription/routing into case management.

Rubric score

24 / 50

Evidence tier P

Selected public-source evidence corrected on 2026-10-23 and 2026-10-24; historical product-review date and access tier retained. No reporter submission or handler retest.

How this score is produced →

Facts

Website: www.speakup.com(opens in new tab)
Headquarters: Amsterdam, Netherlands
Pricing: Not published. Pricing is customized to company size and required features; a quote is requested before a demo.
The current pricing page describes service for organizations from 500 employees to global enterprises. Its structured data also lists an offer for organizations up to 1,000 employees on fixed monthly pricing and custom Enterprise pricing above 1,000 employees; no amounts are shown. Case management is included; without a support package the vendor describes self-onboarding.
Languages on reporting form: 100
Founded: 2004
Domain registered: June 1996 speakup.com
Ownership: Private — backed by Fortino Capital
Customers: Homepage states 750+ organizations and 10M+ employees protected; about page states 600+ companies and 5M+ individuals (vendor claims)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication —
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001
ISO 27701 (product and pricing pages say certified; assurances page says its guidelines are followed; certificate not verified)
ISAE 3000 Type II / SOC 2 quarterly audit
TISAX

National laws referenced

EU Directive 2019/1937
Germany (Supply Chain Act / LkSG)

Typical buyer

Organizations from 500 employees seeking a multi-channel ethics and compliance platform with AI-assisted case management and enterprise assurance.

Distinctive features

100+ reporting languages stated on homepage, product and pricing pages
Web, mobile app, phone line, phone drop box, and AI voice agent reporting
Product FAQ states that no IP addresses, metadata, or identifying information is collected or stored
ISO 27001; ISO 27701 (described as certification or as guidance on different pages); ISAE 3000 Type II / SOC 2 and TISAX assurance claims

Add-ons and conditions

Costs or terms not included in the headline price.

Pricing is quote-based for all packages on the current public page
Contract duration and billing cadence are not published on the current pricing page
EU hosting location, public API, DPA, and subprocessor list were not disclosed on public pages reviewed

Source review - 2026-10-24

The homepage now states 750+ organizations and 10M+ employees protected, and product pages state 100+ languages. The SpeakUp Report page lists web, mobile app, phone line, phone drop box, and AI voice agent intake; its FAQ states that no IP addresses, metadata, or identifying information is collected or stored, and that most organizations are live within days. Product and pricing pages describe ISO 27701 as a certification, while the assurances page still says its guidelines are followed; no certificate was reviewed. Hosting location was still not stated on the pages reviewed. No scoring criterion was directly contradicted, so scores are unchanged.

Source review - 2026-10-23

The current assurances page states ISO 27001 certification and adherence to ISO 27002/27701 guidelines. ISO 27701 is therefore recorded as alignment rather than a separately verified certificate. Quote-based pricing and the stated 500-employee target remain unchanged.

Notable

SpeakUp says it was founded in Amsterdam as People Intouch in 2004 and now has offices in Amsterdam, Bengaluru, and New York.
Public pages support web, mobile app, phone, phone drop box, and AI voice agent reporting, 100+ languages, AI-powered compliance and ethics reporting, dashboards, case management, and disclosure/approval modules.
The current pricing page publishes no amounts. It requests company size and feature requirements to prepare a quote, and describes the platform as serving organizations from 500 employees.
The homepage states 750+ organizations and 10M+ employees protected; the about page states 600+ companies and 5M+ individuals.
Assurance copy states SpeakUp is ISO 27001 certified, follows ISO 27002 and ISO 27701 guidance, and is audited to ISAE 3000 Type II / SOC 2 and TISAX quarterly.
The product FAQ states that no IP addresses, metadata, or identifying information is collected or stored, and that most organizations are live within days.
Public pages reviewed did not disclose EU data-centre location, public API access, a DPA, or a subprocessor list.

Frequently asked questions about SpeakUp

Answers derived from vendor-published materials dated on this page.

Is SpeakUp suitable for SMEs under 250 employees?

SpeakUp does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Organizations from 500 employees seeking a multi-channel ethics and compliance platform with AI-assisted case management and enterprise assurance.

Which national whistleblower laws does SpeakUp explicitly reference?

SpeakUp explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (Supply Chain Act / LkSG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does SpeakUp process whistleblower report content with AI?

Yes — SpeakUp processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. Sienna AI markets an AI Voice Agent, Sienna Insights, and AI translation/transcription/routing into case management.

Similar to SpeakUp

Other platforms in the directory with overlapping pricing model, certifications, or procurement path.

Sources and verification

Every fact on this page comes from SpeakUp's own published materials. These are the pages that were read, and the date they were read.

Last verified

24 October 2026

6 of the vendor pages cited below has changed since this entry was verified. What this means

Cited pages last re-fetched 26 Oct 2026

Something out of date? Tell us →

Listed here? Show it on your own site →