TrueSpeak

Italian-run multi-locale whistleblowing SaaS with published per-plan pricing from €19/month and a locale site for each of eight markets.

Facts

Website: truespeak.eu(opens in new tab)
Headquarters: Milan, Italy (Barcelona and Paris offices)
Hosting: The German locale states data is hosted in a Frankfurt am Main data centre. The English privacy policy says only that data is processed "mainly within the territory of the European Union" and names no provider or sub-processor.
Pricing: Starter €19/month or €190/year. Professional €39/month or €390/year. Voice €49/month or €490/year. Enterprise €119/month or €1,190/year. Annual billing is 17% cheaper than monthly.
Both monthly and annual billing are offered on every tier. A 30-day money-back guarantee is advertised: "After registration, you have 30 days to request an instant refund." Plans differ by administrator seats, reporting languages and retention, not by compliance scope — only Starter is described as "No compliance".
Languages on reporting form: 8
Ownership: Private
Customers: 1,000+ (vendor claim)
Product scope: Standalone whistleblower product
Encryption posture: End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned
Legal entity: True Solutions S.r.l. VAT IT14288140966, R.E.A. Milano 2772480 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication ✓
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Italy (D.Lgs. 24/2023, Modello 231 under D.Lgs. 231/2001)
Germany (HinSchG, LkSG)
France (Loi Sapin II)

Typical buyer

Smaller organisations in Italy, Germany, France or Spain that want a published monthly price, a locale site naming their own transposition law, and a 30-day refund window rather than a procurement cycle.

Distinctive features

Full price matrix published for four tiers, monthly and annual, with no quote gate
Each of the eight locale sites names its own transposition law in the page title, and the Italian site adds Modello 231 information flows and PEC notification
Monthly security audits are published as a dated timeline, with the four most recent audit dates listed and the next one scheduled

Add-ons and conditions

Costs or terms not included in the headline price.

The Starter tier is described as "No compliance" and keeps only 6 months of report history; EU Directive conformity starts at Professional
Reporting languages are capped per tier (1 / 3 / 4), so a multi-country deployment needs Enterprise
Two-factor authentication is a Voice-tier feature, not a baseline control
SSO (OIDC / SAML 2.0), custom domain and multi-group management are Enterprise only
No ISO 27001 or comparable certification is named; the published assurance is the vendor's own monthly SAST and DAST audit
The marketing site runs third-party visitor-identification services (RB2B and Retention.com opt-out links are named in the privacy policy)

Notable

Operated as a trade name of True Solutions S.r.l. (VAT IT14288140966, R.E.A. Milano 2772480), registered at Foro Buonaparte 59, Milan, with listed offices in Barcelona and Paris and a separate support number for each.
The site ships in eight languages and each locale is positioned on its own national law rather than on the Directive alone: D.Lgs. 24/2023 and Modello 231 in Italian, HinSchG and LkSG in German, Loi Sapin II in French.
The German locale is the only one that names a hosting location — a data centre in Frankfurt am Main. The English privacy policy states only that processing happens “mainly within the territory of the European Union”, names no sub-processor, and reserves the right to transfer to third countries under standard contractual clauses.
Retention is set by plan rather than by the customer: 6 months on Starter, 5 years on Professional, Voice and Enterprise, counted from case closure, with a case auto-closing after 90 days of inactivity from both sides.
The security page publishes a dated audit timeline (most recent 1 September 2026, next scheduled 1 October 2026) covering SAST, DAST, OWASP Top 10 and CVE cross-checks. Detailed reports are offered “upon request to qualified auditors”. No third-party certification is claimed.
A mobile app for iOS and Android is documented, with on-device session storage, no analytics, and anonymous submission supported.
The privacy policy discloses advertising-attribution processing and names opt-out endpoints for RB2B and Retention.com — website visitor-identification services that associate site activity with an email address. This applies to the marketing site, not the reporting surface.

Status: not yet scored

TrueSpeak was added from the September 2026 AI-citation coverage audit, where it was the single most-cited whistleblowing vendor absent from this directory. The entry above records what the vendor publishes. It carries no 25-criterion rubric score yet and does not appear in any country ranking; a score will be added when the product has been reviewed under the same tier rules as every other scored tool.

Frequently asked questions about TrueSpeak

Answers derived from vendor-published materials dated on this page.

Is TrueSpeak suitable for SMEs under 250 employees?

Yes — TrueSpeak's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Starter €19/month or €190/year. Professional €39/month or €390/year. Voice €49/month or €490/year. Enterprise €119/month or €1,190/year. Annual billing is 17% cheaper than monthly. Smaller organisations in Italy, Germany, France or Spain that want a published monthly price, a locale site naming their own transposition law, and a 30-day refund window rather than a procurement cycle.

Which national whistleblower laws does TrueSpeak explicitly reference?

TrueSpeak explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Italy (D.Lgs. 24/2023, Modello 231 under D.Lgs. 231/2001), Germany (HinSchG, LkSG), France (Loi Sapin II). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does TrueSpeak process whistleblower report content with AI?

No — TrueSpeak does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.