Trusty Compliance

Swiss compliance platform with annual whistleblowing subscriptions from EUR 49/month, alongside screening, EUDR, policy and training tools.

Non-EU HQ Part of Trusty compliance platform

Non-EU headquarters — data sovereignty risk

Hünenberg, Zug, Switzerland. This vendor is headquartered outside the European Union. EU personal data processed by the vendor is a cross-border transfer under GDPR Chapter V and depends on an adequacy decision, Standard Contractual Clauses, or a derogation. Non-EU providers introduce jurisdictional exposure to third-country data-access regimes. For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.

Rubric score

17 / 50

Evidence tier P

Selected public-source evidence corrected on 2026-10-23; historical product-review date and access tier retained. No reporter submission or handler retest.

How this score is produced →

Facts

Website: trusty.report(opens in new tab)
Headquarters: Hünenberg, Zug, Switzerland
Hosting: Hosted in an ISO 27001-certified Hetzner Online GmbH data centre in Germany (vendor-stated; the ISO certificate is the data centre's, not Trusty's).
Pricing: Whistleblowing subscriptions billed annually: LITE EUR 49/month (1 user, 1 language, secure two-way dialogue and basic case management); STANDARD EUR 69/month (2 users, 2 languages, guided forms, notifications and 2FA); ADVANCED EUR 99/month (unlimited users and languages, roles and advanced workflows). Prices exclude VAT.
Annual totals are €588 / €828 / €1,188 excluding VAT. Seven-day trial, with the yearly plan starting only after confirmation. A separate Premium option for custom requirements is quote-based. Pay by invoice or card; no whistleblowing credit-based price was found.
Languages on reporting form: 6
Ownership: Private — Trusty AG (CHE-374.090.316 MWST)
Customers: 4,000+ companies in 80+ countries (vendor claim)
Product scope: Module of Trusty compliance platform

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (quarantine)
DNSSEC: Unsigned
Legal entity: Trusty AG

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✓
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
NIS2 Directive (cybersecurity vulnerability reporting)

Typical buyer

Organizations seeking flat annual whistleblowing subscriptions with a seven-day trial inside a broader Swiss compliance platform.

Distinctive features

Published whistleblowing tiers at EUR 49 / 69 / 99 per month, billed annually
Secure two-way dialogue and basic case handling included from LITE
Seven-day trial with conversion only after confirmation
German default hosting, with other regions available on request

Add-ons and conditions

Costs or terms not included in the headline price.

Annual billing applies to every whistleblowing tier
LITE has one user and one language; STANDARD has two of each
Unlimited users, all languages and advanced roles require ADVANCED
US and Swiss hosting are offered on request; confirm the contracted region

Notable

LITE is EUR 49/month billed annually and now includes secure two-way dialogue, a whistleblower inbox and basic case handling. The previous EUR 29 collection-only offer is no longer listed.
STANDARD is EUR 69/month billed annually, with two users, two languages, guided intake, report notifications and 2FA.
ADVANCED remains EUR 99/month billed annually, with unlimited users and languages, roles, workflows, insights and NIS2 vulnerability reporting.
The current page describes annual subscriptions paid by invoice or card. The trial lasts seven days and converts only after confirmation.
Default hosting is in Germany; the product page also offers US or Swiss hosting on request. Hosting selection therefore matters to EU-residency requirements.
ISO 27001 refers to the hosting data centre, not certification of Trusty itself.
Public pages only were reviewed; no authenticated reporter or handler flow was tested.

Frequently asked questions about Trusty Compliance

Answers derived from vendor-published materials dated on this page.

Is Trusty Compliance suitable for SMEs under 250 employees?

Yes — Trusty Compliance's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a whistleblowing channel. Whistleblowing subscriptions billed annually: LITE EUR 49/month (1 user, 1 language, secure two-way dialogue and basic case management); STANDARD EUR 69/month (2 users, 2 languages, guided forms, notifications and 2FA); ADVANCED EUR 99/month (unlimited users and languages, roles and advanced workflows). Prices exclude VAT. Organizations seeking flat annual whistleblowing subscriptions with a seven-day trial inside a broader Swiss compliance platform.

Which national whistleblower laws does Trusty Compliance explicitly reference?

Trusty Compliance explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, NIS2 Directive (cybersecurity vulnerability reporting). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Trusty Compliance process whistleblower report content with AI?

No — Trusty Compliance does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.