# Whispli

> Whispli — pricing not published, EU region selectable. Independent profile: vendor-published facts, each with its source and the date it was checked.

Canonical: https://whistleblowertools.eu/tools/whispli/
Last updated: 2026-10-24

## Notable

- Whispli now uses current product paths such as `/use-case/whistleblowing`, `/whistleblowing-management-system`, and `/whistleblowing-hotline`; the previously listed `/solutions/whistleblower/` URL returned 404.
- Product pages state 300+ organisations, deployment in 60+ countries, 70+ languages (the features page says 60 languages for translation), anonymous two-way Safe Inbox, web/mobile/email/QR/Voice AI intake, configurable forms, automated case creation, routing, SLAs, retention, and audit-ready logs.
- The security page states ISO 27001 certification, SOC 2 Type II certification, 2FA, SSO, penetration testing, metadata removal, no IP address or caller ID collection, secure translation on Whispli infrastructure, and regional hosting. Product pages describe ISO 27001 as covering the whole platform, not just hosting, name AWS, Azure and Scaleway as hosting options, say customer keys stay with the customer, and mention structured data export for audits and regulators.
- France-specific pages name Loi Waserman and Sapin 2. Public pages also reference the EU Whistleblower Protection Directive, GDPR, SOX, UK FCA rules, Australian laws, and ISO 37002 principles.
- The pricing page publishes four packages (Essentials, Plus, Business, Enterprise) without numeric prices and states a three-year contract with annualized payment. Standard hosting regions are the USA, France, Germany and Australia, with region choice from Plus; mobile apps and self on-boarding are listed in Essentials; KMS is listed in Enterprise. No public self-serve trial was found.
- The company story page lists offices in Boston, Paris and Sydney.

## Non-EU headquarters — data sovereignty risk

This vendor is headquartered outside the European Union. EU personal data processed by the vendor is a cross-border transfer under GDPR Chapter V and depends on an adequacy decision, Standard Contractual Clauses, or a derogation. Non-EU providers introduce jurisdictional exposure to third-country data-access regimes. For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.

## Facts

- website: https://www.whispli.com

- headquarters: Sydney, Australia (offices in Paris and Boston)

- pricing: Plan names and features are public, but numeric prices are not published; procurement remains quote-based.

- pricing note: The pricing page names four quote-only packages (Essentials, Plus, Business, Enterprise) and states a three-year contract with annualized payment, excluding tax. Hosting-region choice starts at Plus; customer-managed keys (KMS) sit in Enterprise. Confirm the selected package, seats, hosting region and add-ons with sales.

- languages: 70

- domain registered: 2015-12-15

- customers: 300+ organisations; deployed in 60+ countries (vendor claim)

- product scope: standalone

- encryption: customer_key

- ideal for: Large multinational organizations needing configurable workflows, Safe Inbox, Voice AI hotline, regional hosting, and customer-managed encryption keys.

- last verified: 2026-10-24

| Capability | Published evidence |
| --- | --- |
| anonymous reporting | Yes |
| case management | Yes |
| multi channel | Yes |
| api access | Yes |
| free trial | No |
| two factor auth | Yes |
| audit log | Yes |
| uses ai | Yes |

Voice AI hotline captures, structures, and routes hotline reports into cases.

## certifications

- ISO 27001

- SOC 2 Type II

## national laws supported

- EU Directive 2019/1937

- France (Loi Sapin II)

- France (Loi Waserman)

- Germany

- United States (SOX)

- Australia

- United Kingdom FCA rules

## strengths

- Web, mobile app, email, QR code, and Voice AI hotline intake are disclosed publicly

- 70+ languages, anonymous two-way Safe Inbox, configurable workflows, SLAs, retention, routing, and audit logs

- ISO 27001, SOC 2 Type II, customer-managed encryption keys (Enterprise package), API/integrations, and selectable hosting regions including France and Germany

## Assessment

Base score: 32/50. Access tier: P. Reviewed: 2026-05-24.

Public pages only. No reporter submission or handler environment was reviewed.

### Is Whispli suitable for SMEs under 250 employees?

Whispli does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Large multinational organizations needing configurable workflows, Safe Inbox, Voice AI hotline, regional hosting, and customer-managed encryption keys.

### Which national whistleblower laws does Whispli explicitly reference?

Whispli explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, France (Loi Sapin II), France (Loi Waserman), Germany, United States (SOX), Australia, United Kingdom FCA rules. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

### Does Whispli process whistleblower report content with AI?

Yes — Whispli processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. Voice AI hotline captures, structures, and routes hotline reports into cases.

## Sources

- https://www.whispli.com/use-case/whistleblowing

- https://www.whispli.com/whistleblowing-management-system

- https://www.whispli.com/whistleblower-platform-features

- https://www.whispli.com/whistleblowing-hotline

- https://www.whispli.com/security/

- https://www.whispli.com/pricing/

- https://www.whispli.com/fr/loi-waserman-protection-lanceur-alerte-2022/

- https://www.whispli.com/data-processing-addendum-europe

- https://www.whispli.com/whispli-story