WorkInConfidence
UK anonymous speak-up and whistleblowing channel with two-way anonymous conversations and HR case management, from WorkInConfidence Ltd.
Non-EU headquarters — data sovereignty risk
East Grinstead, United Kingdom. This vendor is headquartered outside the European Union. EU personal data processed by the vendor is a cross-border transfer under GDPR Chapter V and depends on an adequacy decision, Standard Contractual Clauses, or a derogation. Non-EU providers introduce jurisdictional exposure to third-country data-access regimes. For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.
Typical buyer
UK public sector bodies, NHS trusts, law firms, and employers wanting anonymous speak-up plus HR case management from a UK-hosted platform available on the G-Cloud framework.
Distinctive features
- Truly anonymous two-way conversations documented on public pages
- Combined anonymous speak-up and HR case management in one platform
- UK (AWS) data storage is clearly disclosed
- Listed on the UK G-Cloud framework with a published per-user price range
- Cyber Essentials, IASME assurance, and NHS Data Security and Protection Toolkit referenced
Add-ons and conditions
Costs or terms not included in the headline price.
- The vendor website is demo-led; the only published rate is the G-Cloud per-user range (GBP 0.06 to GBP 1.13 per user per month)
- No free trial is offered per the G-Cloud listing
- No ISO 27001 certification found; AWS provides hosting-level assurance only
- Data is stored in the United Kingdom (non-EU); no EU data residency option was disclosed
- No public API
Notable
- Operated by WorkInConfidence Ltd, registered in England and Wales (company no. 08255296), with a registered office in East Grinstead and a stated client base of 100+ UK organisations and 200,000+ employees.
- The platform spans anonymous speak-up, HR case management, employee surveys, discussion forums, and an external speak-up phone line; this profile focuses on the anonymous speak-up and whistleblowing case-management product.
- Core differentiator is “truly anonymous, two-way conversations” where handlers can follow up with a reporter without the reporter’s identity being revealed unless they choose to disclose it.
- The product is a web-based application accessible on any device with a browser, with multiple language options stated for international organisations.
- Legal framing is UK-centric: public pages reference gov.uk whistleblowing guidance and do not name the Public Interest Disclosure Act 1998 or the EU Whistleblowing Directive 2019/1937.
- The G-Cloud service definition states hosting on Amazon Web Services with data stored in the United Kingdom, encryption of personally identifiable data and dialogues at rest, and TLS 1.2 or above in transit.
- Multi-factor authentication is offered as an optional client choice via mobile device; audit and system logs are retained for at least 12 months.
- The vendor claims Cyber Essentials Plus and IASME cyber assurance on its website and references the NHS Data Security and Protection Toolkit; no ISO 27001 certification was found on public pages reviewed. The G-Cloud listing reviewed indicated Cyber Essentials but not Cyber Essentials Plus, so the certification level is stated inconsistently across public sources.
- Pricing is demo-led on the vendor site; the only published figure is a per-user range of GBP 0.06 to GBP 1.13 per user per month in the G-Cloud service definition, which also states no free trial and no API.
- End-of-contract data deletion is stated to occur within three months of termination, with an optional paid 12-month run-off period.
Similar to WorkInConfidence
Other platforms in the directory with overlapping pricing model, certifications, or procurement path.
Comunica Whistleblowing Italian whistleblowing software from Unione Fiduciaria S.p.A. (Milan), used by more than 200,000 users and widely adopted in the banking and insurance sectors.
Raportare Avertizori Romanian self-serve whistleblowing channel operated by the law firm Avocati CHIRIC & CHIRIC, built around Law 361/2022 and EU Directive 2019/1937.
e-nform Polish whistleblowing channel from E-nform Sp. z o.o. with Azure-hosted or on-premises deployment, IP-free intake, and published Silver/Gold tiers.
preeco German HinSchG-focused whistleblower platform with 26 reporting languages and German data hosting.
Frequently asked questions about WorkInConfidence
Answers derived from vendor-published materials dated on this page.
Is WorkInConfidence suitable for SMEs under 250 employees?
WorkInConfidence does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Procurement is demo_first. UK public sector bodies, NHS trusts, law firms, and employers wanting anonymous speak-up plus HR case management from a UK-hosted platform available on the G-Cloud framework.
Which national whistleblower laws does WorkInConfidence explicitly reference?
WorkInConfidence explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: United Kingdom (public whistleblowing guidance referenced; no statute named on public pages). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.
Does WorkInConfidence process whistleblower report content with AI?
Yes — WorkInConfidence processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. Homepage states AI-enhanced analysis and case management, offered on an opt-in basis.
Compare WorkInConfidence with another platform
Direct side-by-side comparisons against other tools in this directory.