Cortina Compliance Hub

Modular German compliance platform from Cortina Consult. Whistleblowing (HinSchG) is one of three core modules; from €45/month.

Part of Cortina Compliance Hub

Rubric score

24 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: cortina-consult.com/software/(opens in new tab)
Headquarters: Münster, Germany
Hosting: German data centres / German data holding (vendor claim); specific data-centre location and provider not disclosed on public pages reviewed
Pricing: Compliance Hub from €45/month for one core module, including the Hinweisgeberschutz/whistleblowing module. Separate managed services, including external whistleblower officer, are advertised from €125/month.
Published starting prices are public; detailed module configuration is calculator / offer-led. No free trial found.
Languages on reporting form: Not published
Domain registered: May 2017 cortina-consult.com
Ownership: Private — Cortina Consult GmbH (Hafenweg 24, 48155 Münster)
Customers: 400+ managed customers across consulting and software (vendor claim); 500+ completed projects
Product scope: Module of Cortina Compliance Hub

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned
Legal entity: Cortina Consult GmbH HRB 13714 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API ✓
Free trial ✗
Two-factor authentication —
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001 (vendor-stated for Compliance Hub; certificate/scope not found)

National laws referenced

Germany (HinSchG)
EU Directive 2019/1937

Cortina Compliance Hub homepage screenshot

Typical buyer

German SMEs that want the whistleblowing channel bundled with data-protection (DSMS) or information-security (ISMS) compliance under one platform — optionally paired with an external compliance officer.

Distinctive features

Modular pricing — €45/month for just the whistleblower module
REST API with pre-built integrations for Personio, Azure, and SAP SuccessFactors
map[Hybrid model:pair the software with a managed External Whistleblower Officer (eMSB) service from €125/month]
German data-residency positioning is public
Vendor states Compliance Hub is ISO 27001-certified

Add-ons and conditions

Costs or terms not included in the headline price.

Reporting-form language coverage not published
Entry pricing (€45/month) is per-module; final configuration is offer-led
Managed external-officer service (eMSB, from €125/month) is billed separately from the software
ISO 27001 is vendor-stated, but no certificate/scope page was found on the public pages reviewed
No free trial advertised

Notable

Cortina Consult GmbH is headquartered in Münster and markets 400+ managed customers, TÜV-certified advisers, and 10+ years of experience.
Hybrid offering — consulting practice plus a software product line.
The software line is “Compliance Hub”: core modules include DSMS for data protection, ISMS for information security, and Hinweisgeberschutz for whistleblowing.
Whistleblower module described as HinSchG-compliant with anonymous reporting and structured case management; audit trail and deadline tracking included.
The company also markets a standalone whistleblower portal brand called Parlabox (launched 2023); documented pricing paths lead to Compliance Hub.
REST API with named integrations to Personio, Microsoft Azure, and SAP SuccessFactors is public on the software page.
Security posture is vendor-stated rather than trust-centre documented: German data centres, end-to-end encryption, 99.9% availability, and ISO 27001 certification are claimed, but no certificate/scope or hosting-provider page was found.
Related managed services (separately priced): External Data Protection Officer, External Information Security Officer, External Whistleblower Officer — each from €125/month.
Reporting-form languages, customer names, exact data-centre location/provider, public sub-processor list, and product-level ISO certificate scope were not disclosed on public pages reviewed.
Best fit when the buyer wants both software and a managed officer service from one vendor, or is already deploying DSMS/ISMS.

Frequently asked questions about Cortina Compliance Hub

Answers derived from vendor-published materials dated on this page.

Is Cortina Compliance Hub suitable for SMEs under 250 employees?

Cortina Compliance Hub does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. German SMEs that want the whistleblowing channel bundled with data-protection (DSMS) or information-security (ISMS) compliance under one platform — optionally paired with an external compliance officer.

Which national whistleblower laws does Cortina Compliance Hub explicitly reference?

Cortina Compliance Hub explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Germany (HinSchG), EU Directive 2019/1937. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Cortina Compliance Hub process whistleblower report content with AI?

No — Cortina Compliance Hub does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.