FaceUp

Whistleblowing, employee-relations, and workplace-compliance platform from the Czech Republic.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: AI-Powered Hotline conducts natural voice conversations, asks follow-ups, and converts calls into structured reports.

Rubric score

26 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: www.faceup.com(opens in new tab)
Headquarters: Czech Republic
Pricing: Not published — pricing page now uses quote/contact-sales CTAs instead of the previously embedded EUR/GBP/USD/CZK matrix.
Pricing and security pages expose a 7-day free-trial form with all premium features; terms still describe trial subscriptions only when granted by the provider.
Languages on reporting form: 113
Founded: 2017
Domain registered: August 2001 faceup.com
Customers: 3,500+ organizations across 70+ countries (vendor claim)
Product scope: Standalone whistleblower product
Encryption posture: End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (reject)
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API ✓
Free trial ✓
Two-factor authentication —
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001:2022
SOC 2

National laws referenced

EU Directive 2019/1937
Germany (HinSchG)
California workplace-violence prevention

Typical buyer

Organizations needing a broad reporting and case-management platform with hotline options, 113 languages, a public trial form, and selectable data hosting.

Distinctive features

Public 7-day free-trial form on pricing/security pages
113 languages, web/mobile/hotline intake, two-way anonymous chat, iOS/Android apps, multiple forms, webhooks, API, Zapier, and Make integrations
ISO 27001:2022, SOC 2, E2EE, SSO, 2FA, penetration testing, public DPA, and public subprocessor details

Add-ons and conditions

Costs or terms not included in the headline price.

The previously visible employee-band price matrix was not found on current public pricing page output reviewed
Pricing remains sales-led despite free-trial CTAs
Exact EU official-language list was not disclosed on public pages reviewed

Notable

FaceUp’s current pricing page output reviewed no longer exposes the previous EUR employee-band price matrix; visible CTAs are quote/contact-sales and free-trial oriented.
Public pages support 3,500+ organizations in 70+ countries, 113 languages, anonymous reporting, two-way chat, case management, investigation workflows, audit traceability, webhooks/API, Zapier/Make, and iOS/Android apps.
Pricing/security page forms advertise a 7-day free trial with all premium features.
Hotline options are add-ons: automated phone hotline, live hotline, and AI-powered hotline.
The security page states ISO 27001:2022, SOC 2, no IP storage, metadata removal, E2EE, SSO, 2FA, penetration testing, and flexible data hosting.
The DPA publishes subprocessor details, including AWS regions in California, Ireland/EU, UAE, and Australia, plus OpenAI for the AI-powered hotline with API usage and no training on customer data.
Current vendor pages reviewed did not disclose pricing amounts. Terms describe trial subscriptions only when granted by the provider, while the public pricing/security pages also display a 7-day trial form.

Frequently asked questions about FaceUp

Answers derived from vendor-published materials dated on this page.

Is FaceUp suitable for SMEs under 250 employees?

FaceUp does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. Organizations needing a broad reporting and case-management platform with hotline options, 113 languages, a public trial form, and selectable data hosting.

Which national whistleblower laws does FaceUp explicitly reference?

FaceUp explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG), California workplace-violence prevention. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does FaceUp process whistleblower report content with AI?

Yes — FaceUp processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. AI-Powered Hotline conducts natural voice conversations, asks follow-ups, and converts calls into structured reports.