Skip to main content
EU Whistleblower Directory
NAVEX logo

NAVEX

EthicsPoint hotline and WhistleB whistleblowing products within the NAVEX One GRC suite.

Part of NAVEX One

NAVEX homepage screenshot
Non-EU headquarters — data sovereignty risk

Lake Oswego, Oregon, United States. This vendor is headquartered in the United States. US-incorporated providers are subject to the CLOUD Act, which can compel disclosure of EU customer data regardless of where it is hosted. Transfers require the EU-US Data Privacy Framework or Standard Contractual Clauses — both are subject to legal challenge (see Schrems I and II). For institutional buyers prioritising European data sovereignty, prefer an EU-headquartered provider.

AI processes report content — EU AI Act consideration

This vendor applies AI or machine learning to whistleblower reports (for example summarisation, severity or category classification, drafting replies, or machine translation). Automated processing of disclosures can bring the deployment within scope of the EU AI Act and routes sensitive personal data through a third-party inference provider. Confirm the model provider, its data-retention terms, and whether report content can be excluded before relying on it. Vendor detail: Whistleblowing platform page markets AI-supported case briefs, suggested rewrites, and higher-level insights.

Typical buyer

Organizations wanting NAVEX whistleblowing products with web and phone intake, managed services, WhistleB EU storage disclosures, and public service-provider information.

Distinctive features

  • Web and phone reporting through EthicsPoint Essentials / Professional
  • WhistleB pages state EU storage, customer-controlled encryption, and up to 150 languages
  • Public service-hosting provider page for EthicsPoint

Add-ons and conditions

Costs or terms not included in the headline price.

  • EthicsPoint pricing is not published; WhistleB UK has a published starting price
  • No self-serve trial found on public pages reviewed
  • API access, DPA download, and detailed package limits were not found on current public pages reviewed

Notable

  • NAVEX positions whistleblowing inside NAVEX One, with EthicsPoint Essentials for fast setup, EthicsPoint Professional for enterprise workflows, and WhistleB as a whistleblowing system page.
  • Current EthicsPoint product copy supports web and phone reporting, straightforward case tracking, configurable intake, AI-powered compliance tools, multilingual reporting, and anonymous reporting.
  • NAVEX’s UK WhistleB page says new customers can get started from £75/month and that WhistleB supports up to 150 languages; EthicsPoint pricing remains unpublished on public pages reviewed.
  • The WhistleB privacy/security page states data is stored in the EU with customer-controlled encryption and that NAVEX and suppliers are unable to access sensitive customer data.
  • WhistleB pages also list MFA, encrypted transmission/storage, activity logs, redundancy, Microsoft Azure hosting, Microsoft Translator localization, ISO 27001 adherence, and SOC 2 Type II on the UK page.
  • The EthicsPoint service-hosting provider page publicly lists hosting, translation, interpretation, analytics, and platform service providers, including Europe-limited AWS processing for some services.
  • Public pages reviewed did not disclose a free trial, API access, a DPA download, or article-level EU Directive mapping.

Similar to NAVEX

Other platforms in the directory with overlapping pricing model, certifications, or procurement path.

Frequently asked questions about NAVEX

Answers derived from vendor-published materials dated on this page.

Is NAVEX suitable for SMEs under 250 employees?
NAVEX does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Procurement is sales_only. Organizations wanting NAVEX whistleblowing products with web and phone intake, managed services, WhistleB EU storage disclosures, and public service-provider information.
Which national whistleblower laws does NAVEX explicitly reference?
NAVEX explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, France (Sapin II), United States (Sarbanes-Oxley, Dodd-Frank). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.
Does NAVEX process whistleblower report content with AI?
Yes — NAVEX processes report content with AI (typically for translation, summarisation, or classification). If your compliance posture requires keeping disclosures out of third-party LLMs or machine-translation services, confirm data-processing terms and vendor subprocessors before procurement. Whistleblowing platform page markets AI-supported case briefs, suggested rewrites, and higher-level insights.

Compare NAVEX with another platform

Direct side-by-side comparisons against other tools in this directory.