otris

German legal-tech suite vendor from Dortmund with public SaaS whistleblower pricing and ISO 27001-certified hosting.

Part of otris legal-tech suite

Rubric score

20 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: www.otris.de/en/products/whistleblower-software/(opens in new tab)
Headquarters: Germany (Dortmund)
Pricing: Standard from EUR 299/month for 50-249 employees; Enterprise from EUR 499/month for 250-999 employees; Enterprise plus quote-based for 1,000+ employees. Prices require at least 24 months.
Legal-support add-on advertised at EUR 999/year. Free online demo advertised; sales contact available via vertrieb@otris.de.
Languages on reporting form: Not published
Ownership: otris software AG
Product scope: Module of otris legal-tech suite
Encryption posture: End-to-end

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (reject)
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API ✗
Free trial ✗
Two-factor authentication ✓
Audit log ✓
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001

National laws referenced

Germany (HinSchG)
EU Directive 2019/1937

Typical buyer

German mid-market and enterprise organisations that want a whistleblowing channel within a broader legal-tech or compliance-management suite.

Distinctive features

ISO 27001-certified hosting / cloud operation is stated by the vendor
Reporter interface meets WCAG 2.1 accessibility criteria
Published SaaS package prices for 50-249 and 250-999 employee bands
Part of an established legal-tech suite with stated SSO and interface options

Add-ons and conditions

Costs or terms not included in the headline price.

Public monthly prices require a minimum 24-month term
Legal-support add-on is priced separately at EUR 999/year
Language count is not disclosed on public pages reviewed

Notable

otris is a Dortmund-based legal-tech suite vendor, not a whistleblower-only specialist. The whistleblower product has a dedicated page and is positioned alongside other otris products (contract management, compliance, document management).
Vendor states ISO 27001-certified cloud operation and German data-centre hosting.
ISO 37301 appears in broader compliance-management positioning, but no vendor-published whistleblower-product ISO 37301 certification was found on public pages reviewed.
The whistleblower product page reviewed positions the public packages as SaaS; no current public evidence was found for full on-premises operation of the whistleblowing channel.
WCAG 2.1 accessibility compliance is stated for the reporter system.
Public package pricing is listed for two employee bands, with Enterprise plus available on request. No self-serve trial was found.
Product pages mention SSO and interfaces, but no public API documentation was found.
Public pages reviewed describe the product as multilingual, but do not disclose a language count.

Frequently asked questions about otris

Answers derived from vendor-published materials dated on this page.

Is otris suitable for SMEs under 250 employees?

otris does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. German mid-market and enterprise organisations that want a whistleblowing channel within a broader legal-tech or compliance-management suite.

Which national whistleblower laws does otris explicitly reference?

otris explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Germany (HinSchG), EU Directive 2019/1937. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does otris process whistleblower report content with AI?

No — otris does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.