preeco

German HinSchG-focused whistleblower platform with 26 reporting languages and German data hosting.

Rubric score

20 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: www.preeco.de(opens in new tab)
Headquarters: Germany
Hosting: Germany; hosting provider not named on public pages reviewed
Pricing: Not published on the public page.
Product-specific licensing; SaaS subscription. Individual preeco modules can be licensed separately.
Languages on reporting form: 26
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned
Legal entity: preeco GmbH HRB 737082 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API ✗
Free trial ✗
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

Germany (HinSchG)
EU Directive 2019/1937

Typical buyer

German SMEs subject to HinSchG that want a domestic-hosted tool with pre-populated breach categories, example report content, and multilingual web reporting.

Distinctive features

Data hosting in Germany is stated on the public product page
26 reporting languages are stated on the public product page
Reporting form ships with the HinSchG breach categories pre-populated and example report content per category
GDPR compliance stated with 2FA and automated anonymization controls

Add-ons and conditions

Costs or terms not included in the headline price.

Pricing not disclosed on the public site; individual modules can be licensed separately, which complicates budget modelling
Phone, email, or other non-web intake channels were not disclosed on public pages reviewed
Hosting provider and hosting certification were not named on the public product page reviewed

Notable

preeco pre-populates the reporting form with German Whistleblower Protection Act breach categories and per-category example narratives.
The product page reviewed states data hosting in Germany, but did not name the hosting provider or hosting certification.
Public whistleblower page reviewed states GDPR compliance, 2FA, automatic anonymization on activation, and encrypted communication.
Pricing is not disclosed on the public site. The vendor also licenses individual modules separately, so a full-stack quote may differ materially from a starter-module quote.
Public product page states 26 languages.
Phone, email, or other non-web intake channels were not disclosed on public pages reviewed.
No vendor-published whistleblower-product ISO 27001 or BSI certification claim was found on public pages reviewed.
No public API, integration documentation, or subprocessor list was found on public pages reviewed.

Frequently asked questions about preeco

Answers derived from vendor-published materials dated on this page.

Is preeco suitable for SMEs under 250 employees?

preeco does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. German SMEs subject to HinSchG that want a domestic-hosted tool with pre-populated breach categories, example report content, and multilingual web reporting.

Which national whistleblower laws does preeco explicitly reference?

preeco explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Germany (HinSchG), EU Directive 2019/1937. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does preeco process whistleblower report content with AI?

No — preeco does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.