PRIMA Compliance

German whistleblowing system operated by law firm Gebrueder Brands & Seehaus GbR, with tiered subscriptions from a self-service cloud plan up to a lawyer ombudsperson service.

Rubric score

15 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: prima-compliance.de(opens in new tab)
Headquarters: Niedererbach, Germany
Hosting: Byte Solution GmbH & Co. KG (developer, webhosting, and server infrastructure); data processed in Germany, otherwise within the EU (vendor-stated)
Pricing: Ombudsperson packages (net, per year): Starter EUR 1,500 (up to 150 employees, 6 ombudsperson hours), Business EUR 2,700 (up to 249 employees, 12 hours), Premium EUR 6,000 (250-1,000 employees, 20 hours); Individual quote for 1,000+ employees. Add-on telephone hotline EUR 15-25/month.
Subscriptions are structured in three tiers: Basis (self-service cloud plan where the organisation handles cases), Business (vendor reviews and processes incoming reports through to reporting), and Premium (lawyer ombudsperson). The Basis self-service plan price was not published on the pages reviewed. Standard packages are ordered through an online form (bytesolution.de/prima-compliance) with annual billing.
Languages on reporting form: Not published
Ownership: Private, operated by Gebrueder Brands & Seehaus GbR (law firm); Byte Solution GmbH & Co. KG is the named developer and hosting provider
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✗
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Germany (Hinweisgeberschutzgesetz, HinSchG)

Typical buyer

German SMEs that want a HinSchG-compliant reporting channel with the option to add a lawyer ombudsperson service, from a domestic law-firm-operated provider.

Distinctive features

Operated by a German law firm with an optional lawyer ombudsperson tier
Data processed in Germany, otherwise within the EU, with no transfers outside the EU (vendor-stated)
Tiered model spanning a self-service cloud plan up to a fully managed ombudsperson service
Published annual package prices for the ombudsperson tiers
Standard packages orderable through an online form without a sales call

Add-ons and conditions

Costs or terms not included in the headline price.

The self-service Basis cloud plan price was not published on the pages reviewed
Ombudsperson packages are billed annually, not monthly
Telephone hotline is a paid monthly add-on (EUR 15-25/month)
No free trial was found on the pages reviewed
No ISO 27001 certification found; the service references ISO 37301:2021, a compliance-management standard, not an information-security certification

Notable

Operated by Gebrueder Brands & Seehaus GbR, a German law firm (Rechtsanwaelte, Fachanwaelte, Wirtschaftsjuristen) in Niedererbach, under the brand PRIMA Compliance / PRIMA Hinweisgeber.
Byte Solution GmbH & Co. KG (Niedererbach) is named in the privacy policy as the processor for webhosting and server infrastructure, and is the developer behind the platform.
Marketed as HinSchG- and GDPR-compliant and aligned with EU Directive 2019/1937; the whistleblowing-protection page also references the ISO 37301:2021 compliance-management standard.
Three subscription tiers are described: Basis (self-service cloud plan where the organisation handles case processing itself), Business (vendor reviews and processes incoming reports through to reporting), and Premium (adds a lawyer as impartial ombudsperson).
Ombudsperson packages carry published annual net prices: Starter EUR 1,500 (up to 150 employees, 6 hours), Business EUR 2,700 (up to 249 employees, 12 hours), Premium EUR 6,000 (250-1,000 employees, 20 hours); an Individual package for 1,000+ employees is quote-only.
A telephone hotline is offered as a paid monthly add-on (EUR 15-25/month); training, audits, and compliance-officer appointment are also offered.
Standard packages are ordered through an online form at bytesolution.de/prima-compliance (“Jetzt zahlungspflichtig bestellen”); no free trial was found on the pages reviewed.
The privacy policy states data is processed in Germany and, exceptionally, on servers within the EU, with no transfers to third countries outside the EU, and that data is transmitted using 256-bit SSL encryption.
Reports can be made anonymously and confidentially; the price of the self-service Basis cloud plan was not published on the pages reviewed.
No ISO 27001 certification for the product or its hosting provider was found on the pages reviewed.
Identity note: the operator is PRIMA Compliance (Gebrueder Brands & Seehaus GbR). prima-vera.de is an unrelated grain-products company that merely uses a different third-party whistleblowing tool, and is not the operator of this product.

Frequently asked questions about PRIMA Compliance

Answers derived from vendor-published materials dated on this page.

Is PRIMA Compliance suitable for SMEs under 250 employees?

PRIMA Compliance does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Sales contact required. German SMEs that want a HinSchG-compliant reporting channel with the option to add a lawyer ombudsperson service, from a domestic law-firm-operated provider.

Which national whistleblower laws does PRIMA Compliance explicitly reference?

PRIMA Compliance explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (Hinweisgeberschutzgesetz, HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does PRIMA Compliance process whistleblower report content with AI?

No — PRIMA Compliance does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.