Trustif

Estonian whistleblowing channel from Trustif Solutions OÜ for businesses, municipalities, and schools, with 30+ languages and published monthly pricing from EUR 69.

Rubric score

28 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: trustif.ee(opens in new tab)
Headquarters: Tallinn, Estonia
Hosting: EU/EEA infrastructure via Render (privacy policy); the features page separately states Google Cloud Platform in the EU (vendor-stated)
Pricing: Basic EUR 69/month (0-49 employees); Premium EUR 119/month (50+); Business EUR 149/month (250+); Enterprise+ EUR 299/month (1,000+). Add-ons: extra reporting channel EUR 50/month, customisable form EUR 15/month.
Pricing page has a monthly/annual toggle, but annual per-month figures were not shown in the static HTML reviewed. No free trial or setup fee stated. Enterprise+ includes one hour of partner (legal/accounting) services per month.
Languages on reporting form: 30
Domain registered: April 2026 trustif.ee
Ownership: Private, Trustif Solutions OÜ (Estonian registry code 17079460); developed by Ernits OÜ
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Enforced (quarantine)
DNSSEC: Signed
Legal entity: Trustif Solutions OÜ

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✗
Two-factor authentication ✓
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Estonia (Whistleblower Protection Act, 2024)

Typical buyer

Estonian businesses, municipalities, and schools wanting an EU-Directive-compliant reporting channel from a domestic vendor, with an optional legal/accounting partner network.

Distinctive features

All four tiers publicly priced in EUR with monthly billing and a monthly/annual toggle
Anonymous two-way communication and attachment metadata stripping documented
Public sub-processor list (Render, Resend, Cloudflare Turnstile) in the privacy policy
More than 30 reporting languages stated on the features page
Dedicated Estonian-law, EU Directive, and NIS2 explainer pages

Add-ons and conditions

Costs or terms not included in the headline price.

No free trial or self-serve checkout found; acquisition is routed through a consultation booking
map[Hosting is described inconsistently:the privacy policy names Render (EU/EEA), the features page states Google Cloud Platform in the EU]
ISO 27001 is attributed to the hosting servers, not to Trustif as a vendor; ISO 37002:2021 is described as conformity, not certification
Annual prices sit behind a toggle and were not shown in the static HTML reviewed
API access not documented on public pages reviewed

Notable

Operated by Trustif Solutions OÜ, Estonian registry code 17079460, at Valukoja tn 8/2, Tallinn; the site attributes development to Ernits OÜ.
Positioned for private businesses, municipalities, and schools, and framed around Estonia’s whistleblower protection law (adopted 15 May 2024), the EU Directive 2019/1937, and NIS2, each with its own explainer page.
The reporting channel supports anonymous submissions, two-way anonymous communication, attachment upload with identifying-metadata removal, report categorization and status tracking, and deadline reminders.
Features page states more than 30 reporting languages, AES-256 encryption, a fully preserved system activity log, and admin SSO via Microsoft Azure and Google Workspace with MFA.
Hosting is described inconsistently across pages: the privacy policy names Render for hosting infrastructure (EU/EEA), while the features page states all data is stored in the EU using Google Cloud Platform.
ISO 27001 is presented as a property of the hosting servers rather than a Trustif vendor certification; the features page separately claims conformity with ISO 37002:2021 (whistleblowing management systems guidance) and GDPR.
The privacy policy and terms publish a sub-processor list: Render (hosting), Resend (transactional email), and Cloudflare Turnstile (spam protection on public forms).
Four tiers are publicly priced per month: Basic EUR 69 (0-49 employees), Premium EUR 119 (50+), Business EUR 149 (250+), and Enterprise+ EUR 299 (1,000+); Enterprise+ includes one hour of partner services per month.
Add-ons are published: an extra reporting channel at EUR 50/month and a customisable form at EUR 15/month; higher tiers add company branding and unlimited administrators.
The pricing page exposes a monthly/annual toggle, but annual per-month figures were not shown in the static HTML reviewed; no free trial or setup fee was stated.
The vendor markets an optional partner network of legal and accounting advisers alongside the software.
No public API documentation and no named EU hosting country were found on the public pages reviewed.

Frequently asked questions about Trustif

Answers derived from vendor-published materials dated on this page.

Is Trustif suitable for SMEs under 250 employees?

Yes — Trustif's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Basic EUR 69/month (0-49 employees); Premium EUR 119/month (50+); Business EUR 149/month (250+); Enterprise+ EUR 299/month (1,000+). Add-ons: extra reporting channel EUR 50/month, customisable form EUR 15/month. Estonian businesses, municipalities, and schools wanting an EU-Directive-compliant reporting channel from a domestic vendor, with an optional legal/accounting partner network.

Which national whistleblower laws does Trustif explicitly reference?

Trustif explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Estonia (Whistleblower Protection Act, 2024). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Trustif process whistleblower report content with AI?

No — Trustif does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.