Zateo

German whistleblowing SaaS from Selfox UG with published tiers from EUR 79/month, anonymous reporting, and Germany-based hosting on an ISO/IEC 27001-certified provider.

Rubric score

25 / 50

Evidence tier P

Public pages only. No reporter submission or handler environment was reviewed.

How this score is produced →

Facts

Website: www.zateo.de(opens in new tab)
Headquarters: Wietzen, Germany
Hosting: Germany-based hosting on an ISO/IEC 27001-certified provider (Hetzner, vendor-stated)
Pricing: Compliance Basic EUR 79/month, Compliance Pro EUR 119/month, Compliance Ultimate from EUR 399/month; all quoted monthly but billed annually, plus German VAT (zzgl. MwSt.).
Prices are quoted per month but charged on annual billing (jaehrliche Abrechnung) plus VAT. Basic includes three languages of choice and unlimited reports; Pro adds multiple users, responsibilities and categories, prioritization of reports, and corporate design; Ultimate adds attorney review of reports. A free trial with no payment required is advertised.
Languages on reporting form: Not published
Ownership: Private - Selfox UG (haftungsbeschränkt), Wietzen, Germany (Amtsgericht Walsrode HRB 207827)
Product scope: Standalone whistleblower product

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: None published
DNSSEC: Unsigned
Legal entity: Selfox UG (haftungsbeschränkt) HRB 207827 · imprint

Capabilities

Anonymous reporting ✓
Multi-channel intake ✗
Public API —
Free trial ✓
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

None published

National laws referenced

EU Directive 2019/1937
Germany (HinSchG)

Typical buyer

German companies in the 50+ and 250+ employee HinSchG brackets wanting an affordable, self-serve reporting channel with anonymous intake and Germany-based hosting.

Distinctive features

Published three-tier pricing (Basic, Pro, Ultimate) visible without a sales call
Free trial with no payment required is advertised
Anonymous reporting with a personal code for follow-up
Automatic metadata removal from uploaded images
Germany-based hosting on an ISO/IEC 27001-certified provider (Hetzner, vendor-stated)
Multilingual reporting (three languages of choice on the entry tier)

Add-ons and conditions

Costs or terms not included in the headline price.

Prices are quoted per month but billed annually, so there is no month-to-month contract option evident
Ultimate is an "ab" (from) starting price, not a fixed figure
Case management (responsibilities, categories, prioritization) is gated to Pro and above; attorney review is Ultimate only
The ISO/IEC 27001 certification cited is the hosting provider's, not a vendor or product certification
No sub-processor list, DPA (AV-Vertrag), or DPIA support was found on public pages reviewed
No API access, statutory 7-day/3-month deadline tracking, or configurable report-retention policy was found on public pages reviewed

Notable

The product is marketed as “Zateo” and operated by Selfox UG (haftungsbeschraenkt), Am Kirchplatz 33, 31613 Wietzen, Germany, registered at Amtsgericht Walsrode under HRB 207827 (managing director Patrick Davis Busche).
Positioned as an affordable German solution for meeting HinSchG (Whistleblower Protection Act) obligations, citing the 50+ employee deadline (July 2, 2023) and 250+ employee deadline, and referencing penalties of up to EUR 50,000.
The reporting channel is an online reporting form supporting anonymous submissions, with a personal code issued for follow-up; phone support is a customer-support line, not a reporting channel, so intake is web-only.
Uploaded images have their metadata automatically removed.
Case management (responsibilities, categories, prioritization of reports) is available on Compliance Pro and above; corporate-design customization is also a Pro feature.
Compliance Ultimate adds review of reports by an attorney (Rechtsanwalt).
Three published tiers: Basic EUR 79/month, Pro EUR 119/month, and Ultimate from EUR 399/month, all quoted monthly but billed annually and shown plus VAT (zzgl. MwSt.).
A free trial with no payment required is advertised, and signup is self-serve via the app.
Hosting is stated to be in Germany on an ISO/IEC 27001-certified provider (Hetzner); this is a hosting-provider certification, not a vendor or product certification, and no vendor ISO certification was found on public pages reviewed.
The privacy policy (Datenschutz) states SSL/HTTPS encryption and 14-day log-file deletion, cites GDPR articles including the right to object, but does not name specific sub-processors or reference a DPA (AV-Vertrag) or DPIA.
GDPR compliance is claimed; no API access, statutory 7-day/3-month deadline tracking, or configurable report-retention policy was found on public pages reviewed.

Frequently asked questions about Zateo

Answers derived from vendor-published materials dated on this page.

Is Zateo suitable for SMEs under 250 employees?

Zateo does not publish entry-tier pricing, so SME buyers need to request a quote to assess fit. Buying path: Self-serve sign-up. German companies in the 50+ and 250+ employee HinSchG brackets wanting an affordable, self-serve reporting channel with anonymous intake and Germany-based hosting.

Which national whistleblower laws does Zateo explicitly reference?

Zateo explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: EU Directive 2019/1937, Germany (HinSchG). Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does Zateo process whistleblower report content with AI?

No — Zateo does not process report content with AI or machine translation per its vendor materials. Verify the vendor's subprocessor list to confirm no downstream AI processing occurs.