Employee Communication & Intranet
Involv
Provenance unknown Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Involv · involv-intranet.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Involv at a glance
- Vendor
- Involv
- Headquarters
- Not stated on the vendor’s pages as of 3 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 3 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 3 Nov 2026
- Panel verdict
- The AI panel rates Involv 3/5, the mean of 6 judges. Involv, from Belgian vendor Cognit BV, is a SharePoint-based employee intranet that runs inside the customer's own Microsoft 365 tenant. how scores are made
- As of
- Vendor pages captured 3 Nov 2026; evaluated by the panel 3 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Involv, from Belgian vendor Cognit BV, is a SharePoint-based employee intranet that runs inside the customer's own Microsoft 365 tenant. The bench is firmest where the product sits: content and knowledge is the only criterion with no spread, a flat 7, on a genuine CMS with version control, content expiry and health scoring that flags outdated pages; integration and administration scored 6-7 on native SharePoint, Teams and Entra ID with an open API; sovereignty scored 7-8 on the vendor's own pages — a published, versioned DPA, a public sub-processor list and service infrastructure on Azure West/North Europe — though the independent sovereignty check left those dimensions unconfirmed, and we found no public information on ISO 27001 or SOC 2. The genuine splits are engagement and feedback, 4-6, and works council and privacy, 4-6: judges crediting the DPA substance score high, judges weighing the co-determination silence and the analytics that name individual top authors score low. Persona-weighted verdicts run 5.5-6.5; we found no public price figures, only a QuickStart fixed in scope and price with the amount unstated.
Speaks for it
- Content and knowledge scored a flat 7, the only criterion with no spread, on a drag-and-drop SharePoint CMS with version control, content expiry and health scoring that flags outdated pages and assigns ownership.
- Integration and administration scored 6-7 on an intranet running in the customer's own Microsoft 365 tenant, with permissions from Entra ID and AD security groups, the intranet as a Teams tab, Power BI and an open API.
- Sovereignty scored 7-8 on the vendor's own pages: a published, versioned DPA under Belgian law, a public sub-processor list with locations and a 30-day objection right, service infrastructure on Azure West/North Europe, and AI features running through the customer's own Azure OpenAI in the EU data boundary.
- Product telemetry is pseudonymised and can be switched off on request, AI features can be disabled at tenant and user level, and retention periods are stated per data category.
- Reach and targeting scored 6-7 on role, location and language targeting refined on user profile properties, with mandatory reading with read confirmation, push notifications, digital signage and reach reported per post.
Held against it
- Works council and privacy split 4-6: we found no public information on works-agreement templates, quiet hours or separation of work and private data on private phones, and the analytics centre reports top authors, contributors and creators as named individuals.
- Engagement and feedback split 4-6: the documented listening mechanisms are communities, ideation and comments, and we found no public information on surveys, pulse checks, anonymity rules or moderation.
- Community membership is documented to require an Exchange mailbox, and we found no public information on login for staff without a company email address or Microsoft licence.
- We found no public information on ISO 27001 or SOC 2 certifications, and the captured pages give different names for the provider entity — Cognit BV and Conversal BV, both Belgian.
- Pricing transparency scored 1-2: we found no public price figures, only an Involv QuickStart described as fixed in scope and price without the amount and a free 30-minute demo.
Best for
- You already run Microsoft 365 and want the intranet inside your own tenant — the fit behind the bench's highest weighted verdict, 6.5, from the Microsoft 365 administrator.
- Your problem is content discipline: pages that expire, health scoring that flags outdated content and dead links, ownership assignment, and search across pages, documents, people and OneDrive.
- You publish by role, location and language and need mandatory reading with read confirmation delivered across mail, mobile, Teams, the intranet and screens.
- Your privacy review requires a published DPA with stated retention periods, switchable telemetry and tenant- and user-level AI opt-out before signature.
Avoid if
- A large share of your workforce has no company email address or Microsoft licence — community membership requires an Exchange mailbox, and we found no public information on login without one.
- A works council will scrutinise individual usage reporting — the analytics centre names top authors, contributors and creators, and we found no public information on minimum group sizes or aggregation rules; the bench's lowest weighted verdict, 5.5, came from the works council member.
- You need measured listening through surveys, pulse checks and anonymity rules — the pages document communities, ideation, comments and onboarding, and we found no public information on survey tooling.
- You must compute an annual cost from public pages — we found no public price figures, no per-user rate and no module prices for the mobile app, Involv Cast or Involv AI.
The scores
| Criterion | Panel median |
|---|---|
| Reach & targeted announcements | 3 of 5 |
| Pages, documents & knowledge | 3.5 of 5 |
| Engagement, surveys & onboarding | 2.5 of 5 |
| Works council, private phones & privacy by design | 2 of 5 |
| Integration, identity & administration | 3 of 5 |
| European sovereignty | 3.5 of 5 |
Reach & targeted announcements
Show reasoningHide reasoning
How this is scored
How a message reaches every employee: a news feed and announcements on phone, browser and shared devices, targeting by site, department, role and language, access for staff without a company email address (invite codes, phone number, personnel number, QR codes, kiosk or shared devices), push notifications, mandatory reading with read confirmation, urgent alerts, scheduled posts, and reach analytics per message and audience.
0 — Not a communication tool; the company cannot publish news or announcements to employees in the product.
3 — A news feed or announcement channel for employees with company accounts; targeting, access without a company email address and reach figures are basic or not described.
5 — News and announcements targeted by group, site or role, delivered to a mobile app with push notifications and to the browser, employees without a company email address able to log in, and views or reach shown per post.
8 — Targeting by site, department, role and language from HR data, login documented for staff without email or company devices (personnel number, SMS code, shared devices), mandatory reading with read confirmation and reminders, urgent alerts that override quiet settings, scheduled and multi-channel posts (app, email, intranet, screens), and reach analytics per audience.
10 — Reach that can be proved: delivery and reading tracked per channel against the whole workforce, offline access and low-bandwidth delivery documented, crisis messages with acknowledgement and escalation, aggregated reports exportable, and the reach analytics described with the data they use.
The Internal Communications Lead
Audience targeting by role, location and language, further filtering on user profile properties, and delivery across mail, mobile, Teams, the intranet and screens via digital signage — most of what I need for the CEO letter and the safety notice. Mandatory reading with read confirmation, scheduled and testable notifications, real-time push for urgent updates and reach per post are all documented. What holds it down: the captured pages never describe how a shop-floor worker without a company email address or a fixed PC actually logs in, and I found no public information on read reminders, alerts that override quiet settings, or reach reported per audience. 1 4 5
The Frontline Operations Lead
Role, location and language targeting, notifications to mail, mobile, Teams and the intranet, push for urgent updates, mandatory reading with read confirmation, scheduled sends, screens in cafeterias and reach per post are all documented. But I found no public information on a login for people without a company email address, and community membership is documented to require an Exchange mailbox, which is the make-or-break for my pickers and drivers. 1 4 5 8 12
The Microsoft 365 Administrator
Targeted publishing by role, location and language with audiences further filtered on user profile properties; notifications go to mail, mobile, Teams and the intranet, can be scheduled, and news also lands on workshop and cafeteria screens through Involv Cast. Mandatory reading with read confirmation, push notifications for urgent updates and reach per post in Involv Analytics are all documented. We found no public information on login for staff without a company email address or Microsoft licence, and community membership is documented to require an Exchange mailbox — for my 2,500 colleagues without a licence that is the whole ballgame. 1 4 5 8
The Works Council Member
Publishing is genuinely targeted by role, location, language and user-profile properties across four channels (mail, mobile, Teams, intranet) with scheduling, mandatory reading with read confirmation, per-post reach figures and news on cafeteria screens. We found no public information on access for staff without a company email address or company device, and community membership even requires an Exchange mailbox, so the frontline question stays open. 1 5 8
The Data Protection Officer
Announcements can be targeted by role, location and language and refined on user profile properties, sent on four channels — mail, mobile, Teams and intranet — with scheduling, push for urgent updates and mandatory reading with read confirmation. Reach and engagement are reported per post, and screens in workshops are covered by the digital signage module. We found no public information on login without a company email address — community membership requires an Exchange mailbox — nor on read reminders or reach figures per audience. 1 4 5 8 12
The Skeptic
Targeted publishing by role, location and language, further filtered on user profile properties, plus a mobile app with push notifications, mandatory reading with read confirmation, scheduled posts across mail, mobile, Teams and intranet, news on cafeteria screens via Involv Cast, and reach and engagement per post in Involv Analytics — that is most of a serious reach story. What holds it back: we found no public information on login for staff without a company email address or company device, and community membership in fact requires an Exchange mailbox. Nothing on the captured pages describes urgent alerts that override quiet settings, read reminders, or reach figures per audience measured against the whole workforce. 1 4 5 6 8
Pages, documents & knowledge
Show reasoningHide reasoning
How this is scored
What employees can look up: intranet pages and a content management system, documents and policies with versions and owners, search across content and connected systems, a people directory and org chart, multilingual content with machine translation of posts and pages, content review and expiry, and access from the app as well as the browser.
0 — No pages or documents; the product carries only messages that scroll away.
3 — Files or simple pages can be shared; search, translation, a people directory and content governance are basic or not described.
5 — Pages and a document area with permissions, search across the content, a people directory, content available in the mobile app, and posts or pages translatable into several languages.
8 — A content management system with templates, page ownership, review dates and versioning, search across connected systems (SharePoint, Google Drive or similar), automatic translation of posts, pages and comments into named languages, an org chart from HR data, and pages readable offline.
10 — Knowledge that stays current: content lifecycle and expiry enforced, search and AI answers that cite their sources and respect permissions, analytics on what is searched and not found, accessibility of the content stated against WCAG, and a full export of pages and documents.
The Internal Communications Lead
A real intranet content management system: drag-and-drop pages, document management with version control, content expiration and a health score that flags outdated pages and assigns ownership, a people directory with organization chart, multilingual content, and one AI search bar across pages, documents and people — and because it all sits in our own SharePoint, our knowledge never leaves our tenant. I found no public information on automatic translation of posts into named languages, offline reading of pages, or content accessibility stated against WCAG. 1 6 7 12 13
The Frontline Operations Lead
A genuine intranet CMS on SharePoint with version control, content expiry, health scoring that flags outdated pages and assigns owners, search across pages, documents, people and OneDrive, profiles with an org chart, and content in the user's preferred language. I found no public information on automatic translation of posts and comments or on pages readable offline. 1 6 7 12
The Microsoft 365 Administrator
This is a real CMS on our own SharePoint: drag-and-drop pages, document management with version control, a Who's Who directory with organization chart, multilingual content, and AI search that mixes people and content and reaches OneDrive. Content Intelligence scores page health, flags outdated content and dead links, assigns ownership, and content expiration is documented — exactly the lifecycle discipline my last SharePoint project died without. We found no public information on automatic translation of posts and pages into named languages, offline reading, or an accessibility standard stated for content. 1 6 7 12
The Works Council Member
A real intranet CMS: drag-and-drop pages, SharePoint version control, content expiry, and content intelligence that flags outdated pages and dead links and assigns owners, with AI search across pages, documents and people including OneDrive, a people directory and an organization chart. We found no public information on automatic translation of posts and comments into named languages, or on offline reading of pages. 1 6 12
The Data Protection Officer
A SharePoint-based CMS with a drag-and-drop builder, document version control, content health scoring that assigns ownership and flags outdated pages, expiry of content, and an AI search across pages, documents, people and OneDrive results. Multilingual content, a people directory and an organisation chart are described. We found no public information on automatic translation into named languages, on offline reading, or on accessibility of the content stated against WCAG. 1 6 7 12
The Skeptic
A drag-and-drop intranet CMS on SharePoint with version-controlled documents, an AI search bar that corrects typos and summarises results across pages, documents and people, OneDrive files searchable in the hub, a Who's Who directory with organization chart, multilingual content, and Content Intelligence that scores page health, flags outdated pages and dead links and assigns ownership with content expiration. We found no public information on pages readable offline, on automatic translation into named languages beyond per-user language preference, or on AI answers that cite their sources and respect permissions. 1 6 7 12 13
Engagement, surveys & onboarding
Show reasoningHide reasoning
How this is scored
How the workforce answers back and gets started: comments, reactions and moderation, employee surveys and pulse checks with anonymity rules, recognition, user-generated posts and communities, onboarding journeys for new starters including those without a desk, event and campaign pages, and the measures the vendor offers to report engagement.
0 — One-way only; employees cannot react, comment or answer in the product.
3 — Likes and comments on posts; surveys, moderation and onboarding are basic or not described.
5 — Comments and reactions with moderation, surveys or polls sent to targeted groups with results shown, employee posts or communities, and an onboarding area or journey for new employees.
8 — Pulse and engagement surveys with a stated anonymity threshold, automated onboarding journeys timed from the start date and reaching new starters before their first shift, recognition, communities with moderation rules, and engagement reported per group without exposing individuals.
10 — Listening that leads to action: survey results tied to follow-up tasks and published back to the workforce, anonymity and minimum group sizes documented, onboarding journeys measured by completion, and engagement data exportable for analysis.
The Internal Communications Lead
Communities built on Microsoft 365 groups with public and private joining, commenting on posts, an ideation feature, and a genuinely thorough onboarding module with preboarding status, invitation before the start, task stages and step types including forms and signatures. But I found no public information on surveys or pulse checks, anonymity rules, moderation or recognition — and the analytics name top authors and contributors as individuals, which I would have to clear with a works council before showing anyone. 6 8 9
The Frontline Operations Lead
Communities with public and private joining, a social feed, an idea module, and an HR onboarding module with a preboarding status and tasks tracked as not started, in progress or completed. The invitation reaches new starters by email, and I found no public information on surveys or polls, moderation rules, recognition or anonymity protections. 6 8 9
The Microsoft 365 Administrator
Communities are Microsoft 365 group sites with public or private joining and owner approval, comments and an Ideation feature exist, and the onboarding module is deep: a preboarding status before the invitation, tasks built from File, Video, Sign, Text, ToDo and Form steps, tracked from Not Started to Completed. We found no public information on employee surveys or pulse checks, anonymity rules, recognition or moderation rules, so listening rests on communities and ideas rather than measured feedback. 6 8 9
The Works Council Member
Communities on Microsoft 365 groups with owner-approved private ones, commenting and an ideation feature give employees a voice, and the onboarding module reaches new starters in preboarding with tasks tracked through to completion. We found no public information on surveys or pulse checks with anonymity rules, and the analytics centre ranks top authors, top contributors and top creators — an individual league table a works council will want restricted. 6 8 9
The Data Protection Officer
Communities ride on Microsoft 365 group sites with public or private membership, owner-approved joins and comments, and the onboarding module is thoroughly documented — preboarding before day one, invitation by email, tasks with stages and step types. We found no public information on surveys or pulse checks, anonymity thresholds, recognition or moderation rules beyond private-join approval; the analytics center names top authors, contributors and creators, which is individual-level reporting a works council will notice. 6 8 9
The Skeptic
Communities on Microsoft 365 groups with public and private joining, search and member counts are documented in depth, alongside a genuine onboarding module with preboarding status, task types from file to sign-off and completion stages; comments exist, evidenced by SharePoint's own comment notification emails. But we found no public information on surveys or pulse checks, anonymity rules, minimum group sizes or moderation, and the analytics centre reports top authors and top contributors — named individuals — as headline measures. 6 8 9
Works council, private phones & privacy by design
Show reasoningHide reasoning
How this is scored
Whether the product can be rolled out under German co-determination and data protection: guidance or a template for a works agreement (Betriebsvereinbarung, § 87 BetrVG), no individual performance or behaviour monitoring by default, read and usage analytics aggregated or configurable, use on private phones without a company device (BYOD) with work and private data separated, quiet hours and availability settings, voluntary use without an employee email address, data minimisation and deletion, and accessibility.
0 — Built to monitor the behaviour or performance of individual employees, with that monitoring sold as a feature.
3 — A general GDPR statement; works council, use on private phones, analytics on individuals and quiet hours are basic or not described.
5 — Use on private phones described with what the employer can and cannot see, analytics shown in aggregate, notification or quiet-hour settings, and works councils or employee representatives named as a topic with information offered.
8 — A works-agreement template or checklist published, individual tracking off by default or switchable per tenant, read confirmations limited to messages that require them, quiet hours enforced, a login without a private email or phone number, data minimisation and deletion periods stated, and accessibility to WCAG or BITV stated.
10 — Co-determination built into the product: every analytics view and its granularity documented for the works council, configuration logged, employee-facing privacy notices in the app, minimum group sizes for every report, and published references of works-council-approved rollouts.
The Internal Communications Lead
The privacy engineering is real: pseudonymised product telemetry that can be switched off on request, a daily aggregate active-user count carrying no personal data, detailed retention and deletion periods, no special categories processed, AI features disableable at tenant and user level, and an accessibility mode with selectable font size. Nothing on the captured pages addresses German co-determination: no works-agreement template or checklist, nothing on use on private phones with work and private data separated, no quiet hours, no minimum group sizes — and analytics listing top authors is individual-level reporting a works council would question. 3 6 10 11
The Frontline Operations Lead
A published data processing agreement under Belgian law, deletion or return of data at our choice, pseudonymised telemetry we can ask to disable, retention periods per data category, tenant-level opt-out of AI features and an accessibility mode are documented. I found no public information on works councils or works agreements, quiet hours, use on private phones, or an accessibility standard, and the analytics name top authors and contributors, which our works council would want to discuss. 3 10 11
The Microsoft 365 Administrator
There is a published data processing agreement under Belgian law, deletion periods stated per data category, pseudonymised product telemetry the customer can have disabled on request, AI opt-out at tenant and user level, and an accessibility mode with contrast and text spacing. But we found no public information on a works-agreement template, quiet hours, or how use on private phones works, and the analytics centre is captured naming top authors, top contributors and top creators — individual figures with no stated minimum group size, which is the first thing a works council will ask about. 3 6 10 11
The Works Council Member
The paperwork is better than most: a published data processing agreement, retention periods per data category, licence telemetry limited to a daily aggregate active-user count that can be switched off on request, AI features running through the customer's own Azure OpenAI with tenant- and user-level opt-out, and an accessibility mode. We found no public information on a works-agreement template, separation of work and private data on private phones, quiet hours, or whether reach analytics can be broken down to a single reader — and the analytics centre ranks individual contributors by name. 3 6 10 11
The Data Protection Officer
There is real substance here: a published data processing agreement, pseudonymised product telemetry that can be switched off on request, a daily licence count containing no personal data, AI opt-out at tenant and user level, stated retention periods, and deletion or return on termination. What a German works council will not find: anything on works agreements or co-determination, quiet hours, or separating work and private data on a private phone — and the contributor rankings are individual-level. Accessibility is offered as a user mode, not declared against WCAG or BITV. 3 6 10 11
The Skeptic
A published, versioned data processing agreement, retention periods per data category, pseudonymised telemetry that can be switched off on request, AI features with opt-out at both tenant and user level running through the customer's own Azure OpenAI, and an accessibility mode are more than a generic GDPR statement. But the co-determination side is silent: we found no public information on a works-agreement template, works councils as a topic, private-phone use and what the employer can see, or quiet hours, and the analytics centre showcases top authors and top contributors — individual-level usage reporting — with no aggregation rules stated. 3 6 10 11
Integration, identity & administration
Show reasoningHide reasoning
How this is scored
How the product fits the company's systems and is run: Microsoft 365, SharePoint, Teams and Google Workspace integration, user provisioning from the HR system or directory (Entra ID, SAP SuccessFactors, Personio, Workday), single sign-on and SCIM, roles and admin rights by site or department, an API and webhooks, integrations with shift planning and payroll for frontline links, white-label apps, and an export of content and users when leaving.
0 — Stand-alone with manual user lists and no integration of any kind.
3 — Users imported from a file and a few links to other tools; single sign-on, provisioning and an API are basic or not described.
5 — Single sign-on with named identity providers, users provisioned from a directory or HR system, Microsoft 365 or Google Workspace integration, several named integrations, and a documented API.
8 — Automated provisioning by SCIM or HR connector including staff without email, delegated administration by site or department, integration in Microsoft Teams and SharePoint, connectors for named HR, shift and payroll systems, webhooks, a white-label app option, and an audit log.
10 — Runs as part of the company's systems: a public developer platform with versioned API and SDKs, every integration documented, a status page and stated SLA, and a full export of content, users and analytics that a successor system can import.
The Internal Communications Lead
It lives inside our Microsoft 365 tenant: SharePoint, Teams, Entra ID, OneDrive and Power BI work together natively, users and permissions come from Active Directory, and sites inherit standard SharePoint permission groups that can be populated with AD security groups — delegated administration by site is exactly how I would run eleven sites. An open API connects HR, ticketing and analytics tools. I found no public information on SCIM or named HR, shift and payroll connectors such as SAP or Personio, on webhooks, or on an audit log. 1 12 13
The Frontline Operations Lead
It lives in our own Microsoft 365 tenant with SharePoint, Teams, Entra ID and OneDrive native, role-based access from Active Directory, per-site owner, member and visitor groups, Power BI and RSS, an open API for HR and ticketing apps, and branding even in the mobile app. I found no public information on SCIM, webhooks, an audit log, or connectors to shift planning and payroll systems. 1 12 13
The Microsoft 365 Administrator
This is the architecture I keep asking vendors for: it runs entirely in our own Microsoft 365 tenant on our SharePoint with nothing hosted externally, users and permissions come from Active Directory with AD security groups, every site keeps its own Owners, Members and Visitors, the whole intranet opens as a tab inside Teams, and Power BI, the SharePoint API, Microsoft Graph and an open API for third-party apps are all named. Because storage stays in our SharePoint, the content remains ours when a contract ends. We found no public information on SCIM, webhooks or a product audit log, and no documented provisioning for staff without a Microsoft licence — the pages state community membership requires an Exchange mailbox. 1 8 12 13
The Works Council Member
Identity and permissions run through your own Active Directory and Entra ID with SharePoint permission groups per site, the intranet opens as a Teams tab, Power BI embeds, and an open API with the SharePoint and Microsoft Graph APIs connects HR, ticketing and analytics tools. We found no public information on SCIM or automated provisioning, named connectors for shift planning or payroll systems, webhooks, or an administrator audit log. 1 6 12 13
The Data Protection Officer
Identity, permissions and administration run through the customer's Entra ID and standard SharePoint permission groups, the product lives natively in Microsoft 365 with Teams, OneDrive and Power BI, and an open API plus Microsoft Graph connect further tools. We found no public information on SCIM or HR-system provisioning, webhooks, an audit log, or a white-label app option; branding does extend to the mobile app. 1 12 13
The Skeptic
Deeply native to Microsoft 365: SharePoint storage in the customer's own tenant, users and permissions through Entra ID and AD security groups, the whole intranet as a tab in Teams, OneDrive, Power BI and RSS, per-site Owners/Members/Visitors permission groups, and full branding including the mobile app. But "virtually any app connectable via the API" is a marketing line without developer documentation on the captured pages, and we found no public information on SCIM provisioning, webhooks, connectors for named HR or shift systems, an admin audit log, a status page or an SLA. 1 12 13
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where employee profiles, messages, files and usage data are hosted, and who the subprocessors are (hosting, push notifications, email and SMS delivery, video, translation, AI models, analytics, support). Independently sourced by the sovereignty pipeline; an employee app holds data on the whole workforce, often on private phones, so the whole chain counts, not only the database.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (push delivery, translation, AI, email, analytics, support) run through non-EU providers without a stated safeguard.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or self-hosting on the customer's own servers, data export and deletion documented, and certifications published with their scope rather than implied.
The Internal Communications Lead
The contracting entity is Cognit BV in Belgium under Belgian law, a data processing agreement is published with version and effective date, and the subprocessor list is public with locations — Azure West/North Europe for the service, while the US-based ones (Meta Pixel, Clarity, Referly) are website marketing tools with Data Privacy Framework certification stated. All employee content sits in the customer's own Microsoft 365 tenant with the geography set by our tenant configuration, and AI features run through the customer's own Azure OpenAI inside the EU data boundary. It stops short of the top because no ISO 27001 or SOC 2 certification is stated anywhere, and the captured pages give different company names for the provider — Cognit BV and Conversal BV, both Belgian — which I would want clarified before signing. 1 2 3 10
The Frontline Operations Lead
A Belgian vendor (Cognit BV) with the intranet running in the customer's own Microsoft 365 tenant, service infrastructure on Azure in West and North Europe, AI processing in the EU data boundary, a published DPA and a subprocessor list with locations. Certifications such as ISO 27001 or SOC 2 are not stated, some website tools run in the USA under DPF, and the captured pages give different names for the provider entity. 2 3 10 12
The Microsoft 365 Administrator
Cognit BV in Belgium is the contracting party for the published DPA (the legal notice separately names Conversal BV, also Belgian, as provider), all service personal data sits in our own Microsoft 365 tenant with the geography set by our tenant configuration, AI features run through our own Azure OpenAI in the Azure EU data boundary by default, and a sub-processor list with locations, 30-day change notice and objection right is published. Meta Pixel, Microsoft Clarity and Referly sit in the USA under Data Privacy Framework certification, serving the vendor's website and marketing rather than the intranet itself. We found no public information on ISO 27001 or SOC 2 certifications. 2 3 10 12
The Works Council Member
The contracting entity is Cognit BV in Belgium, the intranet runs inside the customer's own Microsoft 365 tenant with the data location set by that tenant, AI processing stays in the Azure EU data boundary, and a subprocessor list with locations is published with a 30-day objection right; the non-EU entries are website-marketing tools relying on Data Privacy Framework certification. The independent sovereignty review marks residency and entity as unconfirmed on the captured pages, and we found no statement of ISO 27001 or SOC 2 certification. 2 3 10 12
The Data Protection Officer
The contracting entity is Cognit BV in Belgium under Belgian law and courts; employee data stays in the customer's own Microsoft 365 tenant with the geography set by that tenant configuration, the vendor's service infrastructure runs on Azure in West and North Europe, and AI features run through the customer's own Azure OpenAI within the EU data boundary by default. A sub-processor list with locations, a 30-day objection right and a published data processing agreement exist, and Microsoft is treated as the customer's direct relationship, not a sub-processor for tenant data. Security certifications such as ISO 27001 or SOC 2 are not stated, and the website chain includes US providers under DPF (Clarity, Referly, Meta Pixel) — marketing-site processing, not tenant data. 2 3 10 12
The Skeptic
The contracting entity is Cognit BV in Belgium with enterprise number and Brussels commercial register, employee data stays in the customer's own Microsoft 365 tenant with service infrastructure on Azure West/North Europe, AI runs through the customer's own Azure OpenAI in the EU data boundary, a versioned data processing agreement is published, and a sub-processor list with named locations and a 30-day objection right is public — though these points rest on the vendor's own pages, as the independent sovereignty check left the dimensions unconfirmed. We found no public information on ISO 27001 or SOC 2 certifications; residency follows whatever the customer's tenant is configured to rather than a vendor commitment, and who delivers push notifications for the mobile app is not documented. 2 3 10 12
Pricing transparency
not rated — the vendor publishes no price
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user or per employee, whether frontline and desk staff are priced differently, platform or base fee, which modules (intranet, employee email, surveys, translation, AI, a white-label app) cost extra, minimum seats and term, and setup and onboarding fees.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with users, modules or a branded app is unclear.
5 — Tiers are public with their per-user or base price and main inclusions, but at least one commonly needed piece (frontline users, translation, a branded app, extra modules) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (per user, per frontline user, per active user), add-ons and a branded app priced, minimum seats and term, setup fees and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given headcount and module set, with every add-on, setup, support and branded-app fee and the cancellation and data-return terms published.
The Internal Communications Lead
No price figures are public anywhere: no per-user price, no tiers, no setup fee, nothing stated for the mobile app, the signage module or the AI features. The only pricing-adjacent facts are a free thirty-minute demo and an Involv QuickStart package described as fixed in scope and price — with the price itself not stated. For a 3,000-person rollout I could not begin to compute an annual cost from the published pages. 1 12
The Frontline Operations Lead
We found no public price figures: the QuickStart package is described as fixed in scope and price but without an amount, and beyond a free demo there is no public information on per-user cost for frontline or seasonal staff, module prices, minimum seats, term or setup fees. 1 12
The Microsoft 365 Administrator
No per-user or per-employee price is published on the pages we captured; the only pricing signal is the QuickStart, described as a clearly defined package with a fixed scope and price, with no figure given, alongside a free 30-minute demo. We found no public information on what the mobile app, Involv Cast or Involv AI modules cost, nor on minimum seats, term, setup fees or VAT treatment, so I cannot compute an annual cost for 4,000 staff from public pages. 1 2 12
The Works Council Member
A fixed-scope-and-price QuickStart package with a four-week go-live including admin training, and a free 30-minute demo, are the only buying structure shown; the captured pages give no per-user price, no tiers and no module prices, so the annual cost is not computable from public information. 1 12
The Data Protection Officer
We found no public price figures: the QuickStart package is described as fixed in scope and price without the amount, the demo is free, and the named modules — mobile app, digital signage, AI — carry no prices. No per-user rate, term, minimum seats or setup fee is published, so no annual cost can be computed from the captured pages. 1 2 12
The Skeptic
The only pricing structure on the captured pages is a QuickStart package with "a fixed scope and price" in which the price itself is never shown, next to a free 30-minute demo; there is no per-user price, no tiers, nothing on what the mobile app, Involv Cast or Involv AI add to the bill, and nothing on minimum seats, term, setup fees or VAT treatment. A fixed price you cannot see is still a sales call. 1 6 12
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined ⚠ unverified | — | uncited Report an error |
Questions about Involv
Is Involv European?
Not determined: the vendor’s pages as captured do not say where Involv is based.
Where does Involv store data?
Not stated on the vendor’s pages as of 3 Nov 2026.
Does Involv have a free plan?
Not stated on the vendor’s pages as of 3 Nov 2026.
What are the best alternatives to Involv?
As of 3 Nov 2026, the panel rates Flip (3.5/5), Workvivo by Zoom (3/5) and Staffbase (3/5) highest among the other 17 Employee Communication & Intranet products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Flip (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Involv alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 3 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Transfer impact assessment, Hosting location, Hosting options, Legal entity. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- We found no public information on pricing on the pages we read (involv-intranet.com, involv-intranet.com/legal-notice, involv-intranet.com/privacy, knowledge.involv-intranet.com/how-to-enable-and-configure-mobile-notifications, knowledge.involv-intranet.com/how-to-send-notifications, involv-intranet.com/intranet-cms and 7 more). If the vendor publishes it somewhere else, send us the page. Know more? Tell us
- 5 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
Sources (13)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor page involv-intranet.com Checked 3 Nov 2026 Details →
- 2 Legal notice — found from the homepage www.involv-intranet.com Checked 3 Nov 2026 Details →
- 3 Privacy policy — found from the homepage www.involv-intranet.com Checked 3 Nov 2026 Details →
- 4 Reach & targeted announcements — found from sitemap knowledge.involv-intranet.com Checked 3 Nov 2026 Details →
- 5 Reach & targeted announcements — found from sitemap knowledge.involv-intranet.com Checked 3 Nov 2026 Details →
- 6 Pages, documents & knowledge — found from sitemap www.involv-intranet.com Checked 3 Nov 2026 Details →
- 7 Pages, documents & knowledge — found from sitemap knowledge.involv-intranet.com Checked 3 Nov 2026 Details →
- 8 Engagement, surveys & onboarding — found from sitemap knowledge.involv-intranet.com Checked 3 Nov 2026 Details →
- 9 Engagement, surveys & onboarding — found from sitemap knowledge.involv-intranet.com Checked 3 Nov 2026 Details →
- 10 Works council, private phones & privacy by design — found from sitemap www.involv-intranet.com Checked 3 Nov 2026 Details →
- 11 Works council, private phones & privacy by design — found from sitemap knowledge.involv-intranet.com Checked 3 Nov 2026 Details →
- 12 Integration, identity & administration — found from sitemap www.involv-intranet.com Checked 3 Nov 2026 Details →
- 13 Integration, identity & administration — found from sitemap knowledge.involv-intranet.com Checked 3 Nov 2026 Details →