SpeakUp

The Group Counsel

Intake spans phone, voicemail, browser and app with 100+ languages backed by machine and human translation and transcription, and anonymous two-way follow-up is first-class — a 49% check-back rate says reporters actually come back to the dialog. An explicit statement that the platform collects no IP addresses, device fingerprints or identifying metadata underpins the 100% anonymity guarantee. I found no public information on WCAG accessibility or per-channel anonymity engineering, which is what the top band demands. 7 13

Report an error

The Group Counsel

Cases flow into a structured environment with triage, investigation documentation, custom workflows, custom role-based access and an audit-ready trail from report to closure, plus dashboards and exports for regulators — that clears the working bar. But statutory deadline handling is referenced only generically, and I found no public information on automated acknowledgment and feedback clocks, exclusion of implicated case handlers for conflict of interest, or per-case retention and deletion rules, which is exactly what a dozen subsidiaries need to stay out of trouble. 4 7 13

Report an error

The Group Counsel

The Directive's duties are named concretely — the 50-employee scope, acknowledgment timelines, follow-up requirements — alongside GDPR, retention and localization commitments and a German supply-chain law among supported regulations, which is more than label-wearing. The mapping stays at that level though: I found no public information on per-country rule sets for national transpositions, legal templates or review by named counsel, or guidance for group-wide channels and external ombudsman setups, the exact items my roll-out would hinge on. 7 13

Report an error

The Group Counsel

The assurance stack is strong and recurring — ISO 27001 and 27701 with quarterly ISAE 3000 Type II audits alongside SOC2 and TISAX, encryption at rest and in transit, MFA and SSO — and the anonymity engineering goes beyond adjectives with an explicit no-IP, no-device-fingerprint, no-identifying-metadata statement. I found no public information on penetration-test attestations, documented end-to-end encryption architecture, or a published security contact and disclosure policy, which keeps it shy of the top band. 7 13

Report an error

The Group Counsel

There is group-level evidence: suitability for organizations with entities in multiple countries is affirmed, dashboards trend across locations, teams and custom roles structure access, and global enterprises like Nestlé and Daimler Truck are named customers. But I found no public information on separate channels per legal entity with hard access separation, delegated administration, external ombudsman roles, or group reporting that respects entity boundaries — so a 25-subsidiary roll-out would rest on customer logos rather than demonstrated entity architecture. 4 7 13

Report an error

The Group Counsel

The contracting entity is the Dutch People InTouch B.V. with an EEA-no-transfer statement and GDPR posture, and the one US tracking tool is explicitly limited to US visitors, so the default direction is European. But the privacy statement expressly covers only the marketing website and refers product-data processing to a separate document, and I found no public information on a published DPA, a product subprocessor list, or named data centers for report content — while a US sibling entity and New York office sit alongside the Dutch company. 3 5 6

Report an error

The Group Counsel

The public answer is a sales conversation: "Our pricing is customized based on your company size and the features you need, such as advanced analytics or SSO," aimed at companies from 500 employees to global enterprises, with no tier, band, entity or setup figures anywhere in the captured pages. A support package with "no additional costs, no hidden fees" is a fairness promise, not a computable invoice — I cannot price a five-entity group from public information at all. 4

Report an error