LegalTegrity
Compliant whistleblower software for small and medium-sized businesses
LegalTegrity GmbH offers a cloud-based whistleblowing and compliance solution designed specifically for small and medium-sized businesses. The SaaS platform is developed and hosted in Germany within the ISO 27001-certified Open Telekom Cloud, enabling anonymous reports and secure, GDPR-compliant two-way communication, as well as intelligent case and deadline management, reporting, and telephone hotline channels. Plug-and-play with no IT implementation required; support available in German and English. In addition, LegalTegrity offers modules and services such as a legal registry, ISMS, and training.
Security & Compliance
Security and privacy are top priorities.
Security Features
Certifications
- Hosting provider (Open Telekom Cloud) ISO 27001 certified
- ISO 27001
Data & Hosting
Data residency
Germany (Open Telekom Cloud, Magdeburg/Biere data centers)
Retention & deletion
Data is retained in accordance with statutory retention periods; at the end of the contract, it is not deleted before those periods expire unless the licensee instructs otherwise. The licensee can export data up to the last day of the contract term. If the contract is terminated for non-payment, data is deleted after six months unless the outstanding fees are subsequently paid.
LegalTegrity promotes a “Regproofed” approach to legal compliance. The company had not published any SOC 2 or ISO certificates at the time of the review.
Feature Scope
Security & hosting: Compliance: Implementation: Support:
- Anonymous and open reporting via two channels: online portal and telephone hotline
- Customizable reporting form; standard or organization-specific text and questionnaires
- Integrated translation (2 languages included in Professional; >40 languages available; read-aloud function)
- Case management with automated workflows, helpful checklists, complete documentation of follow-up measures
- Intelligent deadline management with reminders; extensive reporting and unlimited case categories
- Anonymous, secure two-way chat between whistleblower and case handler; avoids email for sensitive content
- Corporate branding, responsive design for all devices, chatbot defense for public reporting channels
- Support for corporate groups/multi-entity structures; admin roles (2–unlimited depending on plan)
- Service portal with communications package and training materials; optional online trainings
- Optional operation of the reporting office by LegalTegrity (OmbuTegrity) as an add-on
- Made & hosted in Germany; Open Telekom Cloud (Deutsche Telekom), ISO 27001 certified, 99.9% availability
- Data centers in Germany (Magdeburg/Biere); tested backups
- Anonymity protections: no personal data required; personal PIN + 12-digit Case ID; metadata removal on file upload; GDPR session cookie only (no tracking)
- Supports compliance with EU Whistleblowing Directive, national whistleblower laws (e.g., HinSchG), GDPR/DSGVO, Supply Chain Act (LkSG), Money Laundering Act; AGG referenced; “Regproofed” legal compliance approach
- Plug-and-play; immediately usable after booking; link for intranet/website; online setup and onboarding
- Bilingual customer service (DE/EN) via phone and email; premium support on Enterprise; webinars and materials
Pricing hints: Tiered SaaS pricing by employee count, billed annually (monthly equivalents shown): Essential: 588 €/year (49 €/month*) <50 employees; Professional 250: 1,188 €/year (99 €/month*) <250; Professional 1000: 1,990 €/year (165.83 €/month*) <1,000; Enterprise: price on request >1,000. Add-ons: additional languages 29 €/month each; additional admin accesses 29 €/month each; optional online trainings; optional operation of reporting office (OmbuTegrity). Contract term 12 months with auto-renewal; 3-month money-back guarantee. Currency: EUR. (*indicates annual billing.)
Security hints: Hosted in Germany on Deutsche Telekom’s Open Telekom Cloud; ISO 27001 certified; 99.9% availability. Anonymity: no personal data required, personal PIN + 12-digit Case ID, metadata removal on upload, GDPR session cookie only (no tracking). Secure, anonymous in-platform chat; avoids email for sensitive content. Data centers in Magdeburg and Biere with tested backups.
Compliance hints: Supports EU Whistleblowing Directive, national implementations (e.g., HinSchG), GDPR/DSGVO, Supply Chain Act (LkSG), Money Laundering Act; AGG referenced; marketed as “Regproofed” for legal compliance.
Implementation hints: Plug-and-play; immediately ready after booking. Company receives a link for intranet/website; employees can use without training. Online setup/onboarding included in Professional and above; service portal with communication package and training materials. Claimed ‘be compliant in 5 minutes’; no IT implementation required.
Support hints: Bilingual (German/English) customer service via phone and email included; premium customer service on Enterprise. Access to training materials, webinars, and communication packages. Availability SLA: platform 99.9% (hosting).
Integration hints: Built-in phone hotline channel and integrated translation; supports multi-entity/corporate group structures.
- Reporting channels: Online web form (customizable questionnaire), phone hotline included; responsive UI; accessible on any device; optional text-to-speech/read-aloud. • Whistleblower experience: Fully anonymous option, PIN + case ID for secure re-access; anonymous, real-time chat with case handlers; ability to upload files with automatic metadata deletion; status visibility until case closure. • Case management: Workflow by compliance experts with to-do lists; dashboard with processing status; intelligent deadline management; GDPR-compliant documentation; annual reports and KPIs; unlimited case categories; structured role/permissions for central/decentral teams; group structures for corporate groups. • Administration and branding: No IT implementation; browser-based SaaS; configurable questionnaire and branding/whitelabel; optional external ombudsperson integration; unlimited users/admins in Enterprise (lower tiers include 2–3 admin accesses). • Internationalization: Available in 35–40+ languages; additional languages can be added. • Security and hosting: Made & hosted in Germany in the Deutsche Telekom Open Telekom Cloud (German data centers, ISO 27001-certified infrastructure); two-factor authentication; malware protection; continuous penetration testing; anonymous chat; platform operator has no access to case content; data accessible only to authorized company users; GDPR-compliant data handling; session-only cookie without tracking. • Reliability: 24/7 availability; automatic updates and product releases. • Legal coverage: Aligns with EU Whistleblowing Directive and national implementations; supports Supply Chain Act (LkSG) and Anti-Money Laundering Act (GwG); documentation to evidence compliance.
Pricing hints: Tiered, employee-based annual licensing. Examples cited: Essential €588/year (<50 employees); Professional 250 €1,188/year (<250); Professional 1000 €1,990/year (<1,000); Enterprise on request (>1,000). Some pages list Professional at €1,990/year for <1,000 and note from €2,990/year for >1,000 in older FAQs. Contract term typically 12 months with auto-renewal and a 3-month money-back guarantee mentioned. Additional languages: €29/month per language (Pro licence).
Security hints: Hosting in Germany (Open Telekom Cloud by Deutsche Telekom; ISO 27001-certified infrastructure); two-factor authentication; malware protection; continuous pen testing; anonymous two-way chat; metadata deletion on upload; GDPR-compliant processing; session-only cookie without tracking; access limited to authorized company users (operator has no access). TÜV and DIN ISO 27001 certification for the service stated as 'in implementation' on some pages.
Compliance hints: Supports EU Whistleblowing Directive and national laws (HinSchG), Supply Chain Act (LkSG), Anti-Money Laundering Act (GwG), IPO contexts; GDPR-compliant documentation and data processing. Guidance highlights correct retention periods and adaptability to future regulatory changes.
Implementation hints: No software installation; browser-based SaaS; plug-and-play; ready to use immediately after booking; link provided for intranet/website to access both reporting and case management. Onboarding materials and tutorials included. Availability 24/7; Open Telekom Cloud targets 99.9% availability. Demo video available for a 5-minute overview.
Support hints: Customer service in German and English via phone and email; training documents/tutorials included; communication templates and best practices provided; service portal with communications kit and training materials on higher tiers; premium customer service in Enterprise.
Integration hints: External ombudsperson/external counsel can be added as administrators/case handlers. Whitelabel option for partners.
Features at a Glance
Core HR
- Workflows
- Multi-entity
- Roles & permissions
Analytics
- Dashboards
Data & API
- Data export
Mobile
- Responsive UI
Administration
- Custom fields
- Audit trail
Security & IT
- MFA
- RBAC
- Audit logs
- Data residency region
Compliance
- GDPR
- DPA available
Pricing Model
Per employee
Monthly amounts are based on annual billing. The telephone hotline is included in all plans.
Implementation
Support
Email · Phone
SLA: Platform availability of 99.8–99.9%. For critical errors, remediation begins within 12 working hours (CET/CEST), with a target of resolution within 24 hours under the terms and conditions.
Integrations
LOLYO MACH Employee App
Collaboration