Trusty Compliance App: facts for vendor assessment
This page answers the questions a compliance, HR, IT or procurement team asks before choosing compliance management software for policies, training and whistleblowing. Plain facts, no marketing, maintained by Trusty AG. Last reviewed: 5 November 2026.
Product page: Trusty Compliance App. Whistleblowing details: Trusty Whistleblowing facts. Questions not answered here: book a walkthrough.
Product at a glance
| Item | Fact |
|---|---|
| Product | Trusty Compliance App: one place for employees to read company policies, complete compliance training and reach the whistleblowing channel |
| Provider | Trusty AG, Hünenberg (canton of Zug), Switzerland |
| Type | Software as a service on desktop and mobile; no IT set-up required |
| Employees | Unlimited employee access, from 2 to 50,000+ employees, included |
| Included content | 10 policy slots and 6 training slots, preloaded with recommended policies and training modules; use them, replace them or upload your own |
| Whistleblowing | Whistleblowing channel included (Lite plan): secure reporting website, 1 user, 1 language, unlimited reports and storage, two-way anonymous communication |
| Trust profile | Public company trust profile: sanctions screening, adverse media, human rights, environmental and corruption risk |
| Customers | More than 1,000 companies use Trusty software |
Policies and training included
| Item | Fact |
|---|---|
| Recommended policies (10) | Whistleblowing; Code of Ethics and Business Conduct; Conflicts of Interest; Data Protection and Privacy; Gifts and Hospitality; Health and Safety; Information Security; Non-Discrimination and Anti-Harassment; Social Media; Business Continuity |
| Recommended training modules (6) | Whistleblowing; Anti-Corruption and Fraud Awareness; Code of Conduct and Compliance Basics; Cybersecurity and Phishing Awareness; Data Protection and Privacy (GDPR); Workplace Health and Safety |
| Specialist sets | Core compliance, Crypto and MiCA, ESG and sustainability, FinTech and FinReg; mix Trusty templates with your own documents |
| More slots | Additional policies and trainings with Trusty Credits |
Employee access and tracking
| Item | Fact |
|---|---|
| Sharing | Secure link or QR code, no login required |
| Access | Desktop and mobile, online and offline; changes sync automatically when back online |
| AI summaries | Complex policies turned into short summaries |
| Translations | Publish in several languages with full editing control |
| Updates | Replace a policy version and employees see the update immediately |
| Tracking | Where policies are opened, who completed assigned training, progress across teams, automated reminders for outstanding actions |
Pricing, billing and contract terms
| Item | Fact |
|---|---|
| Price | €1,200 per year: whistleblowing hotline (Lite plan), 10 ready-made compliance policies, 6 training modules, public trust profile, 100 Trusty credits |
| Trial | 30 days free |
| Contract | Online Terms of Service and Price Document; Swiss law, courts of Zug |
| Billing period | 12 months in advance, in EUR |
| Payment methods | Card or bank transfer against invoice (payments processed by Stripe) |
| VAT | Prices exclude VAT |
| Price changes | Annual indexation to the EU consumer price index (Eurostat); other price increases apply from the next renewal only |
| Term and renewal | Runs until cancelled; cancel at any time from within the app, effective at the end of the paid term, full access until then |
| What happens at the end | Account locked for 30 days with export available, then permanently deleted from production; deletion from backups follows the regular backup rotation |
| Liability | Capped at EUR 30,000 under the Terms of Service |
Security and data protection
| Item | Fact |
|---|---|
| Hosting location | Virtual servers at Hetzner Online GmbH in Nuremberg, Germany, ISO 27001 certified data centres; data stays in the EU |
| Architecture | Multi-tenant SaaS, one account per organisation, data logically isolated |
| Encryption | TLS 1.2 / 1.3 on all connections; files encrypted at rest with AES-256; passwords hashed with bcrypt |
| Application protection | Web application firewall (ModSecurity, OWASP Core Rule Set) and firewall; development along OWASP principles; four-eyes code review before every release |
| Vulnerability management | Continuous automated scanning with tiered fix deadlines (critical: 1 day); annual external penetration test with retest, results available under NDA |
| Access control | Single sign-on via Microsoft Entra ID or SAML 2.0; role-based permissions; server administration by SSH keys only, no password and no root login |
| Backups and recovery | Daily encrypted backups at two independent EU providers (France); recovery point objective 24 hours, recovery time objective 4 hours |
| Availability | 99% per calendar month, commercially reasonable efforts |
| GDPR | Processing in the EU/EEA only; Data Processing Agreement under Art. 28 GDPR; data breach notice to the client within 24 hours |
| Certifications | The hosting data centres are ISO 27001 certified. Trusty AG itself does not hold an ISO 27001 certificate; its information security framework is aligned with ISO/IEC 27001 |
Full security detail, sub-processors and policies: Trusty Whistleblowing facts (same platform terms).
Company
| Item | Fact |
|---|---|
| Legal entity | Trusty AG, Bösch 82, 6331 Hünenberg, Switzerland (canton of Zug) |
| Products | Compliance App, Whistleblowing, QuickScreen360, EUDR Passport |
| Website | trusty.report |
This page is maintained by Trusty AG and reviewed with every product, price or contract change.