FaceUp
Ethics & compliance platform for lean teams
By FaceUp · 4.6/5 Value-Position score (estimate)
Positioning guardrails
Best for
- Lean legal, HR, and compliance teams that need an anonymous reporting channel live in hours, with no IT project, code, or professional-services contract.
- Multi-entity and multinational employers that need 113 reporting languages and separate channels per entity, brand, or region on every plan.
- Organizations under the EU Whistleblowing Directive, California SB 553, UK PIDA, Dodd-Frank, or ISO 37002 that need a defensible case record and audit trail.
- Teams replacing scattered email and spreadsheet case handling with one assignable, auditable case-management workflow.
- Programs that want to switch capabilities on later (investigations, disclosures, hotlines, surveys) without a migration or new contract structure.
Ideal size: 100-5,000 employees people · Scale-up to enterprise with a named ethics & compliance owner and no IT project
Not for
- Buyers who need published, self-serve list pricing before speaking to sales; FaceUp quotes on headcount and chosen capabilities.
- Organizations wanting a full GRC suite with risk registers, control testing, and vendor risk management.
- Teams that need FedRAMP authorization, HIPAA certification, or a FaceUp-held SOC 2 report; FaceUp claims ISO 27001 and GDPR.
- Companies that want a consultant-led implementation, on-premise hosting, or per-request engineering work.
Value metrics scorecard
Time-to-Value
Same day (hours, not days)
~1 days to first production value
Total Cost of Ownership
On request
Platform fee plus selected capabilities, priced on reportable headcount; monthly, quarterly or annual billing (annual saves up to 30%). No list prices published.
Implementation Friction
1/5
Engineering + admin effort required
Value-Position score
out of 5 · model estimate
Full cost breakdown
Mandatory implementation fee
None
Seat tiers
Priced on reportable headcount (employees, or students and staff); no per-seat minimum published; headcount is set at contract and reviewed at renewal.
Add-on costs
- Additional capabilities priced separately: investigations, AI-powered hotlines, extra reporting forms, additional members, disclosures, surveys.
- Enterprise package bundles single sign-on, IP allowlist, advanced security and permission management, custom branding, employee management and integrations, and investigations.
- More members beyond the contracted headcount.
Company & support
Who is behind FaceUp, and how your team gets help once it is live.
Company
- Founded
- Not recorded
- Headquarters
- Not recorded
How you get support
- PhoneNot listed
- EmailAll plans
- Live chatAll plans
- Support portal / ticketsNot listed
- Community forumNot listed
- Help centre / docsAll plans
- Dedicated account managerNot listed
- In person / on-siteNot listed
- Hours
- Not recorded
- Response time
- Not stated
Chat and email support, self-serve setup guides, templates and a knowledge base are listed as included for every customer; 24/7 refers to reporter access, not support hours.
“Not listed” means the vendor’s public pages don’t mention that channel, not that it is unavailable. Ask about it during evaluation.
Market position
Where FaceUp sits against its closest alternatives. Pick any two of cost, speed, friction and buyer score, and up to 9 companies to compare.
Quadrant view
Typical annual cost × Time-to-value
The lines cross at the median of the solutions shown, so about half sit on each side of each line. A dashed ring marks an outlier pinned to the edge; hover for its value.
Companies on the chart 6 / 10
- FaceUp
- DNSFilter
- Intruder
- GoGuardian
- Clever
- usecure
Add or change companies
Up to 10 companies including FaceUp. Listed closest first.
Stack fit signal
Compatibility with standard B2B ecosystems.
No supported MCP path today, so it cannot be driven from an AI client.
AI & MCP readiness
What FaceUp ships in AI, and what it asks of your ecosystem.
AI features shipped
Optional AI features switched on by the customer's own team: AI voice hotline intake (57 languages), in-case translation (113 languages), and reply drafting. The AI voice agent runs on third-party providers including OpenAI. AI hotline intake is sold as an add-on capability.
Your data & models
- Trains on your data
- Not recorded — ask the vendor
- Runs on
- OpenAI
- AI pricing
- Paid add-on
In your ecosystem
- AI connection
- Not supported
- Model key
- Not recorded
- AI usage audit
- Not recorded
Compliance attestations
* IAPP AIGP certifies individuals, not products. It means named staff hold the credential — not that the platform does.
Bottom line
FaceUp is an ethics and compliance platform for lean teams: anonymous reporting, case management, investigations and disclosures in one system, with 113 languages and the same security on every plan. Teams build and change forms, workflows and permissions themselves and typically go live in hours; ISO 27001 certified, GDPR compliant, hosted on AWS in the region you choose. Best for legal, HR and compliance teams running multi-entity whistleblowing programs. Pricing is quote-only, based on reportable headcount.
Frequently asked questions
How is FaceUp priced?
A platform fee plus the capabilities you choose, priced on reportable headcount - everyone who can report, whether employees or students and staff. You are never charged per report. Billing can be monthly, quarterly or annual, and annual billing saves up to 30%. FaceUp does not publish list prices because configuration depends on headcount, entities, channels and capabilities; a short call produces a quote. Headcount is set at contract and reviewed at renewal, so growth during the year does not create a mid-term charge.
How long does implementation take, and do we need consultants?
FaceUp is self-serve. Your team builds the reporting forms, categories, workflows and permissions in admin settings with no code, no IT ticket and no professional-services contract; the vendor says most teams are live in hours, not days. Setup guides, templates, data migration, a knowledge base and chat/email support are included on every plan. The success team can help if you want it, but you never need them to make a change.
Which security and privacy certifications does FaceUp hold?
FaceUp states that its information security management system is ISO 27001 certified and that it is GDPR compliant, and that data is hosted on SOC 2-certified AWS infrastructure - the SOC 2 claim refers to AWS, not to a FaceUp-held report. Controls include encryption on by default, optional end-to-end encryption using each member's password, two-factor authentication, single sign-on, IP allowlisting, metadata stripping and regular penetration testing. You pick the hosting region: AWS in the US, EU, UAE or Australia.
How does FaceUp keep reporters anonymous?
Reporters can report without giving a name: no device ID is linked, IP addresses are not logged, attachment metadata is stripped and voice messages are altered. A private 16-digit case key lets them follow up and exchange messages without an account, and the reporting form makes no calls to external sites. Administrators set access per member and can remove a named person from a single case. Two-way anonymous messaging is included on every plan.
What AI does FaceUp include, and is our data used for training?
Optional, customer-switched features: an AI voice hotline that takes calls in 57 languages and creates structured cases, in-case translation across 113 languages, and message-writing help that the user reviews and sends. FaceUp's privacy policy says the AI voice agent is powered by third-party providers including OpenAI and that, under their agreement, API data is not used to train OpenAI's models; the same policy notes redacted transcripts may be reviewed internally for quality assurance. AI hotline intake is sold as an add-on capability.
Which whistleblowing regulations does FaceUp support?
FaceUp positions itself around the EU Whistleblowing Directive, California SB 553, the Dodd-Frank Wall Street Reform Act, the UK Public Interest Disclosure Act, the OSH Act and ISO 37002. Case records carry assignment, comments, attachments, labels, priorities, due dates, personal-data redaction and a timestamped audit trail, and you can run separate reporting forms per entity, brand or region - which the vendor presents as the basis for defensible, auditable case handling.