drei.plus

What It Is

dreiplus provides compliance-focused security services for whistleblower protection, rather than traditional firewall, endpoint security, or intrusion detection products. Its core offering includes a secure, anonymous web-based whistleblowing system, as well as a Managed Service. According to the text, customers can delegate all obligations under the EU Whistleblower Directive, Germany’s HinSchG, and relevant state laws to dreiplus, which can act as an external whistleblower protection officer.

Core Capabilities and Security Scope

In terms of protection type, this is closer to “compliance security” and the creation of an internal risk-reporting channel. Its focus is on protecting whistleblower identities, providing an anonymous online entry point, and ensuring the reporting channel is available around the clock. Deployment is based on a web system combined with externally managed services, without consuming internal resources. In terms of workflow, dreiplus pre-classifies incoming reports before forwarding them to the appropriate responsible person. Where necessary, it also supports internal investigations and communicates with whistleblowers as a neutral party.

Compliance, Pricing, and Integrations

Compliance is the clearest selling point of this service. The text explicitly mentions the EU-Hinweisgeber-Richtlinie, Germany’s HinSchG, and relevant state laws. However, it does not disclose security certifications such as ISO 27001, SOC 2, or TÜV, nor does it explain encryption, access control, audit logs, data residency, or retention policies. Pricing, plans, payment methods, and contract terms are also not mentioned. There is no information on integration capabilities with APIs, SSO, email systems, ticketing systems, or HR systems.

Pros, Cons, and Best-Fit Users

Its advantage is its very clear positioning. It has already been adopted by 35 public legal entities and around 20 mid-sized companies in the nursing and healthcare sector. By combining a system with managed compliance services, it can reduce the internal compliance burden on local governments, municipalities, and healthcare or nursing institutions. The downside is limited technical transparency, making it difficult to assess its cybersecurity maturity from the available text alone. Pricing and service boundaries are also unclear.

Access from China and Alternatives

Access from China is unknown. The text does not mention a Chinese-language site, mainland China nodes, RMB payments, or cross-border data arrangements. If Chinese organizations need similar capabilities, they should carefully verify access stability, data export compliance, language support, and adaptation to local laws. For organizations operating in China, it is usually advisable to also evaluate local compliance consulting services, internal whistleblowing platforms, or GRC/compliance management tools with local deployment capabilities.