Grounded in your policy. Signed at every step. Audit-ready by default.
Training grounded in your own policy. A confidential reporting channel that meets the EU Whistleblower Directive. Case management with a defensible investigation record. Vendor compliance tracking. Quarterly board digest — all in one platform. Works across the US, UK, EU, Canada, Australia, and beyond.
Free up to 10 employees · No credit card · Cancel any time
Why your own policy
Stock libraries don't reflect your operation. Your policy does.
Incumbent compliance vendors ship pre-written courses that look the same for every customer in every state. Useful — but generic. Your General Counsel already wrote a policy that reflects how yourcompany actually handles harassment, data, safety, and ethics. That's the document a regulator would want to see, and it's the document Vouch trains from.
And it's not just preference — it's how mandates actually work. California's Civil Rights Department says plainly: "CRD does not approve training providers." The UK ICO, EU EDPB, Australia's Fair Work Ombudsman, Canada's OPC — every major regulator works the same way. They specify required topics, not approved brands.
Stock-library training has to convince your GC; your own policy doesn't.
For each jurisdiction, Vouch checks the course against the canonical required topics (FEHA, EEOC, OCR, OSHA in the US; UK GDPR & Bribery Act; EU OSH framework; AU WHS; and more) and reports gaps.
Law-update alerts surface in the admin when a mandate takes effect in any of your jurisdictions — with the affected courses pre-identified.
How it works
From policies to a live compliance program in an afternoon
Three steps. One tool. Replace three vendors — training, reporting, and vendor GRC — with a single subscription.
Bring your policies + your people
Upload your harassment, HIPAA, OSHA, code-of-conduct, and privacy policies. Invite employees, plus contractors and vendor staff (they don't count against your seat billing). Pick the jurisdictions you operate in.
Turn on the operations layer
Generate audit-ready training from each policy. Enable your public whistleblower / ethics reporting channel. Add vendors and attach their BAA / DPA / MSA / insurance certificates. Vouch tracks every deadline on one calendar.
Run the compliance program
Every completion, signature, case decision, and vendor renewal is logged. When the auditor calls — or the board asks, or your D&O carrier reviews — export the audit pack, case defense pack, or quarterly board digest in one click.
Features
Six modules, one compliance platform
Training, attestation, whistleblower reporting, case management, vendor compliance, and governance — replace three vendors with one.
Training — grounded in your policy
Turn your harassment, HIPAA, OSHA, GDPR, or code-of-conduct policy into a full training course in minutes. Source-grounded generation cites your document and refuses to invent regulations. Runs a topic-coverage check against the canonical rules for your jurisdictions.
Attestation & audit pack
Learners type their full name to sign at the end. The record captures name, timestamp, IP, user-agent, and the exact text attested to. Export the audit pack as a one-click ZIP the regulator, the CFO, or your D&O insurer will accept.
Whistleblower & ethics reporting
Confidential reporting channel required by the EU Whistleblower Directive, CA SB 553, and SOX. Public URL, anonymous submission, two-way messaging without de-anonymisation, 7-day acknowledgement + 3-month follow-up SLAs built in.
Case management & investigation
Every report becomes a Case with parties, evidence (with SHA-256 chain of custody), interview log, internal notes, and structured findings. Export the immutable defense pack for counsel or insurance. No separate HR Acuity subscription needed.
Vendor & third-party compliance
Track BAA / DPA / MSA / NDA / SOC 2 / insurance certificates per vendor with signed and expiry dates. Renewal deadlines surface on the calendar automatically. Invite contractors and vendor staff to complete training without inflating your seat count.
Governance & board digest
Unified regulatory calendar for training refreshes, case SLAs, law-change effective dates, and vendor document expiries. Print-quality board digest one click away every quarter. SSO, audit log, role-based access included.
Why grounded
Generic AI training vs. Vouch
The difference between "the AI wrote training" and training your General Counsel will sign off on.
- · Trained on a general corpus — invents plausible-sounding regulations.
- · No citation back to your actual policies.
- · May reference rules that don't apply in your state or jurisdiction.
- · Hard to defend in a compliance review or lawsuit.
- Every claim traceable to your own policy document.
- Citations to the document title inside the lesson body.
- Gaps flagged explicitly — never filled with invented content.
- Reviewable by counsel, exportable for audit.
vs. your HRIS
"Doesn't my HRIS include training?"
Technically yes. Practically, no. Here's how Vouch compares to the bundled-LMS modules that ship with your payroll provider.
| Rippling / BambooHR Learning Management | Paylocity / Paycom Built-in LMS | Vouch | |
|---|---|---|---|
| Included in base price | No — paid add-on, quote-only | Bundled, no detail visible | Yes — flat per-active-employee |
| Course content | You bring it (PDF, SCORM) | Generic stock library | Generated from your own policy |
| Jurisdiction-specific topic coverage | Not provided | Generic, slow updates | Topic coverage check per jurisdiction |
| Electronic attestation (signature) | No — completion checkbox only | Limited — basic acknowledgement | Typed signature + IP + timestamp + UA |
| Audit pack export | Manual CSV export only | CSV — no coverage report | One-click ZIP with coverage report |
| Annual refresh automation | Manual re-assignment | Limited | Automatic, per-learner expiry tracking |
| Law-update alerts | No | No | Curated, per-jurisdiction |
| Pricing transparency | Quote-only | Quote-only | Public — from $2/active/month |
We compare honestly. If you're a BambooHR or Rippling customer and our comparison is unfair to your experience, write us at sales@vouchtraining.io and we'll update.
Use cases
Every part of a working compliance program
EU Whistleblower Directive compliance
In effect since December 2023 for companies with 50+ EU employees. Turn on Vouch's public reporting channel, meet the 7-day acknowledgement + 3-month response SLAs automatically, retain investigation records for the required period. Replaces standalone hotline vendors that charge $8–15k/year.
Anti-harassment training (any jurisdiction)
California AB1825 / SB1343, New York State, Illinois, Connecticut, Delaware. UK Worker Protection Act 2024. EU equal-treatment directives. Ontario Bill 168. Australia's positive duty. Generate locally-compliant courses, refresh annually, export signed attestations.
Investigation & case management
Every harassment / ethics / safety report becomes a Case. Log interviews, attach evidence with SHA-256 chain of custody, document structured findings and corrective actions. Export the defense pack ZIP the moment your D&O insurer, defence counsel, or regulator asks. Replaces HR Acuity at a fraction of the cost.
Vendor & third-party GRC
Track every vendor's BAA / DPA / MSA / NDA / SOC 2 / insurance certificate. Automatic renewal alerts 90 days before expiry. Invite contractors and vendor staff to complete training + attestations without inflating your active-seat billing.
Data privacy (HIPAA, GDPR, PIPEDA, PDPA)
Healthcare HIPAA in the US. GDPR Article 39 training for EU and UK. Canada's PIPEDA. Singapore's PDPA. India's DPDP Act. Generate refreshers from your own data-handling policy so training reflects YOUR controls — not a generic template.
Board & audit reporting
Auto-generated quarterly board digest summarising training compliance %, open and closed cases, vendor posture, and upcoming regulatory changes. Save-as-PDF in one click. Turn every board meeting into a five-minute compliance conversation.
Pricing
Pricing that scales the way you grow.
Per-active-employee pricing — inactive seats are free. Annual billing saves 15% and matches how compliance budgets actually get approved. Volume discounts step in automatically as headcount grows.
Starter
Trying Vouch, 10 employees or fewer
Up to 10 active employees
Growth
Solo HR or small compliance team, 25–80 employees
$49/month minimum · billed annually
Replaces a $25–$40/employee/year EasyLlama bundle + a $8k/year whistleblower vendor.
- Unlimited active learners
- Up to 5 published training programs
- Whistleblower reporting channel (EU Directive-compliant)
- Case management + investigation record
- Vendor compliance (up to 25 vendors)
- Topic coverage check + law-update alerts
- Audit pack + case defense pack + board digest
- SCORM 1.2 export · Slack delivery · Email support
Professional
HR Director / GC, real legal exposure, 80–500 employees
$199/month minimum · billed annually
Replaces Traliant ($100/EE/yr) + NAVEX or SpeakUp ($10–15k/yr) + HR Acuity ($15–30k/yr).
- Everything in Growth
- Unlimited training programs + unlimited vendors
- Full investigation workflow (parties, evidence, interviews, findings)
- Defense pack ZIP with SHA-256 chain of custody
- Quarterly board digest PDF
- SSO — Azure AD, Okta, SAML
- Slack + Teams delivery · custom branding
- Gap-fix suggester (AI policy clauses)
- Priority support (4-hour response)
Enterprise
Multi-jurisdiction, 500+ employees, regulated industry
Custom · volume discounts to $0.95/EE at 2000+
Replaces an in-house content team + a $150k+ NAVEX / HR Acuity / Traliant / Vanta stack.
- Everything in Professional
- SCIM 2.0 user provisioning
- Data residency (US / EU)
- Custom retention per case type + per jurisdiction
- BAA + DPA + MSA templates included
- Dedicated CSM + 99.9% SLA
- SOC 2 Type II documentation
- Annual contract, invoice billing
Active-learner pricing means only employees actually assigned training are billable. Inactive seats are free. Monthly billing is available from the Workspace page after signup at the un-discounted rate (no minimum-term commitment).
Volume discounts: As your active headcount grows past tier thresholds, your effective rate auto-adjusts. Growth covers 25–80 employees at $2.50/EE/mo; Professional covers 80–500 at $2.00/EE/mo; Enterprise volume-discounts toward $0.95/EE/mo at 2,000+ employees.
What you don't pay for: No per-course licence fees. No content-library upcharges. No per-administrator seats. No additional cost for SSO at Professional or above.
FAQ
Questions HR and Compliance teams ask
Will this hold up if our auditor, board, or insurer pushes back?+
You get three exports. The training audit pack contains per-learner completion records with timestamps, typed signatures, IP + user-agent, and a topic coverage report — the format auditors and insurance carriers accept. The case defense pack contains the full investigation record with SHA-256 chain of custody on every piece of evidence — the format defence counsel and D&O carriers accept. The quarterly board digest summarises the whole program on a print-quality PDF for board meetings. All three are one click.
Are you on a regulator's approved vendor list?+
No regulator has one. California's CRD, the EEOC, the UK ICO, the EU EDPB, Canada's OPC, Australia's Fair Work Ombudsman, Singapore's PDPC — none of them maintain approved-vendor lists for compliance training. They specify the topics that must be covered and how long the training must run, and they don't pre-approve brands. Vouch generates from your policy and then runs a topic-coverage check against your jurisdiction's actual requirements (FEHA, EEOC, OCR, OSHA, UK GDPR, EU Whistleblower Directive, Australia WHS, etc.), so you can prove coverage without depending on a vendor logo.
How is this different from a training LMS or a whistleblower hotline vendor?+
A training LMS handles training and nothing else. A hotline vendor (NAVEX, SpeakUp, Whispli) handles reporting and nothing else. A case-management tool (HR Acuity) handles investigations. A vendor GRC tool tracks BAAs. Buyers historically stitched three or four subscriptions together and hoped the data lined up. Vouch does all of it — training, attestation, whistleblower reporting, case investigation, vendor compliance, quarterly board digest — in one platform, at one price. That's the wedge.
Does the reporting channel meet the EU Whistleblower Directive?+
Yes. Vouch's public reporting URL, anonymous submission, two-way anonymised messaging, 7-day acknowledgement SLA, 3-month follow-up SLA, and case retention timers are all built to the Directive's specification. It also meets California SB 553, US SOX Section 806, and UK Bribery Act 2010 "failure to prevent" reporting-channel requirements.
Can we run investigations in Vouch, or do we need HR Acuity too?+
You run them in Vouch. Every submitted report becomes a Case with structured investigation workflow: add parties (subjects, witnesses, investigators, HR, counsel), attach evidence with SHA-256 chain of custody, log interviews with verbatim notes, capture internal admin notes, record structured findings + corrective actions + follow-up owner. When it resolves, export the defense pack ZIP for your D&O carrier or defence counsel.
Can contractors and vendor staff use Vouch without inflating our billing?+
Yes. Invite them as CONTRACTOR / VENDOR_STAFF / TEMP user types. They complete required training, sign attestations, and hold certificates — but they don't count against the active-employee seat count that Vouch bills on. You get the compliance coverage for third parties without paying for them twice.
What about jurisdiction-specific mandates (CA AB1825, UK Bribery Act, EU GDPR, etc.)?+
You upload your locally-compliant policy and Vouch generates the course from that. We don't maintain a country-by-country or state-by-state content library — we use your own legally-reviewed policy as the source of truth, which is what your counsel would prefer anyway. The topic-coverage checker then verifies the generated course against the canonical required topics for the jurisdictions you operate in.
Can we recur training automatically?+
Yes. Set a refresh interval per course (annual, semi-annual, quarterly, or custom). When a learner completes the course, their expiry date is set. When the cycle ends, the enrollment re-activates automatically and the learner sees it as outstanding training.
Is our policy data used to train AI models?+
No. Your documents are stored in your workspace database and sent to Anthropic's API at inference time under their no-training policy. We do not fine-tune any model on tenant data.
Can we use our existing HRIS or LMS?+
You can SSO into Vouch from Azure AD or Okta today. SCORM 1.2 export means Vouch-generated content can be pushed into your existing LMS if you have one. Native HRIS integrations (Workday, BambooHR, Rippling) are on the roadmap.
What languages do you support?+
Course content can be generated in English or Spanish today (toggle on the course settings page) — your source policy can be in any language and the agent translates concepts as needed. The platform UI is English, with German, French, Portuguese, Mandarin, and Japanese on the near-term roadmap, prioritised by customer demand.