lawcode
Lawcode GmbH is a Koblenz-based SaaS provider of an AI-supported, modular compliance platform covering EU regulations (EUDR, CSRD/VSME, CSDDD/LkSG, HinSchG) for 1,500+ European enterprises; acquired by SAI360 in September 2025.
- Company typePrivate
- Founded2020
- HeadquartersKoblenz, Germany
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What lawcode does
Lawcode GmbH is a German software company headquartered in Koblenz that develops and sells the lawcode Suite, a multi-tenant SaaS compliance platform covering EU regulatory requirements including the EU Deforestation Regulation (EUDR), Corporate Sustainability Reporting Directive (CSRD/VSME), Corporate Sustainability Due Diligence Directive (CSDDD/LkSG), and the Whistleblower Protection Act (HinSchG). The platform consists of 8 modules — Hintbox whistleblower system, supply chain compliance, sustainability reporting, approvals and authorizations, EUDR, compliance training/LMS, policy management, and CIRS — with each module designed to cover one regulation completely and integrate with the others. The platform is ISO 27001 certified, GDPR-compliant, hosted exclusively on German servers, and claims 3-7 business day deployment versus traditional compliance implementations.
The company operates a hybrid go-to-market combining product-led growth (14-day free trial, no credit card required), enterprise field sales (personalized 30-minute demos), and a two-tier partner network of law firms, compliance consultancies, and technology integrators. Pricing is quote-based and modular, with customers selecting and paying for specific modules on annual subscriptions. The customer base of 1,500+ companies spans retail, financial services, automotive, waste management, sports, and technology sectors, with named logos including Rewe Group, Kyocera, FC Bayern München, Jimdo, RSM Ebner Stolz, and Trusted Shops. Marketing emphasizes thought leadership through whitepapers, blog, an ESG podcast, webcasts, and active social media presence across LinkedIn, Facebook, Instagram, TikTok, and YouTube.
On September 7, 2025, Lawcode was acquired by SAI360, a global risk and compliance software provider, providing Lawcode with access to SAI360's international distribution network and positioning the combined entity to modernize the U.S. whistleblower hotline market with Lawcode's Hintbox platform. The company was founded in 2020, operates with 11-50 employees, and was previously privately held with no disclosed funding rounds prior to the acquisition.
lawcode firmographics
Firmographics- Name
- lawcode
- Legal name
- lawcode GmbH
- Website
- https://lawcode.eu
- Company type
- Private
- Founded year
- 2020
- Operating status
- Acquired
- Headcount range
- 11–50 employees
- Short description
- Lawcode GmbH is a Koblenz-based SaaS provider of an AI-supported, modular compliance platform covering EU regulations (EUDR, CSRD/VSME, CSDDD/LkSG, HinSchG) for 1,500+ European enterprises; acquired by SAI360 in September 2025.
- Ownership category
- akta.pro rank
lawcode industry classification
Industry- Product category
- ESG Compliance Software
- NAICS
- Custom Computer Programming Services (541511)
- SIC
- Services-Management Services (8741)
- akta.pro primary industry
- Records Management, Information Governance & Retention (BPAEAPAO)
- akta.pro secondary industries
- Regulatory Compliance Management (Policies, Attestations, Obligations Mapping) (FSAFAKAG), Regulatory Taxonomy, Rules Mapping & Controls Testing (FSAFAOAN)
Keywords
Where lawcode is headquartered
LocationHeadquarters
- HQ city
- Koblenz
- HQ country
- Germany
- HQ region
- Europe
Offices2 records
Markets served
lawcode business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription - Modular Platform: Multi-tenant SaaS platform where customers select and pay for specific modules needed. Each module covers one regulatory requirement and can be used independently. Customers can add modules as needed without data migration.
- Partner Integration Services: Technical partners integrate the lawcode Suite into their existing systems (ERP, SCM platforms), expanding their offering with ESG and compliance functions. Consulting partners provide implementation support to end customers.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Pay-as-you-go | 14-day free trial with full module access |
| Subscription | Annual | Custom modular subscription based on selected modules |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels8 records
lawcode product offering
Product offeringCore offering
lawcode Suite is a multi-tenant SaaS ESG compliance and risk management platform with 8 modules covering EUDR (deforestation), CSRD/VSME (sustainability reporting), CSDDD/LkSG (supply chain due diligence), HinSchG (whistleblower protection), compliance training, policy management, approvals, and CIRS. Customers subscribe to individual regulatory modules with AI-supported risk analysis, automated reporting, and ISO-27001 certified infrastructure hosted exclusively on German servers.
Product overview
The lawcode Suite is a multi-tenant SaaS ESG compliance and risk management platform composed of 8 integrated modules: Hintbox (whistleblower system), Supply Chain Compliance, Sustainability Reporting (CSRD/VSME), Approvals & Authorizations, EUDR-Modul, Compliance Training & LMS, Policy Management, and CIRS. Each module covers one regulatory requirement completely (EUDR, CSRD/VSME, CSDDD/LkSG, HinSchG) and works seamlessly together. The platform is AI-supported, ISO-27001 certified, hosted exclusively on German servers, and enables deployment in 3-7 business days.
Differentiator
Problem solved
Functional benefit
Brands
- Hintbox: Whistleblower platform - a secure, GDPR-compliant, no-code platform for whistleblower reporting with rapid deployment and multi-language support.
Products and services
- Hintbox (Hinweisgebersystem) GDPR-compliant whistleblower system providing anonymous reporting channels, end-to-end encrypted communication, automatic confirmation of receipt within 7 days, dynamic forms for case management, and audit-proof documentation. Fully compliant with HinSchG (German Whistleblower Protection Act) and EU Whistleblowing Directive for companies with 50+ employees.
- Lieferketten-Compliance (Supply Chain Compliance) Automated supply chain risk analysis and supplier monitoring across the entire value chain. Features automated supplier questionnaires, supplier monitoring, human rights and environmental standards compliance, NACE code-based risk assessment, action tracking, and complete BAFA reporting documentation for CSDDD/LkSG.
- Nachhaltigkeitsreporting (Sustainability Reporting) ESRS/VSME-compliant sustainability reporting platform that generates reports in weeks instead of months. Features double materiality analysis following ESRS standards, GHG climate balance and CO2 footprint calculation, and AI-supported reporting. Designed for large enterprises under CSRD and SMEs under VSME.
- Freigaben & Genehmigungen (Approvals & Authorizations) Digital approval workflows for gifts, invitations, and donations with automatic threshold checking and escalation. Provides audit-proof trail and reporting for anti-corruption management.
- EUDR-Modul (EU Deforestation Regulation) EUDR compliance module for geodata capture of cultivation areas and raw materials, automatic risk analysis and due diligence declarations, and direct connection to the EU information system. Legal compliance confirmed by Taylor Wessing for companies trading wood, rubber, leather, soy, palm oil, cocoa, coffee, and beef.
- Compliance-Schulungen & LMS Compliance training module with automated assignment, tracking, and documentation of mandatory training courses. Features role and region-based training content, automated success control, certification, and integration with all lawcode Suite modules.
- Richtlinien-Management (Policy Management) Central policy management with automatic versioning, knowledge acknowledgment documentation, and audit-proof documentation. Enables centralized control of all corporate guidelines and policies.
- CIRS (Critical Incident Reporting System) Anonymous error reporting system for patient safety and critical incident reporting in healthcare settings.
- lawcode Suite Multi-tenant SaaS ESG compliance and risk management platform bundling 8 integrated modules covering EUDR, CSRD/VSME, CSDDD/LkSG, HinSchG, compliance training, policy management, approvals, and CIRS. Each module covers one regulatory requirement completely and works seamlessly with others. AI-supported, ISO-27001 certified, with deployment in 3-7 business days.
Quantifiable outcome
- 70% reduction in manual compliance efforts
- +3 more outcomes
Companies that use lawcode
Customer profileNamed customers15 records
Segments5 records
Ideal customer profiles4 records
lawcode technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration3 records
AI capability3 records
Feature7 records
lawcode partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered flagship, core and minor.
- SAI360flagshipSAI360, a provider of risk and compliance software, acquired Lawcode on September 7, 2025. The acquisition aims to expand into the U.S. market and modernize the whistleblower hotline industry with Lawcode's GDPR-compliant, no-code Hintbox platform. SAI360 gains Lawcode's secure, rapid-deployment whistleblower technology.
- DRK-Service GmbHcoreConsulting partner providing implementation support for regulatory compliance requirements including CSDDD, EUDR, and CSRD/VSME using the lawcode Suite.
- Scheja & PartnerscoreCompliance consultancy partner supporting customers in implementing regulatory requirements with the lawcode Suite.
- Taylor WessingcoreInternational commercial law firm that has confirmed the legal compliance of lawcode's EUDR module. Provides legal opinions on regulatory compliance.
- blue&orange CompliancecoreCompliance consultancy partner for implementation of ESG and regulatory requirements.
- Graf von WestphalenminorLaw firm providing compliance consulting services with lawcode Suite integration.
- Arnecke Sibeth DabelsteinminorLaw firm partner for compliance consulting and regulatory implementation.
- Paulitsch LawminorLegal consultancy partner for regulatory compliance implementation.
- TechnologieWerftcoreTechnology partner for integration services connecting lawcode Suite with existing enterprise systems.
- WBX Whistleblowing ExpertecoreWhistleblowing expertise partner specializing in implementation of whistleblower systems.
- medcomplianceminorCompliance consultancy partner for healthcare sector compliance requirements.
- Caritasverband Erzbistum KölnminorSocial services organization partner for compliance implementation.
Scale indicators5 records
Recent moves5 records
Expansion highlights5 records
lawcode competitors and assessment
Company assessmentDirect peers
- IntegrityNext: Munich-based supply chain compliance platform for LkSG/CSDDD, EUDR, and human rights due diligence. Direct overlap with lawcode's Supply Chain Compliance and EUDR modules.
- OneTrust: Privacy, GRC, ethics, and ESG compliance platform with whistleblower, vendor risk, and sustainability modules. Closest direct peer to lawcode Suite across HinSchG, CSRD, and supplier risk offerings.
- NAVEX Global: Largest pure-play ethics and compliance software vendor (whistleblower hotline, policy management, training). Directly comparable to lawcode's Hintbox and broader compliance suite, and the most natural competitor in EU whistleblower after acquiring WhistleB.
- SpeakUp (People Intouch): European whistleblower and ethics hotline provider predating HinSchG. Direct competitor in Hintbox's core category, particularly for DACH enterprise and public-sector buyers.
- EQS Group: German-listed compliance, whistleblower, and investor relations SaaS provider with a strongly overlapping EU regulatory footprint. Highly comparable customer base (DACH Mittelstand, regulated industries) and product mix to lawcode.
Broad incumbents
- Diligent (Galvanize/ACL): Enterprise GRC platform covering ethics, compliance, audit, and board reporting. Overlaps with lawcode's policy management, training, and approvals modules for large enterprise buyers.
- ServiceNow GRC: Integrated risk and compliance suite within the ServiceNow platform. Competes for the same compliance budgets, particularly with large enterprises already on ServiceNow ITSM.
- SAP GRC / SAP Sustainability: ERP incumbent bundling sustainability reporting (CSRD), supply chain risk, and GRC modules into its core suite. Represents the most significant bundling threat to standalone compliance platforms like lawcode.
- Wolters Kluwer (Enablon / TeamMate): Global information services and compliance software incumbent covering GRC, audit, and regulatory reporting. Comparable through its GRC and ESG software portfolio, though it operates at much larger scale and broader scope than lawcode.
Emerging players
- Resolver (Kroll): Risk and compliance platform covering whistleblower incidents, GRC, and ESG. Comparable in whistleblower and policy workflows, now operating under Kroll's broader risk advisory umbrella.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
lawcode social profiles
Digital presencelawcode compliance and trust
Trust signalCompliance4 records
lawcode financial estimates
Financial estimateRevenue estimate
Valuation estimate
lawcode leadership team
Management profileNumber of profiles
Profiles4 records
lawcode funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
lawcode M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about lawcode
What does lawcode do?
lawcode Suite is a multi-tenant SaaS ESG compliance and risk management platform with 8 modules covering EUDR (deforestation), CSRD/VSME (sustainability reporting), CSDDD/LkSG (supply chain due diligence), HinSchG (whistleblower protection), compliance training, policy management, approvals, and CIRS. Customers subscribe to individual regulatory modules with AI-supported risk analysis, automated reporting, and ISO-27001 certified infrastructure hosted exclusively on German servers.
Is lawcode a public or private company?
lawcode is a private company. It is classified as corporate owned and is currently acquired.
When was lawcode founded?
lawcode was founded in 2020. It employs 11 to 50 people.
Where is lawcode based?
lawcode is headquartered in Koblenz, Germany, in the Europe region.
How does lawcode make money?
Two revenue lines are on record. SaaS Subscription - Modular Platform is the primary driver. The others are partner Integration Services.
Who are lawcode's main competitors?
Direct peers on record are IntegrityNext, OneTrust, NAVEX Global, SpeakUp (People Intouch) and EQS Group. Broad incumbents are Diligent (Galvanize/ACL), ServiceNow GRC, SAP GRC / SAP Sustainability and Wolters Kluwer (Enablon / TeamMate). Resolver (Kroll) is listed as an emerging player.
Does lawcode have an API?
Yes. Open API architecture for seamless connection to ERP, SCM or individual platforms. The platform provides open interfaces and extensive documentation for technical partners to integrate the lawcode Suite modules for sustainability, risk and whistleblower protection management into their systems. Developer documentation is at docs.lawcode.eu.
What industry is lawcode in?
lawcode's product category is ESG Compliance Software. Its primary akta.pro industry code is BPAEAPAO, Records Management, Information Governance & Retention, with a secondary code of FSAFAKAG, Regulatory Compliance Management (Policies, Attestations, Obligations Mapping). Its NAICS code is 541511 and its SIC code is 8741.