What Qnister does

Qnister is a Swedish legal-technology SaaS company headquartered in Jönköping that supplies a multi-product compliance platform to more than 1,000 Swedish organisations, including over 500 companies using its GDPR tool. The platform is built on C#/.NET Core with Azure and Azure DevOps, hosted on Swedish servers with redundant data centres, and is ISO 27001 certified. Its core products are Qnister GDPR (a step-by-step tool for Article 30 register management, documentation, and templates, plus a public-sector variant called Qnister GDPR Offentlig), Qnister Whistle (an anonymous whistleblowing and case-management system aligned with the Swedish Whistleblower Act, with WCAG 2.1 compliance, BankID login, and an optional external receiving function staffed by in-house lawyers), and Qnister Sanctions / Qnister Screening (a single-search tool that aggregates EU, UK, Switzerland, UN, and US sanctions lists with daily updates).

The business operates primarily in Sweden with a direct-sales motion (Calendly-scheduled demos, named sales contacts), augmented by a channel-partner programme covering HR, payroll, accounting, and legal-advisory firms (Forefront, Björn Lundén, Flex Applications, Kontek) and a free, public-access screening tool that functions as lead generation. Revenue is predominantly subscription-based: GDPR licences are annual with quote-based setup fees, Whistle tiers are priced monthly per employee band (695–1,295 SEK across 0–999 employees, custom above), and the Screening tool is freemium; recurring revenue is supplemented by professional services including external Data Protection Officer engagements, GDPR advisory billed as consultancy, and whistleblower case investigation work at 2,895 SEK per hour.

Ownership is privately held with no disclosed external investors or parent company; the company was developed from Insatt AB, a sister corporate-law firm whose lawyers author the legal templates and policy content embedded across the platform. Operating scale remains modest at 1–10 employees, with active recruitment indicated by a live careers page.

Name

Qnister

Legal name

Qnister AB

Website

https://www.qnister.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

1–10 employees

Short description

Qnister is a Swedish legal-tech SaaS provider headquartered in Jönköping that delivers GDPR, whistleblowing, and sanctions-screening compliance tools to over 1,000 Swedish organisations across private and public sectors.

Ownership category

akta.pro rank

Product category

Regulatory Compliance Software

NAICS

Business Support Services (5614)

SIC

Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Data Privacy, Consent & Compliance Management (HDAEADAG)

Keywords

• GDPR compliance software
• Whistleblowing case management
• Sanctions screening tools
• Data protection compliance
• Regulatory compliance SaaS

Headquarters

HQ city

Jönköping

HQ country

Sweden

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales

Revenue model

1. GDPR SaaS Subscription (Qnister GDPR): Annual subscription to the cloud-based GDPR compliance tool, available in multiple licence tiers. Contracts run 12 months with 3-month notice. Setup cost is quote-based.
2. Whistleblowing SaaS Subscription (Qnister Whistle): Monthly or annual subscription to the whistleblowing platform, priced per employee tier (0-99, 100-249, 250-999, 1000+). Includes onboarding package. Add-ons for extra channels and languages available at additional monthly cost.
3. Qnister Sanctions / Screening (Free): Qnister Sanctions / Screening is offered free of charge to any user as a market-entry and awareness tool. May generate leads for paid compliance services.
4. Data Protection Officer (DSO) Services: External DSO engagement including annual compliance follow-up, bi-annual report reviews, gap analysis, training, and monthly regulatory updates. Offered as an add-on or standalone consultancy.
5. GDPR Advisory / Consultation: Advisory services for in-house DPOs, including email/phone support, incident advice, DPIA guidance, and IMY liaison. Billed as consultancy.
6. Whistleblowing Investigation Services: Qnister's own lawyers act as independent recipient for incoming whistleblowing cases, providing first assessment, follow-up, and legal support. Billed at 2895 SEK/hour.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels5 records

Core offering

Qnister provides Swedish-language SaaS compliance tools for organisations: Qnister GDPR (Article 30 register, templates, checklists for data protection compliance), Qnister Whistle (anonymous whistleblower reporting and case management), and Qnister Sanctions/Screening (sanctions list search covering EU, UK, Switzerland, UN and US OFAC). The suite is bundled with optional professional services including an external Data Protection Officer function, GDPR advisory hours, and a whistleblowing receiving/investigation service.

Product overview

Qnister offers a multi-product legal tech compliance platform centered on three core SaaS products: Qnister GDPR (a cloud-based tool for managing GDPR compliance with registration, documentation, and advisory modules), Qnister Whistle (a secure whistleblower reporting system compliant with Swedish whistleblower law), and Qnister Sanctions/Screening (a sanctions list search tool covering EU, UK, Switzerland, UN, and US registers). The platform also offers supplementary services including external Data Protection Officer (DPO) appointments, GDPR consulting, and GDPR audit services. All core products share a common legal tech platform architecture, and the company indicates it was founded on a legal tech platform concept. Qnister's GDPR tool is used by over 500 companies, and the platform collectively serves over 1,000 organizations.

Differentiator

Problem solved

Functional benefit

Brands

• Qnister GDPR: Cloud service for GDPR compliance management, helping organizations administrate personal data work according to data protection regulations.
• Qnister Whistle
• Qnister Sanctions
• Qnister Screening
• Qnister GDPR Offentlig

Products and services

• Qnister GDPR Cloud-based GDPR compliance SaaS that provides an Article 30 register of processing activities, document templates, checklists, and a centralised compliance hub for Swedish organisations to manage data protection obligations, internal training, and Data Protection Officer workflows.
• Qnister GDPR Offentlig Edition of Qnister GDPR tailored for Swedish municipalities and public-sector organisations, providing GDPR documentation, training, and compliance management adapted to public-sector purchasing frameworks such as SIKTA-qualifying supplier status.
• Qnister Whistle Anonymous whistleblowing SaaS providing secure, two-way encrypted whistleblower-to-case-officer communication, intake channels, and structured case management for organisations required to operate internal reporting channels under the EU Whistleblower Directive or voluntarily adopting speak-up programmes.
• Qnister Sanctions Sanctions screening SaaS enabling daily-updated name matching against EU, UK, Switzerland, UN, and US OFAC sanctions lists to support compliance packages for Swedish organisations screening counterparties.
• External DPO Function (Dataskyddsombud) Professional service in which Qnister supplies an outsourced Data Protection Officer (DPO) to organisations that lack internal DPO capacity, bundled with the Qnister GDPR platform under a single subscription.
• Whistleblowing Receiving Function and Investigation Service Professional service where Qnister's team acts as an outsourced whistleblowing receiving function — accepting reports, contacting reporters, and conducting impartial investigations on the customer's behalf under hourly fee billing.

Quantifiable outcome

• Qnister is used by over 1000 organisations (across all services) and over 500 companies for the GDPR tool specifically.
• +1 more outcomes

Named customers4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

Feature5 records

Partnerships

Three partnerships are on record, tiered core and minor.

• Insatt ABcoreStrategic or Co-development PartnerInsatt AB is Qnister's sister company. The idea for Qnister was born when Insatt's corporate lawyers were working on GDPR for their clients and realised that the right systematics and pedagogy could help clients manage GDPR themselves. The result was Qnister GDPR. All legal templates and policies for Qnister Whistle are developed by Insatt's legal team.
• ForefrontminorGTM or Marketing PartnerForefront is an IT and Management consulting group. Within the Tech Law & Compliance specialism, Forefront offers practical advice and implementation in IT law, GDPR, information security, whistleblowing, and AI. Listed as a Qnister collaboration partner on qnister.com/om-oss.
• Björn LundénminorGTM or Marketing PartnerBjörn Lundén is a knowledge and software company founded in 1987 that simplifies everyday life for small and medium-sized businesses through modern software solutions and practical tools for tax, accounting, payroll, and HR. Listed as a Qnister partner.

Scale indicators3 records

Recent moves6 records

Expansion highlights7 records

Direct peers

• EQS Group: EQS Group is a European compliance SaaS provider with products covering whistleblowing (EQS Integrity Line), compliance/regulatory workflows, and investor relations/corporate communications. Its multi-product compliance architecture parallels Qnister's GDPR + Whistle + Sanctions suite, serving similar European mid-market regulated customers.
• OneTrust: OneTrust is the global category leader in privacy management and GDPR SaaS, with a platform covering consent, Article 30 records, DSAR/DSR automation, and vendor risk. It is the closest direct competitor to Qnister GDPR for mid-market and enterprise privacy programmes.
• TrustArc: TrustArc (formerly TRUSTe) offers privacy compliance SaaS including consent management, GDPR assessments, and ongoing monitoring. It competes head-on with Qnister GDPR in the EU privacy tooling market and represents the same vendor-segment Qnister targets.
• DataGuard: DataGuard is a German/European privacy and information-security compliance SaaS that combines GDPR tooling with ISO 27001 readiness, DSGVO advice, and a compliance marketplace. It directly mirrors Qnister's combination of self-service SaaS and embedded expert (DSO/DSGVO) services.
• 2B Advice: 2B Advice is a German data-protection/privacy consultancy and software provider for GDPR and LGPD compliance, including DSAR management, ROPA tooling, and DPO-as-a-service — overlapping with both Qnister GDPR and its DPO consulting offering in the European market.
• NAVEX Global: NAVEX Global is the leading global provider of ethics and compliance software, including whistleblower hotline/case management (NAVEX WhisrB), policy management, and risk/compliance training. It is the most direct competing platform to Qnister Whistle, especially after acquiring WhistleB in 2021.

Emerging players

• Conductiv: Conductiv is an emerging whistleblower and speak-up platform targeting EU compliance with the EU Whistleblower Directive and national laws (similar to Qnister Whistle). It represents a venture-backed niche competitor to Qnister in the Swedish and broader European whistleblowing market.

Broad incumbents

• Vanta: Vanta is a fast-growing US-based compliance automation platform covering SOC 2, ISO 27001, HIPAA, GDPR, and more across a broader scope than Qnister. It competes indirectly for the same compliance-driven buyer and represents an emerging horizontal incumbent that could expand into Qnister's niches.

Regional players

• Holm Security: Holm Security is a Sweden-based vulnerability management and compliance SaaS that maps scans to standards such as ISO 27001, PCI DSS, and NIS. It is comparable to Qnister as a Stockholm/Jönköping-region Swedish security/compliance SaaS targeting mid-market enterprises, though Holm's focus is more technical.
• Securys: Securys is a Swedish cybersecurity and compliance consultancy (GDPR, NIS, ISO 27001) that builds automated compliance assessments. It is comparable to Qnister as a Swedish-headquartered compliance specialist competing for the same public-sector and regulated enterprise buyers.

Market position

Strengths5 records

Weaknesses4 records

Competitive moat6 records

Key risks5 records

Key highlights7 records

Customer concentration

• YouTubeyoutube.com/channel/UCjCY7DuG2_Nen6qK1Zg10wQ
• Facebookfacebook.com/Qnister
• LinkedInlinkedin.com/company/qnister/?originalSubdomain=se

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Qnister