top of page
Vault Platform
Technology
SaaS Platforms
Workplace Ethics & Speak-Up Platform
Won by giving employees a cryptographically timestamped personal record of their own misconduct reports — removing the 'your word against theirs' dynamic that made every prior speak-up tool fundamentally untrusted by the people it was supposed to protect.
1
MODEL
BUSINESS MODEL
SaaS
model bm
HOW THEY BUILT IT
- Founded 2018 in London; raised seed and Series A (Index Ventures).
- Platform allows employees to record, timestamp, and securely store reports of workplace misconduct with employees retaining their own copy — a design choice no prior ethics hotline had made.
- Sold to HR and Legal/Compliance teams at enterprise employers as a replacement for anonymous hotlines (EthicsPoint, NAVEX) that lacked employee trust.
HOW TO ARCHITECT IT
1. Identify a category where the product's stated purpose and its actual user experience are in direct conflict — that gap is the product.
2. Give the reporting party something they have never had before (their own timestamped copy) as the primary differentiator.
3. Sell to the enterprise compliance buyer on EU Whistleblowing Directive mandates as the urgency driver — compliance deadlines create sales cycles.
4. Use case studies built around measurable culture metrics (report rates, trust scores) rather than feature lists to justify premium pricing.
DISTRIBUTION MODEL
Enterprise Sales, Direct Sales
dm
HOW THEY OPERATIONALIZED
- Direct enterprise sales targeting Chief People Officers, General Counsels, and Chief Compliance Officers at mid-to-large employers.
- EU Whistleblowing Directive (2021) created a mandatory compliance deadline converting latent interest into active procurement.
- Thought leadership and event presence at compliance, HR, and legal conferences positioned Vault as the category authority.
HOW TO REPLICATE WHAT WORKED
What worked: a regulatory mandate converting 'nice to have' culture spending into a compliance line item with a hard deadline — the single most powerful demand catalyst in enterprise SaaS.
The trap: regulatory-mandate-driven sales create a sharp initial spike followed by a saturated TAM; without a second demand driver, growth plateaus after the compliance wave passes.
| PATTERNS OF THIS MODEL
PATTERNS IN PRODUCTS BUILT ON A CATEGORY'S CREDIBILITY GAP:
1. WHERE A CATEGORY'S STATED PURPOSE AND ACTUAL USER EXPERIENCE CONFLICT, THAT GAP IS THE PRODUCT. Tools nobody trusts are a market, not a solved problem.
2. GIVE THE VULNERABLE PARTY SOMETHING THEY HAVE NEVER HAD. Retaining their own timestamped record shifts the power balance and is the reason adoption happens.
3. REGULATORY DEADLINES CREATE SALES CYCLES. Mandates convert an ethical purchase into a compliance purchase with a date attached.
4. JUSTIFY PREMIUM PRICING WITH MEASURABLE CULTURE OUTCOMES, not feature lists — report rates and trust scores are the only credible proof in this category.
What companies with this model reveal
| OPPORTUNITY INTELLIGENCE
GOLDMINE 1 — FIND WHERE STATED PURPOSE AND ACTUAL EXPERIENCE CONFLICT.
Standard: ethics hotlines exist to surface misconduct and are distrusted by the people meant to use them. That gap between the category's promise and its experience is the product.
GOLDMINE 2 — GIVE THE REPORTING PARTY SOMETHING THEY NEVER HAD.
Standard: an employee-retained, timestamped copy of their own report is a structural change no prior hotline made, and it is what generates trust.
GOLDMINE 3 — LET A COMPLIANCE DEADLINE CREATE THE SALES CYCLE.
Standard: the EU Whistleblowing Directive generated budget that did not previously exist. Regulatory deadlines are the best trigger available — and a wasting asset.
THE PIT — YOUR BUYER'S INCENTIVE AND YOUR USER'S INTEREST ARE NOT ALIGNED.
HR and Legal purchase the tool and are also the parties reports are frequently about. Selling a trust product to the institution it holds accountable is a permanent structural tension, not a messaging problem.
THE SECOND PIT — SUCCESS METRICS ARE PERVERSE.
Rising report volume means the product works and reads as a governance failure to the buyer.
MOVE WITH CAUTION — DEADLINE-DRIVEN DEMAND ENDS WHEN THE DEADLINE PASSES.
Untapped Business Model / Gaps / Goldmines / Pits
Patterns & Insights
2
MARKET
mkt mt es
MARKET TYPE
Emerging Market
WHY THEY WON
The workplace ethics/speak-up category existed but was dominated by legacy hotline providers (NAVEX, EthicsPoint) built around anonymity rather than employee trust. Post-#MeToo cultural pressure and EU regulatory mandates created new buyer urgency for a trust-first alternative that legacy vendors could not credibly deliver without rebuilding their core architecture.
ENTRY STRATEGY
Greenfield Entry
EXECUTION
No vendor had built a speak-up tool designed around the reporting employee's interests (personal record retention, timestamped proof) rather than the employer's case-management needs — Vault entered this design philosophy as a genuine greenfield, even though the broader ethics hotline category was 20+ years old.
FOOTHOLD STRATEGY
fs
Lighthouse Customer Strategy
Vault's early sales prioritised landing recognised enterprise brand names — large UK and European employers whose willingness to be named publicly would resolve the 'is this vendor legitimate for sensitive HR data?' objection. The team specifically targeted companies with high-profile culture and diversity commitments as early adopters, because those buyers had the highest internal urgency to demonstrate speak-up infrastructure improvement.
GROWTH CAMPAIGN
CAMPAIGNS THAT WORKED
- EU Whistleblowing Directive compliance guides and deadline trackers used as lead-generation content targeting HR and compliance leaders across EU markets.
- Thought leadership positioning Vault as the trust-architecture alternative to legacy hotlines, specifically citing NAVEX's anonymous-only design as the problem.
- Webinars and panel discussions at SHRM, HR Congress, and compliance conferences converting inbound interest into pipeline.
KEY LEARNING
If a regulatory mandate is your primary demand driver, invest in compliance-education content that teaches buyers what they are required to do before they ask what your product does — by the time they understand the mandate, your brand is already the most credible voice in the room.
gc
Market Context
| MARKET INTELLIGENCE
THE STANDARD: When cultural pressure and regulation arrive together, an incumbent's core architecture — not its features — is what prevents it from responding.
RULE 1 — ANONYMITY AND TRUST ARE DIFFERENT PRODUCTS. Legacy hotlines were built to protect the company from the report; a trust-first tool is built to make reporting feel safe.
RULE 2 — A LEGACY VENDOR CANNOT REBUILD ITS PREMISE. That is why regulatory shifts create windows features cannot close.
RULE 3 — REGULATION SETS THE DEADLINE AND THE BUDGET. Whistleblower directives convert a values purchase into a compliance line item with a date.
RULE 4 — YOU ARE SELLING TO THE FUNCTION THAT WOULD RATHER NOT KNOW. Position around risk reduction and legal exposure, not culture.
MARKET TYPE: Emerging Market (workplace speak-up technology), unlocked by regulation.
| MARKET ENTRY PLAYBOOK
THE STANDARD: DESIGNING FOR THE PERSON WHO IS NOT THE BUYER IS A DIFFERENTIATION STRATEGY WITH A STRUCTURAL FLAW — someone must still pay.
RULE 1 — REDESIGN AROUND WHOSE INTERESTS THE INCUMBENT IGNORES.
Hotlines serve the employer's case management. Timestamped personal records serve the reporter. That inversion is the entire product thesis.
RULE 2 — TRUST IS THE ADOPTION METRIC, AND THE EMPLOYER CANNOT MANUFACTURE IT.
If staff believe the tool serves HR, usage collapses regardless of features.
RULE 3 — REGULATION IS THE BUDGET TRIGGER.
Whistleblower and speak-up directives convert a values purchase into a compliance line item; time entry to enforcement dates.
How to enter
| FOOTHOLD STRATEGY PLAYBOOK
THE STANDARD: White-label reselling multiplies distribution beyond direct sales. Price alone cannot be the differentiator — a funded competitor erases it in a quarter.
SEQUENCE:
1. Undercut the funded leaders on the same core job.
2. Build white-label depth so partners resell under their own brand.
3. Recruit resellers, not end users — one partner brings dozens of clients at no incremental cost.
WORKED: 20,000+ active users and 1,000+ reselling partners in roughly five years, unreachable through direct sales alone.
CAUTION:
1. THE WHITE-LABEL DEPTH IS THE MOAT; THE PRICE IS NOT. If your only edge is cost, you lose the moment a larger rival matches it.
2. RESELLERS OWN THE END CUSTOMER and can swap you out invisibly.
How to get the first strong position
MARKET PATTERNS & PLAYBOOK
3
MONEY
money rev pri
REVENUE MODEL
Subscription
PRICING MODEL
Tiered Pricing, Value-Based Pricing
WHY THEY WON
Annual SaaS subscriptions priced per employee (headcount-based) at the enterprise tier, with implementation fees for custom integrations (HRIS, SSO). Headcount-based pricing scales naturally with customer growth and is simple for HR budget owners to defend internally.
Tiers differentiated by headcount band and feature access (core reporting vs. full case management and analytics). Enterprise tier custom-quoted. Value anchor is regulatory cost avoidance (EU Whistleblowing Directive fines can reach €50K+) rather than the subscription fee itself.
TARGET AUDIENCE
CUSTOMER BUYING BEHAVIOUR
tg cb
Chief People Officers, General Counsels, and Chief Compliance Officers at enterprise employers (1,000+ employees) across UK and EU facing Whistleblowing Directive obligations.
Committee-led procurement (HR, Legal, IT, sometimes Works Council in EU markets), with a hard compliance deadline creating urgency. Triggered by EU Directive transposition deadlines, board-level culture risk conversations, or a high-profile misconduct incident at a competitor.
| PRICING INTELLIGENCE
What makes this model effective & make customers pay
Where the purchase exists to prevent a scandal, price against the incident, not the workflow.
RULE 1 — MISCONDUCT REPORTING IS BOUGHT BY LEGAL AND THE BOARD, NOT BY HR.
That buyer has budget authority and personal exposure.
RULE 2 — REGULATORY MANDATES CREATE THE CATEGORY.
Whistleblowing directives and reporting obligations convert an ethical nice-to-have into a compliance requirement with a deadline.
RULE 3 — PER-EMPLOYEE PRICING MATCHES THE OBLIGATION, WHICH COVERS EVERYONE.
Coverage is the mandate; any narrower meter misprices the purpose.
RULE 4 — EVIDENCE INTEGRITY IS THE PRODUCT.
Timestamped, tamper-evident records are what survives litigation. That is the defensible layer, not the reporting interface.
A general counsel is buying the ability to demonstrate the company acted the moment it knew. Price against the settlement and the headline, and any per-employee fee is immaterial.
PRICE & REVENUE
| Revenue Risk - The biggest threat to revenue stability
Headcount-based pricing is simple for HR budget owners to defend and contracts automatically with enterprise layoffs.
Ethics and misconduct reporting has no revenue attribution and weak internal advocacy; it is bought on regulatory pressure and cut when the pressure recedes.
Regulatory-driven demand is a wasting asset — whistleblowing directives create budget once, then normalise.
Low usage is the desired outcome and the hardest renewal argument: a tool nobody used looks unnecessary.
Acquired by Sedex in 2024; terms undisclosed and no revenue ever published.
Where the model can break
4
MOTION
LinkedIn: https://www.linkedin.com/company/vault-platform, Twitter: https://twitter.com/vaultplatform
GROWTH EXPANSION MODEL
COMPETITIVE STRATEGY
motion ge cs
Geographic Expansion, Product Line Expansion
HOW THEY EXPAND
Initial UK and core EU market penetration driven by Whistleblowing Directive compliance deadlines; subsequent expansion into US and APAC markets where equivalent speak-up regulations are emerging; product expansion into full case-management and culture-measurement dashboards deepens ACV within existing accounts.
Differentiation, Flanking Attack
HOW THEY COMPETE
Vault did not compete head-on with NAVEX or EthicsPoint on case-management feature depth. Instead, it flanked on the employee trust dimension — a fundamentally different product philosophy (employee owns their record) that legacy vendors cannot credibly copy without abandoning the anonymous-hotline architecture their entire business was built on.
GROWTH ENGINE
GTM
ge n gtm
Content Flywheel, Partnership Growth
Regulatory compliance content drives organic search traffic from HR and compliance leaders; that traffic converts into enterprise sales cycles. Partnership with HRIS platforms (Workday, SAP) creates embedded referral channels where speak-up functionality is surfaced inside tools HR teams already use daily.
- Regulatory compliance content (EU Whistleblowing Directive guides, deadline trackers) as primary inbound demand driver.
- Direct enterprise sales to HR and Legal decision-makers supported by compliance-urgency sales narratives.
- Conference-led demand generation at SHRM, HR Congress, and European compliance events.
- PR and thought-leadership positioning in HR and legal press to establish category authority.
SUSTAINING MOATS
Switching Costs, High Customer Lock-In, Brand Power, Technology Advantage (complex enterprise scenarios)
moat
Once employee reports, case histories, and investigation records are stored inside Vault, migrating to a new platform requires transferring sensitive legal and HR data — a process Legal and IT teams resist intensely. The data gets more valuable over time as longitudinal culture and reporting trends accumulate. Brand trust — the specific claim that Vault was built to protect employees, not employers — strengthens with each publicly disclosed customer.
| MOAT INTELLIGENCE
THE STANDARD: Misconduct reporting software is bought because a law requires it. The moat is the evidentiary record, and the buyer's real fear is being unable to prove what they knew.
RULE 1 — WHISTLEBLOWING MANDATES CREATE THE CATEGORY. Directives requiring confidential internal reporting channels convert an ethical nice-to-have into a compliance purchase with a deadline attached.
RULE 2 — THE TAMPER-EVIDENT TIMELINE IS THE PRODUCT. What was reported, when, who saw it and what was done becomes the organisation's defence in litigation or investigation. That record is why the system cannot be quietly replaced.
RULE 3 — TRUST IS THE ADOPTION CONSTRAINT AND IT SITS WITH THE EMPLOYEE. A reporting tool nobody believes is confidential collects nothing, and a system with no reports is indistinguishable from no system at all.
THE SIGNAL: sell the evidence, not the ethics. Boards buy the ability to demonstrate they responded — and that demand grows every time a scandal makes the failure to respond the story.
Why this company remains defensible
ARR & TAKEAWAY
ARR Journey - what to do at each stage
PRE-$1M ARR — SELL MISCONDUCT REPORTING TO THE BOARD, NOT TO HR
The buyer is legal and the board, whose exposure is unreported harm surfacing publicly or in litigation.
Design for the reporter's trust first; if employees do not believe it is safe, the product produces nothing.
$1–5M ARR — THE PRODUCT'S OUTPUT IS EVIDENCE
Timestamped, tamper-evident records that stand up in an investigation are the value, not the reporting form.
WATCH: reports submitted per thousand employees — silence means distrust, not safety.
$5–10M ARR — REGULATION IS THE PIPELINE
Whistleblowing directives and speak-up obligations create mandatory budgets. Track legislation, not competitors.
$10–50M ARR — SELL TO MULTINATIONALS, WHERE THE OBLIGATION IS HARDEST
Multi-jurisdiction compliance is exactly what a global employer cannot solve internally.
NOTE: no ARR disclosed; ownership and funding reporting varies by source.
$50–100M ARR — THE COMPLIANCE SUITES BUNDLE THIS
Ethics and compliance platforms and HR suites both claim this category. Depth in investigation workflow is the defensible position.
$100M+ ARR — NOT IN EVIDENCE
Rule: trust-dependent products fail quietly. Measure whether people actually use the thing you sold, because the buyer will only discover the truth during a crisis.
COPY PLAYBOOK : What Worked → What Failed → What to Replicate → What to Avoid
THE STANDARD: A regulatory mandate converts discretionary spend into a compliance line item with a deadline — the strongest demand catalyst in enterprise software, and a wasting one.
SEQUENCE:
1. Build against a specific mandate with a known compliance date.
2. Sell to the officer personally accountable for the requirement.
3. IDENTIFY THE SECOND DEMAND DRIVER BEFORE THE WAVE PASSES.
WORKED: A mandate turning "nice to have" culture spending into budgeted, deadline-driven procurement.
CAUTION:
1. MANDATE-DRIVEN DEMAND SPIKES, THEN SATURATES. Without a second driver, growth plateaus the moment everyone is compliant — plan the follow-on before the first wave peaks.
2. COMPLIANCE PURCHASES OFTEN BUY THE MINIMUM. Deep engagement and expansion require value beyond the requirement itself.
bottom of page