Vault, now part of Diligent

The speak-up platform Google backed and Diligent bought.

Vault gives employees a safe way to report misconduct at work: by name, anonymously, or together with others. We became its engineering team, from the apps to SOC 2. When Diligent acquired Vault, they kept us on.

Product development

Infrastructure + security

AI + data

By Diligent

Acquired

In May 2025, by the governance platform used by more than a million people

Series A

$8.2M

Led by Gradient Ventures, Google’s AI fund

And ISO 27001

SOC 2

The security certifications big employers check before they buy

Used by employees at

  • Airbnb
  • Epic Games
  • Tripadvisor
  • Trustpilot
  • Upwork
  • eToro
  • OVO Energy
  • Royal Shakespeare Company

At a glance

Client
Vault, now part of Diligent
Platforms
iOS, Android, web, Slack and Microsoft Teams
What we did
Product engineering, case management, AI translation, security and certification

Why it mattered

Speaking up was costing people their jobs.

Vault was founded in 2018, as #MeToo showed how much goes unsaid at work. At Theranos, employees who raised concerns were met with legal threats and private investigators. The problem wasn’t a lack of reporting forms. It was a lack of trust.

For peopleSpeak up alone, and you’re the one who gets hurtRetaliation has been the most common complaint to the US employment regulator, the EEOC, for over a decade. So most people say nothing.
For companiesHear it last, and you can’t contain itWithout a channel people trust, employers find out from the press or a lawsuit. EU law now requires companies with 50 or more staff to run internal reporting channels.
Two colleagues sharing a laugh across a desk

Three ways to speak up

Nobody has to speak up alone.

Each organisation controls which ways its people can report: with a name, anonymously, or through GoTogether. With GoTogether, a report is held until someone else comes forward about the same person. Then both go to the employer together, and neither knows who the other is.

With a nameA normal reportFor people happy to be known, straight to the right team.
AnonymouslyNobody knows who sent itThe investigator can still ask follow-up questions, and the person can still answer.
GoTogetherOnly once someone else comes forwardStrength in numbers, without anyone being named.

GoTogether

The first report waits until it isn’t alone.

When someone else reports the same person, both reports reach the employer together. Neither person knows who the other is.

GoTogetherAbout the same person
Your reportHeldSent together
Someone else’s reportHeldSent together
Waiting for someone elseMatch found. Sent to your employer together.

Reporting channels

Report from wherever people already work.

Nobody should have to find a portal to speak up. We built reporting into the Vault apps on iOS and Android, the web, Slack and Microsoft Teams. In Slack and Teams, people report by chatting to Vault’s bot, right where they already work. Every one offers the same choice of how to report.

Vault
VaultWhat would you like to report, and how?
With my nameAnonymouslyGoTogether

Something in the finance team that didn’t feel right.

iOS and Android

AI translation

Speak up in your own language.

Global employers have people in many countries. We built automatic AI translation into every report, conversation and follow-up. The person speaking up writes in their language, and the investigator reads and replies in theirs.

Case #2187 · conversationTranslated automatically
Anonymous reporter
Vi algo en el equipo de finanzas que no me pareció correcto.I saw something in the finance team that I didn’t think was right.
Investigator
Thank you. Can you tell us when it happened?Gracias. ¿Puede decirnos cuándo ocurrió?
Each person reads the conversation in their own language.

Case management

Every report becomes a case someone owns.

Every report becomes a case to triage, investigate, follow up anonymously and close. Analytics show patterns across a whole organisation, not just single cases, so problems surface while they can still be fixed.

New#2179 · Named
Investigating#2164 · GoTogether
Closed#2150 · Anonymous
Reports by team this quarter
Two colleagues talking in an open-plan office

Security

Ready for the security checks big employers run.

Encrypted on the phoneKeys sit with the person and their employer, so even Vault can’t read a report.
SOC 2 and ISO 27001The security certifications big employers check before they buy. We took Vault through both.
Closed cases anonymisedSensitive records aren’t kept longer than they need to be.

The results

From a Google-backed Series A to acquisition, and still building.

Employees at some of the world’s best-known companies now have a safe way to be heard. Their employers hear about problems while they can still fix them.

  1. 2021Series A$8.2M, led by Gradient Ventures, Google’s AI fund.
  2. SOC 2 and ISO 27001We took the platform through the certifications enterprise buyers ask for.
  3. May 2025Acquired by DiligentThe governance platform used by more than a million people.
  4. TodayStill buildingMoving Diligent’s Conflict of Interest product onto the platform and building AI into its compliance products.
Would recommend Contic 100%, always. If I could recommend Contic more, I would.

Rob Glanville

Head of Engineering

Diligent

“Very happy with the Contic speed, very happy with what we are doing. It’s more than speed, it’s everything combined.”
Roey YanivSenior Director of R&D, Diligent
“Nothing you can do to really improve. Fantastic with communication and updates, delivering fast on features and resolving production issues as they arise.”
Rob GlanvilleHead of Engineering, Diligent
“Alex with Forest Admin and Emily with Tags have both been delivered in a shorter timeframe than expected. Got to give the credit where it's due.”
Rob GlanvilleHead of Engineering, Diligent

Why Contic?

Diligent kept us on.

After the acquisition, Diligent kept the team that built Vault. We’re now moving its Conflict of Interest product onto the platform and building AI into its compliance products.

Building something every employee will use?It has to be simple, and people have to trust it. That’s what we did for Vault. HR tech at Contic
Got a security review coming?We’ll get your product ready for SOC 2 and ISO 27001, like we did for Vault. Infrastructure + security
Wondering where AI fits?Somewhere it’s useful, like translating a report so nobody’s left out. AI + data
Person holding an email icon

Our newsletter

Occasional emails about what we’re building and what we’ve learned the hard way

You may unsubscribe from these communications at any time. For information please review our privacy policy.