Your whole firm reaches compliance —
at no extra seat cost.
Every firm gets a single branded URL — regalign.app/intake/your-firm — that any employee can use without a sign-in. Five intake channels, each routed only to the officer legally responsible for responding.
Seats price the compliance operators who triage. Intake from the rest of the firm is free — that's how a 5-seat licence still gives a 200-person firm a way to report a suspicion, ask a question, or flag a breach the right way.
Five channels on one URL
- Speak up confidentiallyAudience: Anyone — staff, contractors, third partiesAuth: Anonymous or named (one-time lookup token)Routed to: Designated Investigator + Deputy
- Internal SARAudience: Staff at this firmAuth: Work-email magic link (30 min TTL)Routed to: MLRO + Deputy MLRO (firewalled)
- Ask complianceAudience: Staff at this firmAuth: Work-email magic linkRouted to: CCO / MLCO triage at /compliance-queries
- Report a breach or incidentAudience: Staff at this firmAuth: Work-email magic linkRouted to: Breach register — triaged before regulator clock starts
- DSAR (data subject request)Audience: Anyone outside the firmAuth: Open intake (no auth)Routed to: DPO + Deputy DPO with 1-month UK GDPR clock
Why this matters: Each channel lands with the right officer under the right confidentiality model. No shared inbox. No "compliance@" alias where reports go to die.
End-to-end: staff submits → operator triages
A counterparty offered tickets to a sports event. Threshold? Need pre-clearance?
Why this matters: Staff get a verified channel to compliance. Operators get triage with reply-by-email and a closed-loop record — same workflow whether the topic is gifts, sanctions, AML, or a "this doesn't feel right" suspicion.
Per-tenant branded URL — publish on your intranet
regalign.app/intake/saltireCopyregalign.app/speak-up/submitCopyregalign.app/intake/saltire/sar/submitCopyregalign.app/intake/saltire/ask/submitCopyregalign.app/intake/saltire/breach/submitCopyregalign.app/intake/saltire/dsar/submitCopySet the allowed work-email domains for SAR / Ask / Breach verification. Copy any URL to your intranet, staff portal, or onboarding pack.
Why this matters: One URL goes on the intranet and stays there. Every channel can be linked individually — Speak-up next to the harassment policy, SAR next to AML training, DSAR on the privacy notice.
Verified staff questions and breach reports land in one triage workspace. No more "compliance" alias inbox.
Internal SAR pipeline owns its own substrate. Submitters cannot read the queue. Tipping-off safeguards on every screen.
DSAR clock starts on intake. Identity verification, extension flag, and hash-chained audit log on every response.
Try it from a staff perspective
The sandbox Staff Hub is live at /intake/saltire. No sign-in required — that's the point.