Worker Protection Act 2023
If the EHRC called tomorrow, could you prove you took reasonable steps?
Most companies can't. ToneFlag makes sure you can.
Book a Demo →The compliance gap
What the law requires vs. what most companies do
What the law requires
- Continuous risk assessment of digital channels
- Proactive monitoring of workplace communications
- Documented evidence of preventive actions
What most companies do
- Annual training session, one hour
- Wait for an employee to file a complaint
- A PDF buried in SharePoint
The consequences
- +25% uplift on tribunal compensation
- EHRC investigation without individual complaint
- Personal liability for board members
We connect to your internal emails.
OAuth connection to Google Workspace or Microsoft 365. Set up in 10 minutes.
We detect patterns, not just words.
AI analyses relationships and tone over weeks and months, not keyword matching.
We document your compliance.
Monthly EHRC-ready reports with full audit trail. Your proof, automated.
Four steps to compliance
Connect
Link your Google Workspace or Microsoft 365 via OAuth. No software to install, no IT overhead.
Analyse
Every internal email is assessed by AI. No human reads your employees’ mail. Only structured signals are extracted.
Detect
Isolated signals are cross-referenced into patterns over weeks and months. Context, power dynamics, and trends, not just keywords.
Report
Your compliance officer receives alerts and monthly reports ready for EHRC review. Full audit trail included.
Surface what matters. Act with confidence.
ToneFlag doesn't monitor everything. It highlights the content that requires attention, and lets you trace every finding back to its source.
Problematic content, surfaced
Only flagged communications are brought to your attention. No noise, just the signals that warrant action.
Every indicator, fully traceable
Each alert links directly to the source material that generated it. Review the evidence before deciding on next steps.
Role-based access
Compliance officers, HR directors, and senior leadership each see what they need, with permissions tailored to their role.
Complete audit trail
Every action is logged: who accessed what, when, and why. Full accountability at every level.
GDPR & UK DPA 2018 compliant
DPIA template, data processing agreement, and privacy documentation included out of the box.
Simple, transparent pricing
No per-email fees. No surprises.
Starter
Up to 50 people
£429/month
- Email monitoring
- AI-powered pattern detection
- Compliance dashboard
- Monthly reports
- Email support
Professional
50–200 people
£1,299/month
- Everything in Starter
- Advanced pattern detection
- EHRC-ready reporting
- Priority support
- Dedicated compliance advisor
Enterprise
200+ people
Custom
- Everything in Professional
- Multi-entity support
- Custom integrations
- SLA guarantee
- On-site onboarding