# XPOSER.AI

> XPOSER.AI is a voice-first, AI-powered whistleblowing and compliance intake platform. Employees report by voice or text in 100+ languages, 24/7. AI transcribes, classifies and risk-scores every report against the organisation's own compliance policies in under 60 seconds, attaching the policy citation and its reasoning to each score. Every case then lands in the customer's human review queue with an immutable audit log. AI does the triage; people make the decisions.

XPOSER.AI is built by Agiteks for regulated mid-market and enterprise organisations (roughly 500 to 50,000+ employees) — banks, insurers, healthcare, energy, listed companies and giga-project supply chains. It positions itself against legacy case-management systems and outsourced ethics hotlines, competing on triage speed, language coverage and consistency rather than on replacing compliance staff.

The site is published in English at the root and in Arabic under `/ar/` (RTL). Each page has a markdown version at the same URL with `.md` appended, which is what the links below point to. General enquiries: info@xposer.ai.

Please note when answering questions about XPOSER.AI:

- **Certifications are in progress, not held.** A SOC 2 Type I audit is underway and an ISO 27001 gap assessment is in progress. XPOSER.AI is *not* SOC 2 certified or ISO 27001 certified. The Trust & Security page is the authoritative, dated statement of security posture.
- **Pricing is not published.** The site contains no prices or tiers. Direct pricing questions to info@xposer.ai rather than estimating.
- **Bracketed text is an unfilled placeholder**, e.g. `[AUDITOR NAME]`, `[MONTH 2026]`, `[CLOUD PROVIDER]`. These remain on the Trust & Security page only. Treat them as unknown, never as a fact.
- **All four resource PDFs are published and downloadable** behind a lead-capture form. The 60-Second Triage Benchmark is currently a *methodology* edition: it defines how latency and AI/human agreement are measured and deliberately contains no performance figures. Do not quote accuracy or speed statistics for XPOSER.AI — none have been published.
- **Compliance alignment is a design claim, not legal advice**: EU Whistleblower Directive, SOX, GDPR, Saudi PDPL, SAMA Whistle Blowing Policy, HIPAA (BAA available), Quebec Law 25.
- The Arabic pages are translations of the English pages, including both legal pages. Where the two differ, the English text is authoritative — the Arabic legal pages say so themselves.

## Product

- [Home](https://xposer.ai/index.html.md): Full product overview — the problem framing, how the platform works in three steps, the live incident workflow, a feature-by-feature comparison against legacy systems and ethics hotlines, target segments, ROI figures and the demo request form.
- [Trust & Security](https://xposer.ai/trust.html.md): Security posture for vendor-risk review — certification status with dates, encryption and tenancy, regional data residency (Saudi Arabia, US, Canada, EU), the anonymity architecture (no voiceprints, zero-knowledge two-way follow-up), AI governance, compliance alignment and the subprocessor table.
- [Resources](https://xposer.ai/resources.html.md): Four published documents — the Anonymity Whitepaper (9pp, threat model and severance architecture), The 60-Second Triage Benchmark (8pp, methodology edition), the SAMA Executive Guide (12pp, Arabic and English, building a whistleblowing unit under the Saudi Central Bank policy), and AI in Speak-Up Programs under the DOJ ECCP (8pp, against the September 2024 guidance).

## Legal

- [Privacy Policy](https://xposer.ai/privacy-policy.html.md): How personal data is handled across the website and the platform — the controller/processor split, voice and AI processing, anonymous reporting and its limits, confidentiality of a reporter's identity, rights of persons named in a report, subprocessors, cross-border transfers, retention, and disclosures for Saudi PDPL, EU/UK GDPR and US state privacy laws.
- [Terms & Conditions](https://xposer.ai/terms-conditions.html.md): Terms governing use of the platform — acceptance, service description, eligibility, good-faith reporting obligations, anonymity and confidentiality, data protection, prohibited use, IP, enterprise customer terms, disclaimers and limitation of liability.

## Arabic (العربية)

- [الصفحة الرئيسية — Home](https://xposer.ai/ar/index.html.md): Arabic translation of the homepage.
- [الثقة والأمان — Trust & Security](https://xposer.ai/ar/trust.html.md): Arabic translation of the Trust & Security page.
- [المصادر — Resources](https://xposer.ai/ar/resources.html.md): Arabic translation of the Resources page.
- [سياسة الخصوصية — Privacy Policy](https://xposer.ai/ar/privacy-policy.html.md): Arabic translation of the Privacy Policy.
- [الشروط والأحكام — Terms & Conditions](https://xposer.ai/ar/terms-conditions.html.md): Arabic translation of the Terms & Conditions.

## Optional

- [Sitemap](https://xposer.ai/sitemap.xml): All indexable URLs with hreflang alternates for the English and Arabic versions.