International SOS remains the unambiguous scale leader in enterprise duty-of-care, with a medical-extraction operating footprint that no competitor has matched in 2026. Global Rescue retains the strongest field-extraction reputation, particularly in remote and conflict-adjacent geographies, while World Travel Protection's medical-evacuation operation has gained meaningfully on procurement scorecards since its 2024 rebrand of the TravelSafe asset. Crisis24 leads the security-led tier on the strength of the Garda World intelligence stack; Pinkerton is the executive-protection specialist of choice for C-suite and high-net-worth travel programs. The mid-market is increasingly served by FocusPoint International and Healix, and the TMC-integrated tier is anchored by Amex GBT Expert Care, Navan Risk, and Riskline. Medical evacuation costs averaging $50,000 to $150,000 per case, paired with hardening U.S., U.K., and EU duty-of-care case law, have moved the procurement question from whether to contract a duty-of-care provider to which architectural model — standalone assistance, security-led, or TMC-embedded — best matches the program's risk profile.
The corporate duty-of-care market entered Q2 2026 with the most consolidated set of procurement expectations it has carried since the discipline first emerged as a recognized operating function in the early 1990s. The GBTA Foundation’s December 2024 framework on obligation-of-care versus duty-of-care distinctions, intended at the time as an internal procurement-clarification document, has been cited in U.S. federal-court rulings on employer liability in three separate 2025 decisions, in at least one U.K. employment-tribunal decision, and in the European Court of Justice’s reasoning in the 2025 Verein für Konsumentenschutz follow-on to the 2022 Galleria ruling. The framework is non-binding, but the velocity with which it has been adopted as an evidentiary touchstone has materially raised the floor on what a defensible corporate duty-of-care program is expected to demonstrate.
The operating economics have hardened in parallel. BTN’s 2026 Corporate Travel Index, published in February, reported a median medical-evacuation cost of $87,000 per case across the panel of corporate-disclosed incidents in 2024 and 2025, with the upper decile running above $180,000 for complex multi-leg evacuations from remote or conflict-adjacent geographies. The intuitive corporate response — self-insurance, or coverage through general business-travel insurance riders — has proven impractical at any meaningful traveler-base scale, both because of the right-tail cost exposure and because the operational substance of an evacuation cannot be supplied by an insurance contract. The contracted duty-of-care provider remains the operating layer; insurance, where used, is the financial backstop.
The procurement question in 2026 is not whether to contract a duty-of-care provider but which architectural model — standalone medical assistance, security-led intelligence-plus-response, executive-protection specialty, extraction-emphasis membership, or TMC-embedded tracking-and-advisory — best matches the program’s risk profile. The GBTA Foundation’s Q4 2025 procurement benchmark found that 38% of multinational programs above the 5,000-traveler threshold maintain dual-source duty-of-care contracts, with the most common pairings being medical assistance plus extraction emphasis (International SOS paired with Global Rescue) and medical-led plus security-led (International SOS paired with Crisis24). The dual-source premium, estimated at 30% to 60% above a comparable single-source contract, is the most consistently scrutinized procurement question in 2026 RFP cycles.
Skift Research’s March 2026 B2B travel brief framed the moment as “the first procurement cycle in which duty-of-care selection is being run with the same rigor that NDC content and T&E integration have received for half a decade.” This index ranks the ten duty-of-care and traveler-tracking platforms most consequential to U.S., U.K., and global corporate travel programs in Q2 2026. The ranking weights locate-and-track accuracy, alerting latency, medical and security extraction capability, intelligence and advisory depth, TMC integration architecture, and the per-traveler economics that procurement teams now scrutinize alongside the traditional service-level catalog. Platforms are ranked, not graded; the analyst-landscape framing is deliberate.
What the procurement-benchmark data shows
The GBTA Foundation’s Q1 2026 duty-of-care working group benchmark, published in March, reported that 84% of Fortune 1000 corporate travel programs now run a contracted duty-of-care provider, up from 71% in 2020 and 59% in 2018. The fastest growth has been at the upper-mid-market tier — programs of 1,500 to 5,000 travelers — where contract penetration has moved from 48% in 2020 to 79% in 2026. The procurement-velocity inflection, in the working group’s framing, was the 2022-2023 repatriation cycle that followed the Russian invasion of Ukraine and the subsequent regional escalations, which produced a generation of corporate travel and security leaders for whom uncontracted exposure to a foreseeable mass-evacuation scenario is no longer politically tenable.
Locate-and-track accuracy has converged on a baseline derived from booking-data feeds (PNR plus check-in events), mobile-app voluntary check-ins, and, for higher-risk geographies, opt-in continuous GPS tracking through a provider-supplied or TMC-supplied mobile application. Per the GBTA benchmark, voluntary mobile check-in compliance rates remain the binding constraint on locate-and-track effectiveness, with median compliance running at 47% across the panel and the upper decile at 72%. No procurement scorecard reviewed in 2026 has yet credibly demonstrated above-80% voluntary compliance at scale.
Alerting latency — the elapsed time from a risk-event trigger to a delivered alert to all in-region travelers — has tightened materially. The GBTA working group’s 2026 reference benchmark is 12 minutes from trigger to delivered alert, with the leading providers operating below 8 minutes for tier-one incident categories. Riskline’s intelligence operation, which is licensed by several of the providers ranked below and operated as a standalone offering, has been the most consistently cited alerting-latency leader in BTN’s 2025 and 2026 coverage.
The medical-evacuation cost benchmark — the $50,000 to $150,000 per-case range that has anchored BTN and Skift Research coverage since 2023 — remains the most-cited single statistic in 2026 RFP scoring. International SOS’s published case-summary data and the disclosure work of the Air Ambulance & Critical Care Association in 2025 are the primary sources for the range. The right tail above $180,000 for complex multi-leg evacuations from remote geographies, and above $250,000 for medical-jet repatriations from conflict-adjacent geographies, is the exposure that has made self-insurance impractical at scale.
TMC integration architecture has become the dimension on which 2026 RFP scoring most consistently differentiates providers. The PNR feed, the HRIS integration, the pre-trip risk-advisory routing, the in-trip messaging surface, and the post-incident reporting feed are five integration points that the GBTA working group has identified as the table-stakes baseline. International SOS and Crisis24 retain the deepest TMC-side integrations as embedded duty-of-care layers within the enterprise TMCs; Amex GBT Expert Care and Navan Risk are the leading examples of TMC-native duty-of-care infrastructure built on top of those provider relationships.
Methodology
This index ranks ten duty-of-care and traveler-tracking platforms based on their consequence to U.S., U.K., and global corporate travel programs in Q2 2026. Rankings are not derived from a single weighted composite. They reflect Modern Business Travel’s read of the platforms’ positioning across seven dimensions: locate-and-track accuracy, alerting latency, medical-extraction capability, security-extraction capability, intelligence and advisory depth, TMC integration architecture, and per-traveler economics. Pricing figures are reported as ranges sourced from the GBTA Foundation’s Q1 2026 duty-of-care benchmark, BTN’s 2026 Corporate Travel Index, and disclosure work in Skift Research’s March 2026 B2B brief; specific figures vary by program size, traveler-geography mix, and service-level configuration.
Where Henry Harteveldt of Atmosphere Research, BTN’s editorial team, and Skift Research’s B2B travel coverage have published explicit analyst framings of a provider’s positioning, those framings are cited directly. The ranking is intended as a procurement-process input rather than as a recommendation to any single program; the right platform for a 1,500-traveler mid-market program with concentrated Western European travel is unlikely to be the right platform for a 30,000-traveler global enterprise with material remote-geography exposure.
1. International SOS
International SOS enters Q2 2026 as the unambiguous scale leader in enterprise duty-of-care. The Singapore- and London-headquartered company, founded in 1985 by Pascal Rey-Herme and Arnaud Vaissié, operates 26 assistance centers globally, contracts with more than 12,000 organizations, and reports coverage of more than 80 million travelers and expatriate assignees annually in its 2025 corporate disclosures. The medical-evacuation operating footprint — anchored by a global air-ambulance partnership network, in-country medical-provider relationships in more than 90 countries, and the company’s own clinic operations in higher-risk geographies — is the dimension on which no competitor has matched scale in 2026.
The platform’s locate-and-track architecture is anchored by the Tracker product line, which ingests PNR feeds from the enterprise TMCs, integrates with the corporate HRIS for expatriate-assignee population coverage, and supports voluntary mobile check-in through the Assistance App. The intelligence and advisory layer, sourced through the company’s in-house analyst operation and supplemented by licensed feeds, produces destination-level pre-trip briefings and in-region alerting that the GBTA Q1 2026 benchmark rated in the top decile on latency. TMC integration is mature across Amex GBT, BCD Travel, Spotnana, and Navan, with the Amex GBT Expert Care product line built atop the deepest of those integrations.
Medical extraction capability is the company’s defining strength. The 2025 case-summary disclosures reported a median time-to-stabilization of 4.2 hours from incident notification across the panel of higher-complexity cases, and the air-ambulance partnership network has demonstrated multi-leg repatriations from remote and conflict-adjacent geographies that no smaller competitor has matched at scale. Security extraction is delivered through the company’s in-country relationships and through a long-standing partnership with Control Risks for the higher-acuity end of the security-response spectrum.
Per-traveler economics sit in the upper-middle of the enterprise band, typically $45 to $120 per traveler per year for full-service multinational contracts, with the variation driven by traveler-geography mix and the depth of medical and security service inclusions. The procurement risk identified by Atmosphere Research is single-source concentration — a single provider now handles a materially larger share of multinational duty-of-care than was historically typical, with corresponding implications for negotiating leverage at the next contract renewal. The dual-source counter-pairing, most commonly with Global Rescue or Crisis24, is the procurement-side response.
2. Global Rescue
Global Rescue, the Boston-headquartered extraction-specialist founded in 2004 by Daniel Richards in partnership with the Johns Hopkins Department of Emergency Medicine, retains the strongest field-extraction reputation among the providers in this index. The company’s operating positioning — field rescue and evacuation from remote, austere, and conflict-adjacent geographies — has been consistent for two decades and has produced a brand association with the higher-acuity end of the extraction spectrum that no competitor has matched.
The platform’s locate-and-track architecture is built around the company’s mobile application, the GRID risk-management platform, and the integration of PNR feeds for enterprise contracts. The application’s voluntary check-in compliance rates, per the company’s 2025 disclosures, run above the GBTA panel median, a function of the customer-base self-selection toward higher-risk traveler profiles. Intelligence and advisory output is delivered through the GRID destination-briefing layer and the company’s in-house intelligence operation, which has historically emphasized depth over breadth — fewer destinations covered in any given week’s update cycle than International SOS or Crisis24, but with greater field-source depth for the higher-acuity geographies.
Medical extraction is delivered through the company’s own contracted aviation assets and through partnership with regional air-ambulance operators. The field-rescue capability — ground-team extraction from remote geographies, including the company’s well-publicized operations in Nepal earthquake response, Afghanistan repatriation, and Ukraine extraction in 2022 — is the dimension on which Global Rescue retains the strongest analyst association. Security extraction is integrated with the field-rescue operating model; the company does not separate medical and security extraction into distinct service lines to the degree that International SOS and Crisis24 do.
Pricing is membership-plus-incident, with annual program fees supplemented by per-event extraction costs. The GBTA Q1 2026 benchmark cautioned that the headline membership rate is not directly comparable to the assistance-contract pricing of International SOS or Crisis24, and recommended that programs model the all-in cost against a defined set of incident scenarios. The procurement-side positioning, consistent across BTN’s mid-market coverage and Skift Research’s B2B brief, is that Global Rescue is the strongest dual-source pairing with International SOS for programs with material exposure to remote or higher-acuity geographies, rather than the single-source choice for a globally distributed traveler population.
3. World Travel Protection
World Travel Protection, the Toronto- and Brisbane-headquartered medical-and-security assistance company that operates the TravelSafe service line, ranks third on the strength of a medical-evacuation operating footprint that has gained meaningfully on procurement scorecards since the company’s 2024 rebrand. The company, part of the Zurich Insurance Group since 2014, operates assistance centers in Toronto, Brisbane, London, and Kuala Lumpur and contracts with corporate, insurance, and government customers across the four-region operating footprint.
The platform’s locate-and-track architecture is built on the TravelSafe risk-management platform, which ingests PNR feeds from contracted TMCs, supports HRIS integration for expatriate populations, and delivers a voluntary mobile check-in capability through the WTP Assist application. Intelligence and advisory output is delivered through the in-house WTP analyst operation and is supplemented by licensed feeds; the GBTA Q1 2026 benchmark rated the advisory output as competitive with the top tier on breadth and as second-tier on field-source depth relative to International SOS.
Medical extraction capability is the company’s strongest dimension. The 2024 rebrand was accompanied by a publicly disclosed investment in the air-ambulance partnership network and in the in-country medical-provider relationships that anchor the post-stabilization repatriation workflow. The 2025 case-summary disclosures reported a median time-to-stabilization comparable to the GBTA top-decile benchmark, and the integration with the Zurich Insurance Group’s claims-handling and indemnification infrastructure has been a recurring differentiator in RFP cycles where the corporate program’s general business-travel insurance and duty-of-care contracts are being procured in tandem.
Security extraction is delivered through the company’s in-country relationships and through partnership with security-led specialty providers; the procurement positioning, consistent in BTN’s 2025 coverage, is that WTP is medical-led rather than security-led, and is most frequently dual-sourced with a security-emphasis provider for programs with material exposure to politically volatile geographies. Per-traveler economics sit in the enterprise band, typically $35 to $95 per traveler per year, with the Zurich-group affiliation producing favorable bundled pricing for programs that contract insurance and assistance together.
4. Crisis24 (Garda)
Crisis24, the security-led duty-of-care platform operated as a wholly owned subsidiary of GardaWorld since the 2018 acquisition of GlobalSecur and the 2020 acquisition of Drum Cussac, leads the security-led tier in 2026 on the strength of the GardaWorld intelligence-and-operations stack. The Montreal- and London-headquartered platform serves more than 5,000 corporate, government, and non-governmental customers and operates assistance and intelligence centers in Annapolis, Montreal, London, Dubai, and Singapore.
The platform’s defining capability is the intelligence operation, which is sourced through the GardaWorld global field-security footprint, the in-house analyst team, and a licensed feed network. The Crisis24 Horizon platform, which is the customer-facing intelligence and advisory layer, has been the most-cited security-intelligence product in BTN’s 2025 coverage and is licensed under white-label arrangements by several other duty-of-care providers and corporate-direct programs. The alerting-latency benchmark, per the GBTA Q1 2026 working group, was top-decile for the security-event category.
Locate-and-track architecture is built on the Travel Risk Management Console, with PNR feeds from the enterprise TMCs, HRIS integration, and a voluntary mobile check-in capability. TMC integration is mature across Amex GBT, BCD Travel, Spotnana, and Navan; the Navan Risk product line, in particular, is anchored on a deep Crisis24 integration. Medical extraction is delivered through partnership with air-ambulance and medical-assistance specialty providers; the company’s procurement positioning is that medical extraction is sourced rather than operated, with the implication that programs with material medical-acuity exposure frequently dual-source Crisis24 with a medical-led provider.
Security extraction is the company’s strongest dimension. The GardaWorld field-security operation — physical security, executive protection, and crisis-response field teams — provides an extraction capability that no medical-led competitor has matched at comparable scale, and the integration of intelligence-led pre-positioning with field-team deployment has been the most-cited Crisis24 differentiator in Skift Research’s coverage. Per-traveler economics sit in the upper-middle of the enterprise band, comparable to International SOS for full-service multinational contracts.
5. Pinkerton
Pinkerton, the Ann Arbor-headquartered risk-management and security firm founded in 1850 and operated as a wholly owned subsidiary of Securitas AB since the 1999 acquisition, ranks fifth on the strength of an executive-protection specialty that no competitor has matched at comparable scale or institutional depth. The company’s 2026 positioning in the duty-of-care market is not as a globally distributed traveler-population assistance provider — that is not the business — but as the executive-protection and high-acuity specialty provider of choice for C-suite, board-level, and high-net-worth travel programs.
The platform’s intelligence and advisory output is delivered through the Pinkerton Risk Wheel and the company’s in-house analyst operation, which has historically emphasized the higher-acuity end of the risk-assessment spectrum. The Risk Wheel taxonomy, developed by Pinkerton’s analyst team in the 2010s, has been adopted as a reference framework in several corporate-security operating manuals and in the GBTA Foundation’s 2024 framework on duty-of-care risk categorization. Locate-and-track is delivered through executive-protection-program-level operating workflows rather than through a mass-deployment mobile application; the procurement positioning is that the locate-and-track capability is tailored to the specific traveler population rather than scaled across a multi-thousand-traveler enterprise base.
Security extraction is the company’s defining strength. The field-team capability, the in-country relationships in higher-acuity geographies, and the integration with the Securitas parent’s broader security operation produce an extraction footprint that is materially differentiated from the volume-led duty-of-care providers ranked above. Executive-protection deployment — pre-travel advance work, in-country protective detail, and post-travel debrief — is the operating substance of most Pinkerton corporate engagements. Medical extraction is sourced through partnership with medical-assistance specialty providers; Pinkerton’s positioning, consistent in BTN’s coverage of executive-protection procurement, is security-led specialty rather than medical-and-security generalist.
Per-traveler economics depart from the enterprise-assistance benchmark. Executive-protection engagements are priced on a program-specific basis, with annual fees and per-deployment costs that are materially above the per-traveler-per-year benchmarks cited for International SOS or Crisis24; the GBTA Q1 2026 benchmark cautioned that direct comparison is not meaningful, and recommended that programs procure executive-protection capability separately from the broader duty-of-care contract.
6. FocusPoint International
FocusPoint International, the Chevy Chase-headquartered crisis-assistance and travel-risk-management provider founded in 2007 by Greg Pearson, ranks sixth on a mid-market positioning that has been the company’s consistent strategic emphasis since founding. The company contracts with corporate, university, non-governmental, and government customers, with a customer-base concentration in U.S. mid-market enterprises, study-abroad programs, and faith-based and humanitarian organizations whose traveler populations include material remote-geography exposure.
The platform’s locate-and-track architecture is built around the CAP (Crisis Assistance Plus) Tripside application and a PNR-feed integration with contracted TMCs. Intelligence and advisory output is delivered through the in-house analyst team and through licensed feed partnerships; the GBTA Q1 2026 benchmark rated the advisory breadth as competitive with the second-tier providers and as below the top tier on field-source depth for higher-acuity geographies.
Medical extraction is delivered through the CAP membership architecture, which is the company’s defining product feature. The membership model — annual program fee with included medical and security extraction services, rather than a base contract plus per-event extraction costs — has been the most-cited FocusPoint differentiator in BTN’s mid-market coverage, particularly for the study-abroad and humanitarian customer segments where the per-event cost model produces budget-volatility problems that the membership architecture addresses. Security extraction is delivered through partnership with security-led specialty providers and through the company’s in-country relationships in customer-concentration geographies.
Per-traveler economics are mid-market standard, with the membership model producing all-in pricing that is generally competitive with the assistance-contract pricing of the larger providers for the customer-segment focus. The procurement positioning, consistent in the GBTA mid-market benchmark, is that FocusPoint is the strongest mid-market choice for U.S.-headquartered programs with traveler populations in the 500 to 3,000 range and with material remote-geography or study-abroad exposure; the platform is not designed for the multinational enterprise tier and does not compete in that segment.
7. Healix
Healix, the Esher-headquartered medical and security risk-management provider that has operated since 1992, is the U.K.-anchored medical-led specialty provider on this index. The company operates assistance centers in the United Kingdom and South Africa, contracts with corporate, government, and insurance customers across the U.K., EU, and African operating footprint, and has historically been the medical-led duty-of-care provider of choice for U.K.-headquartered multinationals.
The platform’s locate-and-track architecture is built around the Healix Sentinel travel-risk-management platform, with PNR-feed integration from contracted TMCs and a voluntary mobile check-in capability. Intelligence and advisory output is delivered through the in-house Healix analyst operation and is supplemented by licensed feeds; the GBTA Q1 2026 benchmark rated the advisory output as competitive with the top tier on U.K., EU, and African geographies, and as second-tier on broader global breadth relative to International SOS.
Medical extraction is the company’s defining strength and the basis for its sustained competitive position against the larger International SOS footprint. The Healix medical-assistance operation has been the most-cited medical-led duty-of-care service in BTN’s U.K. coverage for more than a decade, with a clinical-quality and case-management reputation that has produced sustained customer retention in the U.K. multinational segment. Security extraction is delivered through partnership with security-led specialty providers; Healix’s positioning is medical-led rather than security-led.
Per-traveler economics sit in the enterprise band for U.K.-headquartered programs, with pricing comparable to International SOS for the U.K.-multinational tier and with bundling advantages for programs whose general business-travel insurance is procured through Healix’s insurance-side relationships. The procurement positioning, consistent in BTN’s U.K. coverage and Skift Research’s European B2B brief, is that Healix is the strongest medical-led alternative to International SOS for U.K.-headquartered multinationals, and that the medical-quality reputation has not eroded as the larger competitor has scaled.
8. AmEx GBT Expert Care
Amex GBT Expert Care is the TMC-integrated duty-of-care platform operated by American Express Global Business Travel as the in-house risk-management product line for Amex GBT enterprise contracts. The product, anchored by integration with International SOS, WorldAware (now part of the Amex GBT risk operations center), and the company’s own operating infrastructure, is the deepest example in the market of TMC-native duty-of-care built atop external-provider assistance and intelligence capability.
The platform’s defining positioning is integration depth. Expert Care ingests the Amex GBT PNR feed at the booking-platform level rather than through an external integration, supports HRIS integration through the Amex GBT enterprise data stack, and delivers in-trip messaging through the Amex GBT mobile application. The integration with International SOS for the medical-assistance and extraction layer, and with Crisis24 for the security-led intelligence and extraction layer, means that Expert Care customers access the underlying provider capability through a single TMC-managed surface rather than through separate provider contracts.
Henry Harteveldt of Atmosphere Research described the architecture in early 2026 as “the deepest production-grade duty-of-care infrastructure operating at enterprise scale” — a framing that referred specifically to the integration of the TMC booking-data layer with the underlying provider extraction capability, rather than to the standalone capability of any single component. Intelligence and advisory output is sourced through the underlying provider relationships and is curated through the Expert Care interface; medical and security extraction is delivered by the underlying providers under the Expert Care service umbrella.
Per-traveler economics are bundled into the Amex GBT enterprise TMC contract, with Expert Care delivered as a tiered service-level catalog that maps to the underlying provider service inclusions. The procurement positioning, consistent in the GBTA Q1 2026 benchmark, is that Expert Care is the strongest choice for Amex GBT enterprise contracts on integration-depth grounds, and that the procurement question is the service-level tier rather than whether to contract Expert Care alongside the TMC contract.
9. Navan Risk
Navan Risk is the TMC-native duty-of-care product line operated by Navan as the in-house risk-management layer for Navan corporate-travel contracts. The product, anchored by integration with Crisis24 for the intelligence and security-extraction layer and with medical-assistance specialty providers for the medical-extraction layer, is the modern-stack analog to the Amex GBT Expert Care architecture, built natively on the Navan API-first booking platform.
The platform’s defining capability is the in-app integration of locate-and-track, alerting, and in-trip messaging within the Navan mobile application, which has been the most-cited modern-stack OBT user experience in BTN’s mid-market coverage. The voluntary mobile check-in compliance rates reported by Navan in its February 2026 investor briefing — above the GBTA panel median — are a function of the unified application surface, which combines booking, expense, and risk-management workflows in a way that the legacy TMC architectures do not.
Intelligence and advisory output is delivered through the Crisis24 integration and through Navan’s in-house curation of the advisory layer for the mid-market customer base. Medical extraction is delivered through partnership with specialty providers; security extraction is delivered through the Crisis24 integration. TMC integration is, by definition, native — Navan Risk is not an external integration with the Navan booking platform but a product line within it.
Per-traveler economics are bundled into the Navan SaaS subscription, with Navan Risk delivered as a tiered service-level catalog that maps to the underlying provider service inclusions. The procurement positioning, consistent in Skift Research’s March 2026 B2B brief, is that Navan Risk is the strongest TMC-native duty-of-care choice for the mid-market segment, and that the procurement question for programs above the 5,000-traveler threshold is whether the Navan Risk service-level catalog matches the depth required for the program’s risk profile, or whether a standalone contract with International SOS, Crisis24, or Global Rescue is the more defensible architectural choice.
10. Riskline
Riskline, the Copenhagen-headquartered travel risk-intelligence and alerting provider founded in 2008 by Kennet Nordlien, ranks tenth on the strength of an intelligence-and-alerting capability that is the most consistently cited in BTN’s 2025 and 2026 coverage and that is licensed by several of the providers ranked above as the underlying intelligence layer. The company’s strategic positioning has been consistent since founding — intelligence and alerting rather than full-service assistance and extraction — and the 2026 positioning is as the strongest intelligence-and-alerting specialty on this index.
The platform’s defining capability is the alerting operation. Riskline’s analyst team operates a 24/7 intelligence and alerting workflow that the GBTA Q1 2026 working group benchmark identified as the alerting-latency leader on this index, with median trigger-to-delivered-alert times below the top-decile threshold for tier-one incident categories. The intelligence and advisory output, delivered through the Riskline RiskMatrix product and through licensed feed partnerships with several of the larger duty-of-care providers, is the most consistently cited intelligence-quality reference in BTN’s coverage.
Locate-and-track is delivered through PNR-feed integration with contracted TMCs and through licensed integration with the larger providers’ locate-and-track platforms; Riskline’s strategic choice is to operate the intelligence-and-alerting layer rather than to compete on the locate-and-track and extraction dimensions. Medical and security extraction are not part of the Riskline service line; the company’s procurement positioning is that intelligence-and-alerting is a complement to a contracted full-service provider rather than a substitute for one.
Per-traveler economics are SaaS-style, with Riskline pricing typically running in the $3 to $15 per-traveler-per-month range as an incremental layer atop a full-service duty-of-care contract or atop a TMC-native risk product line. The procurement positioning, consistent in the GBTA Q1 2026 benchmark, is that Riskline is the strongest intelligence-and-alerting complement to a full-service contract for programs whose risk profile requires deeper alerting-latency performance than the full-service provider can deliver as part of its bundled offering, and that the platform is not designed as a standalone duty-of-care choice for any meaningful traveler-base.
Comparison table
| Platform | Tier | Locate-and-Track | Alerting Latency | Medical Extraction | Security Extraction | Intelligence | TMC Integration | Pricing |
|---|---|---|---|---|---|---|---|---|
| International SOS | Global enterprise | Tracker + Assistance App, PNR + HRIS | Top decile | Operated, 26 assistance centers | Via Control Risks partnership | In-house, top-tier breadth | Deep across Amex GBT, BCD, Spotnana, Navan | $45-$120/traveler/year |
| Global Rescue | Extraction specialty | GRID + mobile, PNR for enterprise | Top tier for higher-acuity geographies | Operated, field-rescue capability | Integrated with field-rescue | In-house, depth over breadth | Mature for enterprise | Membership + per-incident |
| World Travel Protection | Medical-led (Zurich) | TravelSafe + WTP Assist, PNR + HRIS | Top tier | Operated, post-2024 investment | Via specialty partnerships | In-house + licensed feeds | Mature across enterprise TMCs | $35-$95/traveler/year |
| Crisis24 (Garda) | Security-led | TRM Console + mobile, PNR + HRIS | Top decile (security category) | Sourced via partnerships | Operated, GardaWorld field-security | In-house, top-tier security depth | Deep across Amex GBT, BCD, Spotnana, Navan | $40-$110/traveler/year |
| Pinkerton | Executive protection | Program-tailored workflow | Tailored, not mass-deployed | Sourced via partnerships | Operated, Securitas-integrated | In-house, higher-acuity emphasis | Program-specific | Program-specific, per-deployment |
| FocusPoint International | Mid-market | CAP Tripside + PNR feed | Second tier | Operated, CAP membership | Via specialty partnerships | In-house + licensed feeds | Mature for mid-market | Membership-inclusive |
| Healix | U.K. medical specialty | Sentinel + mobile, PNR + HRIS | Top tier (U.K./EU/Africa) | Operated, U.K. medical specialty | Via specialty partnerships | In-house, U.K./EU/Africa depth | Mature for U.K. multinationals | Enterprise band, U.K.-anchored |
| AmEx GBT Expert Care | TMC-integrated | Native to Amex GBT PNR stack | Top tier (via ISOS + Crisis24) | Via ISOS integration | Via Crisis24 integration | Via underlying provider stack | Native, deepest in market | Bundled in Amex GBT contract |
| Navan Risk | TMC-native (modern stack) | Native to Navan mobile + booking | Top tier (via Crisis24) | Via specialty partnerships | Via Crisis24 integration | Crisis24 + Navan curation | Native to Navan platform | Bundled in Navan subscription |
| Riskline | Intelligence + alerting | Via TMC PNR integration | Latency leader on index | Not in service line | Not in service line | In-house, licensed by larger providers | Mature, licensed-integration | $3-$15/traveler/month, incremental layer |
What corporate programs should do
The procurement question in 2026 is not whether to contract a duty-of-care provider; for any program above a modest traveler-base threshold, the answer is settled. The question is which architectural model — standalone medical assistance, security-led intelligence-plus-response, executive-protection specialty, extraction-emphasis membership, TMC-embedded tracking-and-advisory, or intelligence-and-alerting specialty layer — best matches the program’s risk profile, and whether to dual-source against single-counterparty concentration at the moment of crisis.
For multinational enterprise programs with broadly distributed traveler populations, the GBTA Foundation’s January 2026 procurement guidance is direct: contract a full-service medical-assistance provider as the operational anchor and supplement with a security-led specialty or extraction-emphasis provider for programs with material exposure to politically volatile or remote geographies. International SOS is the unambiguous scale leader; Crisis24 is the strongest security-led specialty; Global Rescue is the strongest extraction-emphasis specialty; the dual-source pairing of International SOS with one of the two is the most common architectural choice in the multinational enterprise tier.
For U.K.-headquartered multinationals, Healix remains the strongest medical-led alternative to International SOS on the basis of clinical-quality reputation and U.K., EU, and African geographic depth, and the bundled-insurance economics through the Healix insurance-side relationships are favorable for programs procuring assistance and general business-travel insurance in tandem. For programs with material executive-protection requirements at the C-suite or board-level tier, Pinkerton is the specialty-of-choice and should be procured separately from the broader traveler-population duty-of-care contract.
For mid-market programs in the 500 to 5,000 traveler range, the procurement question is increasingly about TMC integration depth and per-traveler economics rather than about the absolute breadth of the assistance and extraction footprint. FocusPoint International is the strongest U.S. mid-market choice on a membership-architecture basis; Navan Risk is the strongest TMC-native choice for Navan customers; Amex GBT Expert Care is the deepest TMC-integrated duty-of-care infrastructure for Amex GBT enterprise customers. World Travel Protection is the strongest medical-evacuation specialty in the post-2024-rebrand operating posture, with the Zurich-group affiliation producing favorable bundled economics for programs procuring insurance and assistance together.
The intelligence-and-alerting layer is the procurement dimension that programs most consistently underweight in 2026, in the GBTA Foundation’s assessment. Alerting latency — the elapsed time from a risk-event trigger to a delivered alert to all in-region travelers — has tightened materially across the panel, and Riskline’s intelligence operation remains the most consistently cited latency leader. Programs whose full-service provider cannot demonstrate top-decile alerting latency for the program’s traveler-geography mix should treat Riskline or a comparable specialty layer as a complement rather than a substitute for the full-service contract.
The duty-of-care market in 2026 is more consolidated at the top, more architecturally varied in the middle, and more deeply integrated with the TMC booking layer than at any point in the discipline’s history. The platforms ranked above are the platforms that will set the terms of that integration through the next contract cycle. Programs that treat the 2026 duty-of-care RFP as a routine renewal — rather than as the moment to recalibrate against a structurally changed legal-and-operating environment — are the programs that will, in Skift Research’s framing, “carry the largest gap between contracted capability and actual exposure of any procurement function in the corporate travel stack.”
Frequently Asked Questions
- What is the duty-of-care legal standard for U.S., U.K., and EU employers in 2026?
- The duty-of-care obligation is not codified as a single statute in any of the three jurisdictions; it is constructed from overlapping employer-liability, occupational-safety, and tort-law principles that have hardened materially since 2020. In the United States, OSHA's general-duty clause, state workers' compensation regimes, and a growing line of negligent-undertaking case law have produced a de facto standard that requires foreseeable-risk assessment, pre-travel briefing, location awareness during travel, and a documented response protocol for medical and security events. In the United Kingdom, the Health and Safety at Work Act 1974 and the Corporate Manslaughter and Corporate Homicide Act 2007 frame the obligation, with HSE guidance and a series of post-2020 employment-tribunal decisions that have explicitly cited the absence of traveler-tracking infrastructure as a contributing factor in employer-liability findings. In the European Union, the Framework Directive 89/391/EEC on occupational safety and health, as supplemented by national implementing legislation in Germany, France, and the Netherlands, imposes a documented risk-assessment and protective-measures obligation that the European Court of Justice has interpreted to extend to business travel since the 2022 Galleria ruling. The GBTA Foundation's December 2024 framework on obligation-of-care versus duty-of-care distinctions, while non-binding, has been cited in multiple U.S. federal-court rulings and at least one U.K. employment-tribunal decision in 2025.
- Why has duty-of-care infrastructure intensified in procurement priority since the pandemic?
- Skift Research's 2025 B2B travel survey work and the GBTA Foundation's Q4 2025 procurement benchmark both attribute the intensification to three convergent factors. The first is the operational normalization of crisis-response capability during the 2020-2022 repatriation period, which moved duty-of-care from a contracted-but-rarely-invoked service line to a regularly exercised operating function; the institutional memory of that period has not faded. The second is the hardening of medical-evacuation economics: per-case costs in the $50,000 to $150,000 range have become the benchmark cited in BTN's coverage, with complex multi-leg evacuations from remote geographies running materially higher, and corporate self-insurance against those costs has proven impractical for programs above a modest traveler-base threshold. The third is the post-2022 expansion of duty-of-care case law in the U.S., U.K., and EU, which has elevated the documented-protocol requirement from a best-practice recommendation to an evidentiary expectation in employer-liability proceedings.
- What does TMC traveler-tracking integration actually deliver in 2026, and is a standalone duty-of-care provider still necessary?
- TMC traveler-tracking integration delivers the booking-data layer of locate-and-track: the itinerary feed, the in-trip location confirmation derived from PNR and check-in events, and the routing of pre-trip risk advisories tied to the destination set. It does not deliver the extraction infrastructure — the assistance-center operations, the medical-evacuation aviation contracts, the in-country security relationships, and the 24/7 case-management workflow — that is the operating substance of a duty-of-care contract. The GBTA Foundation's working group framing, consistent across the 2024 and 2025 updates, is that TMC-supplied tracking and a contracted duty-of-care provider are complements rather than substitutes. The integration question is not whether to contract a duty-of-care provider in addition to the TMC; it is which provider's data architecture is most cleanly integrated with the TMC's booking feed and with the program's HRIS and crisis-communications stack. Amex GBT Expert Care, Navan Risk, and the embedded International SOS and Crisis24 integrations available through most enterprise TMCs are the architectural answers to that integration question.
- How do programs typically price duty-of-care contracts in 2026?
- Pricing models split into three tiers. Enterprise assistance contracts with International SOS, Crisis24, and Healix are typically priced on a per-traveler-per-year basis with tiered service levels, with per-traveler costs commonly cited in the $25 to $120 range depending on geography, traveler-density assumptions, and the depth of medical and security service inclusions; the largest multinational contracts negotiate from those benchmarks rather than to them. Extraction-emphasis providers — Global Rescue and FocusPoint — frequently price on a membership-plus-incident basis, with annual program fees supplemented by per-event extraction costs that can run materially above the assistance-contract benchmark. TMC-embedded duty-of-care offerings, including Amex GBT Expert Care, Navan Risk, and the Riskline alerting layer, are typically bundled into the TMC contract or offered as an incremental SaaS line item in the $3 to $15 per-traveler-per-month range. The GBTA Foundation's 2025 procurement benchmark cautioned that headline per-traveler rates are not directly comparable across providers because the service-level catalogs differ materially; the working group recommended that programs build their RFP scoring around a defined set of incident scenarios and require providers to quote both program-fee and per-incident economics against those scenarios.
- Which providers do procurement teams most frequently dual-source, and why?
- Dual-sourcing in duty-of-care is more common than in any other corporate travel service line, per the GBTA Foundation's Q4 2025 benchmark, which reported that 38% of multinational programs with more than 5,000 travelers maintain contracts with two providers. The most-cited dual-source pairings are International SOS paired with Global Rescue (medical assistance scale plus extraction depth), International SOS paired with Crisis24 (medical-led plus security-led), and Crisis24 paired with Pinkerton (security-led plus executive-protection specialty). The rationale, consistent across the working-group materials, is risk concentration: a single-source duty-of-care contract creates a counterparty-dependence at the moment of crisis when the program can least afford a service-quality variance. The procurement counter-argument is operational complexity — two case-management workflows, two HRIS integrations, two pre-trip briefing systems — and the per-traveler cost premium of the dual-source model, which the GBTA benchmark estimated at 30% to 60% above a comparable single-source contract.