Compliance
Whistleblowing.

Yes, companies with 50 or more employees, public entities and organizations operating under specific EU regulations must provide a secure internal reporting channel. Italian D.Lgs 24/2023, implementing EU Directive 2019/1937, mandates a platform that guarantees reporter confidentiality and end-to-end encryption. Non-compliance exposes the organization to administrative fines from ANAC ranging from 10,000 to 50,000 euro. Our managed platform ensures full regulatory alignment from day one.

The platform guarantees reporter anonymity through multiple layers: end-to-end encryption of all communications, separation of identity data from report content and access restricted exclusively to the designated compliance officer. No IP address, browser fingerprint or metadata is stored. The reporter receives a unique encrypted code to track their case and exchange follow-up messages without ever revealing their identity. The system is built on GlobaLeaks, the leading open-source framework for secure reporting.

Your platform is fully operational within 24 hours from order confirmation. We handle all technical setup: server provisioning, SSL certificates, domain configuration, ANAC-compliant reporting workflows and compliance officer access credentials. There is zero technical effort required from your IT team. After activation you receive a branded reporting portal, an administrative dashboard and complete documentation for internal policy integration.

All data is stored on encrypted servers located within the European Union, fully compliant with GDPR and Italian data protection regulations. Access is restricted exclusively to the designated compliance officer through multi-factor authentication. Not even our technical staff can read report contents due to end-to-end encryption architecture. We provide a detailed Data Processing Agreement and infrastructure documentation for your DPO and legal team upon request.

ANAC can impose administrative fines from 10,000 to 50,000 euro for organizations that fail to establish a compliant reporting channel or that do not follow proper investigation procedures. Additional sanctions apply for retaliation against whistleblowers, including nullification of retaliatory measures and further financial penalties. Beyond regulatory risk, the absence of a reporting platform eliminates a critical internal governance tool. Our managed solution removes this risk entirely at a fraction of the potential penalty cost.