Whisper: ACN-qualified whistleblowing software
Fast, intuitive and secure software for handling reports of wrongdoing in your company or organisation: a reporting platform compliant with Directive (EU) 2019/1937, Italian Legislative Decree 24/2023, the GDPR and the ANAC guidelines.
Who must set up a reporting channel
Directive (EU) 2019/1937 requires internal reporting channels in every EU country. In Italy, Legislative Decree 24/2023 requires an internal reporting channel for:
- private entities that employed an average of at least 50 employees in the last year;
- entities that have adopted a 231 organisational model, even with fewer than 50 employees;
- entities operating in certain sensitive sectors (for example financial services, transport safety, environmental protection);
- public administrations.
General information only, not legal advice: check your situation with a professional.
What whistleblowing is and how it worksWhat non-compliant organisations risk
In Italy, ANAC (the National Anti-Corruption Authority) can impose administrative fines of €10,000 to €50,000, among other things when reporting channels have not been set up, compliant procedures have not been adopted or reports have not been followed up; fines of the same amount apply to retaliation, obstructing reports and breaches of the confidentiality obligation. Other EU countries set their own penalties under the Directive.
General information only, not legal advice: check your situation with a professional.
What whistleblowing software must guarantee
Always check that the software guarantees confidentiality, data protection and compliance with the applicable rules and guidelines (in Italy, the ANAC guidelines).
1. Confidential internal channel
Whisper: custom URL, logo and QR code for a channel dedicated to your organisation.
2. Anonymity and data protection
Whisper: unlimited anonymous reports, end-to-end encryption and AES-256 encryption.
3. Acknowledgement of receipt to the whistleblower within 7 days
Whisper: email notifications and alerts whenever a report arrives.
4. Feedback within 3 months
Whisper: email notifications and alerts and an activity log to follow every report.
5. Access limited to authorised people and an activity log
Whisper: two-factor authentication, automatic routing and a Supervisory Body/Whistleblowing activity log.
6. Documented procedure and privacy notice
Whisper: whistleblowing procedure template and privacy notice template for the whistleblower.
7. Time-limited data retention (in Italy, no more than 5 years from the final outcome)
Whisper: GDPR whistleblowing guidelines to support data management.
8. Training for those who handle reports
Whisper: whistleblowing training documentation and training video clips.
Why choose Whisper
Security, compliance and ease of use in a single solution.
Whisper is ACN qualified
Whisper is qualified by ACN, Italy's National Cybersecurity Agency
Support included and ready
Dedicated support always available
ISO 27001 / 27017 / 27018
International security standards
Quick and easy
Fast implementation, intuitive use
Whisper features
Security
- Two-factor authentication (2FA)
- End-to-end encryption
- AES-256 encryption
- Digital signature (.p7m)
Management
- Automatic routing of reports
- Supervisory Body/Whistleblowing activity log
- Email notifications and alerts
- Multi-company platform
- Unlimited anonymous reports
Customisation
- Custom URL
- Your logo on the platform
- Custom QR code
- Italian and English included
Documentation and training
- Whistleblowing procedure template
- Privacy notice template for the whistleblower
- GDPR whistleblowing guidelines
- Whistleblowing training documentation
- Whisper training video clips
Support
- Onboarding support and configuration
- Two hours of our support
Explore our packages
Scalable solutions for organisations of every size.
All features included in every package
Whisper 250
Whistleblowing software
Up to 250 employees
Frequently asked questions about whistleblowing software
Who must have a whistleblowing reporting channel?
In Italy, Legislative Decree 24/2023 (implementing Directive (EU) 2019/1937) requires an internal reporting channel for: private entities that employed an average of at least 50 employees in the last year; entities that have adopted a 231 organisational model, even with fewer than 50 employees; entities operating in certain sensitive sectors (for example financial services, transport safety, environmental protection); and public administrations.
What are the penalties for not setting up the channel?
In Italy, ANAC can impose administrative fines of €10,000 to €50,000, among other things when reporting channels have not been set up, compliant procedures have not been adopted or reports have not been followed up; fines of the same amount apply to retaliation, obstructing reports and breaches of the confidentiality obligation.
How much does whistleblowing software like Whisper cost?
Whisper 100 (up to 100 employees): €500 per year + VAT. Whisper 250 (up to 250 employees): €900 per year + VAT. Whisper Enterprise: tailored. All features are included in every package.
Is Whisper ACN qualified?
Whisper is qualified by ACN, Italy's National Cybersecurity Agency; you can check this on the Agency's website. Thorsoft is certified to ISO 9001, 27001, 27017 and 27018.
Check the qualification on the website of ACN, Italy's National Cybersecurity AgencyCan the whistleblower remain anonymous?
Yes: Whisper allows unlimited anonymous reports and protects data with encryption (AES-256) and two-factor authentication.
How quickly must a report be handled?
The rules require an acknowledgement of receipt to the whistleblower within 7 days and feedback within 3 months. Whisper sends email notifications and alerts and keeps an activity log.
What is included in the price?
Whistleblowing procedure template, privacy notice template for the whistleblower, GDPR whistleblowing guidelines, training documentation, Whisper training video clips, onboarding support and configuration, and two hours of support.
Does Whisper work for several companies?
Yes: the platform is multi-company, designed for groups of companies too.
Further reading
Whistleblowing: what it is and how it works
Meaning, who the whistleblower is, obligations under Italian Legislative Decree 24/2023 and the role of ANAC.
Read the whistleblowing guideThe history of whistleblowing
From the first reports in the USA to the EU Directive and Italian Legislative Decree 24/2023.
Read the history of whistleblowingHow to choose whistleblowing software
The criteria for assessing a reporting channel that is compliant, secure and easy to use.
Read how to choose whistleblowing softwareWhistleblowing software: prices and costs
Price factors, costs not to underestimate and Whisper's prices.
Read the guide to prices and costsThorsoft, whistleblowing specialists
Thorsoft was founded by professionals experienced in whistleblowing, Italian Legislative Decree 231, anti-corruption and secure, GDPR-compliant software development.
In partnership with Dylog, we offer integrated solutions that ensure regulatory compliance and streamline business processes.
About usReady to get started with Whisper?
Request a free demo or contact us with no obligation to find out how Whisper can make your organisation compliant and secure.
Data is stored on AWS servers in Milan, Italy, and delivered through the CloudFront network with edge locations also in Rome and Palermo, in full compliance with the GDPR. Thorsoft is certified to ISO 9001, 27001, 27017 and 27018.