Whistleblowing Software · Italian Whistleblowing Law (Legislative Decree 24/2023)
Whistleblowing software compliant with the Italian Whistleblowing Law (Legislative Decree 24/2023), built around your process.
Themis is the internal reporting channel platform for managing whistleblower disclosures: whistleblower protection, role-based confidentiality, traceable workflows and deadlines under control. Developed by Koratyn, an independent specialist with over 10 years of experience in business processes.
Themis is designed for organizations subject to the Italian Whistleblowing Law (Legislative Decree 24/2023) — private companies and public entities — that manage the internal reporting channel as a structured governance process, not as an isolated compliance task.
Roles and profiles
Compliance, HR, Legal officers and DPOs handling sensitive reports
Leadership overseeing integrity, ethics and corporate responsibility
Supervisory Bodies (OdV) with document traceability requirements
Structured organizations with detailed internal procedures
When it becomes critical
When the company is subject to Legislative Decree 24/2023 and must set up an internal channel
When reports today arrive via email or informal channels, with no traceability
When managing reports requires clear separation between case handling and sensitive data
When audits, internal reviews or supervisory bodies require complete documentation
Typical challenges
The problems Themis solves in whistleblowing case management
Three challenges every Compliance Officer recognizes — and how Themis turns them into controlled processes.
Fragmented case management
Reports arriving via email, Word files on shared folders, untracked phone calls. When it becomes necessary to reconstruct who knew what and when, the evidence to support a documented defense is missing.
With Themis: every report in a traceable, reconstructable flow
Whistleblower protection and confidentiality
The whistleblower's identity and sensitive content require strict segregation: who can see what, who can investigate, who can close. Without a structured system, the risk of exposure grows at every step.
With Themis: role-segregated access, traceable view history
Regulatory deadlines and accountability
Legislative Decree 24/2023 sets precise deadlines for acknowledgment of receipt and for feedback to the whistleblower. Without visible deadlines and assigned tasks, non-compliance comes from omission, not intent.
With Themis: monitored deadlines, assigned tasks, audit-ready history
Project deliverables
What the Themis activation includes
Four areas of intervention to take the reporting channel from concept to production, with process oversight and documentation.
Internal reporting channel setup
Full setup of the internal reporting channel compliant with Legislative Decree 24/2023
Structured attachment management and classification of reports
Definition of access rules and confidentiality levels by role
Workflow and case lifecycle
Configurable case statuses and internal SLAs
Responsibility assignment by profile, with escalation in case of inactivity
Full and immutable history of actions taken on each case
Security and whistleblower protection
System-level protection of the whistleblower's identity
Technical segregation of sensitive information from the rest of the business flow
Confidentiality safeguards across the entire case lifecycle
Training, launch and support
Operational training for the roles involved (Compliance, HR, Supervisory Body)
Support during adoption and on the first real cases
Controlled launch of the channel with monitoring of initial flows
The Koratyn Method
How we implement Themis in your organization
Four phases, applied to your real context — from regulatory scope to operational launch of the channel.
01
Discovery and scope
We analyze the organizational context, map roles and case handling flows, define the applicable regulatory scope and the specific confidentiality requirements.
02
Configuration
We configure the channel, workflow statuses, access rules and responsibilities, with a structure aligned to Legislative Decree 24/2023 and to your organizational model.
03
Training
We train the people in charge — Compliance, HR, Supervisory Body, DPO — with role-based, hands-on sessions and shared working materials.
04
Launch and ongoing support
We activate the channel while monitoring the first real reports and providing continuous support, to ensure operational continuity and quick intervention.
Independent whistleblowing specialists, from design to oversight
Themis is a product developed by Koratyn, an independent Italian specialist with over 10 years of experience in business processes and compliance digitalization.
Independent specialists
We don't resell third-party certifications. We are independent Italian specialists: our value is direct knowledge of business processes and regulations.
Proprietary product
Themis is developed and maintained by Koratyn. We know every layer of the system and can intervene quickly when the organization grows or changes.
10+ years of experience
Over ten years of experience in the digitalization of business processes. We have seen compliance, governance and operations evolve — and we evolve with them.
Ongoing support
Go-live doesn't close the project. Operational support on the first real cases and continuous assistance to ensure stability over time.
Application scenarios
Three situations where Themis makes the difference
Typical operating situations we encounter in organizations — and how Themis brings them under control.
First activation of the channel
The organization is subject to Legislative Decree 24/2023 but does not yet have a structured channel. We design the procedures, activate the channel, train the people in charge. In a few weeks the process is operational, documented and auditable.
Regaining control over existing processes
The channel exists but case management is scattered: emails, files, phone calls. We migrate the flows to Themis, reconstruct the history and define explicit responsibilities. The process becomes reconstructable and defensible again.
Strengthening protection and reporting culture
The presence of a structured channel perceived as trustworthy increases useful reports and reduces retaliatory acts. We work on the system, internal communication and training, so that the channel really works.
FAQ
Frequently asked questions about Themis whistleblowing software
Clear answers to start with confidence.
Yes. Themis is designed to support the obligations of Legislative Decree 24/2023, which implements EU Directive 2019/1937 on the protection of whistleblowers. The platform manages the report lifecycle — case handling, roles, confidentiality, deadlines, document history — in line with regulatory requirements.
Legislative Decree 24/2023 applies to public sector entities, private sector entities with at least 50 employees, and private entities falling within the scope of the 231 Organizational Model or operating in specific sectors (e.g. financial, anti-money laundering, transport safety). For an accurate assessment of the scope of applicability in your organization, contact us for a consultation.
Yes. Confidentiality is the guiding principle of the system: access is governed by role, the whistleblower's identity is protected at system level, and sensitive information is segregated from the rest of the business flow. Every view and action is tracked for audit purposes.
Case management is handled by the people designated by the organization — typically Compliance Officer, HR, Legal, DPO or members of the Supervisory Body (OdV). Themis assigns specific permissions to each profile, with strict segregation between case handling, supervisory roles and access to sensitive data.
Report management follows the procedures set out in Legislative Decree 24/2023 and ANAC guidelines, which also allow for anonymous reporting when configured by the organization. The configuration of the channel access methods and anonymity levels is defined together during the scope analysis phase.
Timelines vary based on organizational complexity, but the project follows four structured phases: scope and role analysis, channel configuration, training of the people in charge, controlled launch. For mid-sized organizations, activation is typically in the range of weeks, not months.
Yes. The reporting channel is one of the elements that Legislative Decree 231/2001 requires as part of the company's organizational model. Themis is designed to integrate with existing compliance tools, with structured dialogue with the Supervisory Body, Compliance and Legal.
Yes. The project includes role-based operational training sessions (Compliance, HR, Legal, Supervisory Body), shared working materials and support on the first real cases. The goal is for the internal team to operate autonomously by the go-live phase.
Request a consultation
Let's assess together the regulatory scope of your organization
An initial conversation to analyze the current situation, identify the applicable obligations and design the next steps. No commitment, with direct knowledge of Legislative Decree 24/2023 and business processes.