Whistleblowing software compliant
with D.Lgs 24/2023, built around your process.
Themis is the internal reporting
channel platform for managing disclosures:
whistleblower protection, role-based
confidentiality,
traceable workflows and deadlines under control.
Developed by Koratyn, an independent specialist with
over 10 years of experience in business processes.
D.Lgs 24/2023 compliant ·
Koratyn product · 10+ years of
experience
Who it's aimed at
Who Themis is for (and when it becomes
indispensable)
Themis is designed for organisations
subject to D.Lgs 24/2023 — private companies and public
bodies — that manage the internal reporting channel as a
structured governance process, not as an isolated
compliance obligation.
Business profiles and roles
Compliance, HR, Legal and DPO managers handling
sensitive reports
Management overseeing integrity, ethics and
corporate responsibility
Supervisory Bodies (OdV) with documentary
traceability requirements
Structured organisations with articulated
internal procedures
Situations where it becomes decisive
When the company is subject to D.Lgs 24/2023
obligations and must establish an internal
channel
When reports currently arrive via email or
informal channels with no traceability
When report management requires a clear
separation between investigation and sensitive
data
When audits or oversight bodies require complete
documentation
Typical issues
The problems Themis solves in report
management
Three issues every Compliance Manager
will recognise — and how Themis transforms them into
supervised processes.
Fragmented report management
Reports via email, Word files
on shared folders, untracked phone calls. When you
need to reconstruct who knew what and when, the
evidentiary elements needed for a documented defence
are missing.
With Themis: every report
in a tracked and reconstructable flow
Whistleblower protection and
confidentiality
The whistleblower's identity
and sensitive content require clear segregation: who
can see what, who can investigate, who can close the
case. Without a structured system, the risk of
exposure grows with every step.
With Themis: role-segregated
access, view traceability
Regulatory deadlines and
responsibilities
D.Lgs 24/2023 sets precise
time limits for the acknowledgement of receipt and
for the response to the whistleblower. Without
visible deadlines and assigned tasks, the risk of
non-compliance arrives through omission, not
intent.
With Themis: monitored
deadlines, assigned tasks, audit history
Project
deliverables
What the Themis activation includes
Four areas of intervention to take the
reporting channel from concept to production, with
process supervision and documentation.
Internal channel configuration
Full setup of the internal reporting channel
compliant with D.Lgs 24/2023
Structured attachment management and report
classification
Definition of access rules and confidentiality
levels by role
Workflow and lifecycle
Configurable progress statuses and internal
management SLAs
Responsibility assignment by profile, with
escalation in case of inactivity
Complete and immutable history of all actions
taken on the case
Security and whistleblower
protection
System-level protection of the whistleblower's
identity
Technical segregation of sensitive information
from the rest of the business flow
Confidentiality oversight throughout the entire
management cycle
Training, launch and support
Operational training for the roles involved
(Compliance, HR, OdV)
Support during adoption and in the first real
investigations
Controlled channel launch with monitoring of
initial flows
Koratyn Method
How we implement Themis in your
organisation
Four phases, applied to your real context
— from the regulatory scope to the operational launch of
the channel.
01
Discovery and scoping
We analyse the organisational context, map roles
and management flows, define the applicable
regulatory scope and specific confidentiality
requirements.
02
Configuration
We configure the channel, workflow statuses,
access rules and responsibilities, with a
structure aligned with D.Lgs 24/2023 and your
organisational model.
03
Training
We train the designated contacts — Compliance,
HR,
OdV, DPO — with role-oriented operational
sessions and shared working materials.
04
Launch and oversight
We activate the channel with monitoring of the
first real reports and ongoing support, to
ensure
operational continuity and responsiveness.
Independent whistleblowing specialists,
from design to oversight
Themis is a product developed by
Koratyn, an independent Italian specialist with over 10
years of experience in business processes and compliance
digitalisation.
Independent specialists
We don't resell third-party certifications. We are
independent Italian specialists: our value lies in
direct knowledge of business processes and
regulations.
Proprietary product
Themis is developed and maintained by Koratyn. We
know every layer of the system and can act quickly
when the organisation grows or changes.
10+ years of experience
Over ten years of experience in digitalising business
processes. We have seen compliance, governance and
operations change — and we grow with them.
Ongoing oversight
The go-live doesn't close the project. Operational
support during the first real investigations and
ongoing assistance to ensure stability over time.
Application scenarios
Three situations where Themis makes the
difference
Typical operational situations we
encounter in organisations — and how Themis brings them
under control.
First activation of the channel
The organisation is subject to
D.Lgs 24/2023 but does not yet have a structured
channel. We design procedures, activate the channel
and train the designated contacts. Within a few
weeks the process is operational, documented and
auditable.
Regaining control over existing
processes
The channel exists but
management is dispersed: emails, files, phone calls.
We migrate the flows to Themis, reconstruct the
history and define explicit responsibilities. The
process becomes reconstructable and defensible
again.
Strengthening protection and a
reporting culture
The presence of a structured,
trusted channel increases useful reports and reduces
retaliatory acts. We work on the system, internal
communication and training to make the channel
genuinely effective.
FAQ
Frequently asked questions about Themis
whistleblowing software
Clear answers to get started on the
right foot.
Yes. Themis manages the report
lifecycle — investigation, roles, confidentiality,
deadlines, documentary history — in alignment with
the requirements of D.Lgs 24/2023, which transposes
EU Directive 2019/1937.
D.Lgs 24/2023 applies to public
sector entities, private organisations with at least
50 employees, entities within the scope of the
231 model and operators in specific sectors. Contact
us for a precise verification.
Yes. Access is governed by role,
the whistleblower's identity is protected at system
level, and sensitive information is segregated from
the rest of the business flow. Every action is
tracked for audit purposes.
Management is entrusted to
designated contacts — typically the Compliance
Manager, HR, Legal, DPO or OdV. Themis assigns each
profile specific permissions with clear segregation
between investigation, supervision and access to
sensitive data.
Management follows the procedures
set out in D.Lgs 24/2023 and ANAC guidelines. The
configuration of access methods and anonymity levels
is defined during the scope analysis phase.
The project follows four phases:
scope and role analysis, configuration, training,
controlled launch. For medium-sized organisations,
activation typically takes weeks, not months.
Yes. The reporting channel is one
of the elements provided for by Legislative Decree
231/2001. Themis is designed to integrate with
existing compliance tools, with structured dialogue
towards the OdV, Compliance and Legal.
Yes. The project includes
operational training sessions by role (Compliance,
HR, Legal, OdV), shared materials and support during
the first real investigations.
Request a consultation
Let's verify your
organisation's regulatory scope together
An initial
conversation to analyse the current situation,
identify applicable obligations and map out the next
steps.