50,000 EUR
ANAC fine
For failing to establish the channel or retaliating against the reporter.
D.LGS. 24/2023 · ANAC GUIDELINES
Up to EUR 50,000 in ANAC fines.
Or EUR 890 to set up the channel in 15 minutes.
Whispr is the internal reporting channel required by D.Lgs. 24/2023 for Italian organisations with 50+ employees. Written, oral, anonymous. Aligned with the ANAC guidelines. Live from first access — no IT required.
50K
EUR maximum fine
7
days to acknowledge
15 min
to activate Whispr
14-day free trial. Card required to start the workspace and prevent abuse. Nothing is charged during the trial; cancel anytime from your admin panel.
Written + oral
Anonymous or identified
Aligned with ANAC guidelines
14-day trial · Cancel before renewal
18
Open cases
4
Deadline approaching
12
On track
W-2401
Conflict of interest
Under review
W-2398
Documented oral report
Acknowledged
W-2393
Awaiting reporter response
Pending
REGULATORY EXPOSURE
What organizations risk
without a dedicated internal channel
Report to ANAC
The reporter goes external
If the internal channel doesn't work, the reporter can go directly to ANAC.
Reputational damage
Email, PEC and Excel sheets?
Art. 12 D.Lgs. 24/2023 requires tools that guarantee the reporter's confidentiality: email and PEC alone are not sufficient.
THE OPERATIONAL DIFFERENCE
Traditional handling
vs a dedicated platform
Without Whispr
- Email and PEC as channel
- Deadlines tracked manually
- Uncontrollable access
- No audit trail
- Follow-up via external email
- Oral report? "We'll deal with it later"
With Whispr
- Dedicated and compliant channel
- Automatic 7-day and 3-month deadlines
- Role-based selective access
- Audit log on every action
- Secure mailbox with case code
- Oral report with structured workflow
HOW IT WORKS
How Whispr works.
5 steps, 15 minutes.
01
Report
Written or oral. Anonymous or identified. Mobile or desktop.
02
Acknowledgment
Recorded confirmation with visible 7-day deadline.
03
Assignment
Routing to the responsible party. Escalation if needed.
04
Confidential follow-up
Secure mailbox. No external email. Case code.
05
Closure
Notes, attachments, legal hold. Everything archived. Within 3 months.
CAPABILITIES
Built for D.Lgs. 24/2023.
Not retrofitted.
Written + oral reports
Both channels with dedicated workflow. Not a generic form.
Selective access
Admin, Handler, Advisor, Viewer. Each sees only what they need.
Automatic deadlines
7 days to acknowledge. 3 months for feedback. Visible, not in your head.
Full audit trail
Every access, note, status change and export is logged.
Confidential mailbox
The reporter follows the case with a code. Zero external emails.
Multi-entity and advisor
One account for groups, consultants or firms with multiple clients.
SCOPE OF APPLICATION
Who is subject to the
internal channel requirement
Private companies with 50+ employees
Regulated sectors (even below threshold)
Entities with Model 231
Public administration
COVERED REQUIREMENTS
The operational requirements
of D.Lgs. 24/2023, covered.
Whispr covers the technical and operational requirements of D.Lgs. 24/2023 for the internal reporting channel.
Legal requirement
Article
Whispr
Internal reporting channel
Art. 4
Dedicated written and oral channel ✓
Confidentiality guarantee
Art. 4 · Art. 12
Encryption in transit and at rest, anonymous reporting, role-based access ✓
Report management
Art. 5
Centralized dashboard with case management ✓
Acknowledgment within 7 days
Art. 5
Automatic confirmation within 7 days ✓
Feedback within 3 months
Art. 5
Automatic deadlines and reminders ✓
Confidentiality obligation
Art. 12
Role-based access, audit log ✓
Personal data processing
Art. 13
GDPR compliant, DPA included ✓
Documentation retention
Art. 14
Secure storage, complete traceability ✓
Protection against retaliation
Art. 17 · Art. 19
Confidential identity, restricted access and audit trail to support whistleblower protection ✓
HONEST COMPARISON
Whispr, legal counsel, or do nothing?
The real numbers.
Real Italian market figures, not marketing promises. Sourced from 2026 average rates published by Italian Bar Council tariff schedules and ANAC sanction bulletins.
Direct answer: setting up the internal channel with a legal counsel costs on average EUR 5,000–10,000 in setup plus the cost of internal team time. Failing to set up the channel exposes the organisation to ANAC fines of up to EUR 50,000 per violation. Whispr starts at EUR 890/year all-in, live in 15 minutes with no IT involvement.
| Dimension | Do nothing | Legal counsel | Whispr |
|---|---|---|---|
| Setup cost (one-off) | EUR 0, but ANAC exposure EUR 10,000–50,000 per violation | EUR 5,000–10,000policy drafting + channel setup + staff training | EUR 0 setup |
| Recurring annual cost | EUR 0 — until it isn't | EUR 2,000–5,000/yearregulatory updates + reviews | From EUR 890/yearall-in, regulatory updates included |
| Time to live | Never — ongoing exposure | 4–8 weeksmeetings, drafts, formalisation | 15 minutesno IT, no install |
| Written + oral channel | Non-compliant | Depends on the offering | ✓ Included |
| Deadline tracking (7-day / 3-month) | Manual, high-risk | Manual, on spreadsheet or paper | ✓ Automated with alerts |
| Immutable audit log | Nonexistent | Depends on the system used | ✓ Logged for every action |
| In-transit message encryption | Email/PEC: insufficient | Rarely offered | ✓ ECDH P-256 + AES-GCM |
| DPA + procurement documentation | Draft from scratch | On request, separate fee | ✓ Already published |
| Residual ANAC fine exposure | HIGH — up to EUR 50,000 per violation | Low (if channel operational) | Low (channel operational + audit trail) |
Rate sources: Italian Bar Council average tariff schedules for compliance / 231 advisory (2023–2025); ANAC sanction bulletins published on anticorruzione.it; Confindustria Servizi "Cost of compliance" report (2024). Whispr does not replace legal advice: for assessing the corporate context, drafting the 231 model and training staff, the support of a lawyer or compliance consultant is still recommended. Whispr provides the technological infrastructure of the channel required by D.Lgs. 24/2023.
EXPOSURE CALCULATOR
Your specific risk, in 5 seconds.
How many employees does your organisation have? Real numbers. Nothing saved.
120 emp.
ANAC exposure
— EUR
per violation, art. 21 D.Lgs. 24/2023
Consultant setup
— EUR
average market estimate
Whispr Annual
890 EUR
all-in
Savings vs consultant
— EUR
first year
Note: indicative estimates based on 2024–2025 average rates for compliance / 231 advisory (Italian bar council schedules) and published ANAC sanction bulletins. For plans with >700 employees or special needs, contact sales@backpr.com.
PRICING
Transparent pricing.
No hidden costs.
Monthly
89EUR/month
Up to 50 employees
- Written + oral channel
- Anonymous and identified reports
- Case dashboard and deadlines
- Audit log and selective access
- Confidential mailbox
- DPA, Security, Subprocessors
Card required · Cancel anytime during the 14 days
Recommended
Annual
890EUR/year
Up to 50 employees · Save 178 EUR
- Everything in monthly included
- Priority onboarding
- Lower effective cost
- Ideal for formal budgets
Card required · Cancel anytime during the 14 days
Under art. 21 D.Lgs. 24/2023, ANAC can apply administrative fines of up to €50,000 for failure to set up or properly run the channel. Whispr starts at €890/year.
Company with more than 50 employees? Each organization has different needs (report volume, integrations, languages, custom SLAs). Request a dedicated quote — we reply within 2 business days.
14-day free trial. Card required to start; cancel anytime before the trial ends to avoid being charged.
Encrypted in transit & at rest
EU network hosting (Cloudflare)
DPA and procurement documentation
Role-based access and audit log
GDPR-compliant retention policy
FAQ
Frequently asked questions
Quick answers for teams evaluating adoption.
Can reports be anonymous?
Yes. Clear choice between anonymous and identified. Anonymity is not discouraged.
Do you support oral reports?
Yes. Meeting request or oral intake with documented transcription in the case.
Who is required to activate the channel?
Private companies with 50+ employees, regulated sectors even below threshold, entities with Model 231.
Why not use email or PEC?
Email and PEC alone do not provide the reporter confidentiality required by art. 12 D.Lgs. 24/2023 and the ANAC guidelines. They won't survive an audit.
Do you provide DPA and procurement documentation?
Yes. Security, DPA, Subprocessors and Retention are already published and accessible.
How long does it take to implement Whispr?
15 minutes. From registration to operational channel in under a quarter hour. Our team supports you throughout the entire setup process.
Do I need to involve the IT department?
No. Whispr is a cloud platform that requires no installations, integrations, or technical interventions. Your IT department doesn't need to do anything.
Do I need a credit card to start the trial?
Yes. A card is required at signup to verify the customer's identity, prevent fake workspaces, and enable auto-renewal once the 14-day trial ends. Nothing is charged during the trial. Card verification uses 3-D Secure (PSD2 / SCA) via Stripe. Cancel any time before the trial ends from the admin console — no charge. Italian B2B invoicing requirements (e.g. fattura elettronica) are arranged during commercial onboarding.
What happens if I don't comply with D.Lgs. 24/2023?
ANAC can impose penalties from €10,000 to €50,000 per violation. Additionally, employees can report directly to ANAC or judicial authorities, making the matter public with consequent reputational damage.
How does support work?
Support is entirely in Italian and English. We offer assistance via email. For the annual plan, priority onboarding is included with dedicated support during setup.
Does Whispr work for reports in multiple languages?
Yes. Whispr's interface is available in Italian and English, allowing employees of different nationalities to submit reports in their own language.
What happens to our data if BackPR is sold, shuts down, or changes provider?
A complete case export (CSV + JSON bundle) is available at any time from your panel — no support ticket needed. The DPA provides a post-termination export window. Data is never locked behind a vendor: the channel is a regulatory standard, not a technological lock-in.
ANAC guidelines and Italian Privacy Authority (Garante): how are they reconciled?
ANAC governs channel design (identity confidentiality, acknowledgment, feedback). The Garante governs processing of personal data involved (legal basis, retention, data-subject rights). Whispr is built to satisfy both: we publish DPA, Subprocessors, Retention and Security as separate documentation from your company policy. Selecting the legal bases and aligning to your processing register remain with the controller (you).
Does D.Lgs. 24/2023 apply to the public sector too?
Yes. The decree implementing EU Directive 2019/1937 applies to public bodies and private-sector entities above the employee thresholds. For public-sector entities, ANAC's 2023 guidelines identify further specifics on identity safeguards and integration with anti-corruption plans. Whispr provides the channel infrastructure; assessing compatibility with the PIAO or the three-year anti-corruption plan remains the entity's responsibility.
Can BackPR read the report content?
The message is encrypted in the reporter's browser with the workspace public key before being sent (ECDH P-256 + AES-GCM, on top of TLS). Technically, the operator can in principle decrypt because the private key resides server-side. The DPA explicitly prohibits access to report content outside of technical-support cases requested by the customer and logged in an immutable audit trail. A zero-knowledge mode (private key unlockable only with an admin passphrase) is on the roadmap as an opt-in for those who need stronger guarantees.
Can Whispr integrate with our 231 model or code of ethics?
Yes. Report categories, severity levels and roles (handler, advisor, reviewer) are fully configurable to align with your 231 model, code of ethics or integrated management system. The channel can also be published via QR code and dedicated links, includable in staff training materials.
Ready to simplify
whistleblowing compliance?
Configure the channel in minutes. 14-day trial; a card is required at sign-up to prevent fake workspaces. Cancel any time during the trial — no charge.