ithikios

Spanish modular compliance suite with whistleblowing channel. Basic plan from €29/month, Premium €49/month.

Part of iThikios modular compliance suite

Rubric score

29 / 50

Evidence tier P

Public pages and Trust Center surface only. No trial or handler account was reviewed.

How this score is produced →

Facts

Website: ithikios.com(opens in new tab)
Headquarters: Spain
Hosting: Germany (vendor security page)
Pricing: Whistleblowing channel: Basic €29/mo for up to 50 employees; Premium €49/mo for up to 500 employees; Business quote-based. Compliance all-in-one Grow from €99/mo; Enterprise quote-based.
Prices exclude VAT and may vary by company size. Free-start CTA is public; privacy policy describes a 15-day free trial account.
Languages on reporting form: 7
Domain registered: February 2020 ithikios.com
Ownership: Digital Products Development SL
Customers: 1,000+ companies across 10 countries (vendor claim)
Product scope: Module of iThikios modular compliance suite

Measured, not published

Established by checking the vendor's own infrastructure rather than by reading its marketing. Every figure here can be reproduced from the links given.

DMARC policy: Published but not enforcing
DNSSEC: Unsigned

Capabilities

Anonymous reporting ✓
Multi-channel intake ✓
Public API —
Free trial ✓
Two-factor authentication —
Audit log —
EU Directive 2019/1937 (vendor claim) ✓

✓ published by the vendor · ✗ vendor states it is not offered · — not published either way

Certifications

ISO 27001

National laws referenced

Spain (Ley 2/2023)
ISO 37301 compliance alignment

Typical buyer

Spanish SMEs subject to Ley 2/2023 wanting a modular compliance suite (incident, rights, policy, third-party) from one vendor.

Distinctive features

Basic plan from €29/month with free-start CTA
Security page states ISO 27001 certification, German hosting, SSL 256, WAF, and optional 2FA
Modular suite — Incident Manager (DORA/GDPR/NIS2), Rights, Policy, Third Party, Trust Center

Add-ons and conditions

Costs or terms not included in the headline price.

Premium voice communications and Azure AD integration are optional
Business and Enterprise tiers are quote-based
API access is not disclosed on public pages reviewed
Public suite-level copy mentions AI, but AI use in the whistleblowing channel itself was not documented on public pages reviewed

Notable

Whistleblowing is one module of a broader modular compliance suite: Incident Manager (DORA, GDPR, NIS2), Rights Manager (consent), Policy Manager, Third Party Manager, Trust Center.
Interface languages: Spanish, English, French, German, Italian, Portuguese, Catalan.
Security page states SSL 256, ISO 27001 certification since December 2021, hosting on servers in Germany, WAF protection, and optional two-factor authentication.
Anonymous and confidential reporting modes; teams/roles defined per risk category; case management with consolidated documentation.
Cloud SaaS deployment — no customer infrastructure required.
Configurable without programming: colours, logo, messages, custom fields, multi-company, multiple integrated channels.
Target customers include lawyers, consultants, and advisors through an affiliate partner program.
Set-up and compliance achievable in hours (vendor-stated).
Trust Center publishes a browser-verified subprocessor list: Cloudflare, DigitalOcean, and Pipedrive. Some Trust Center documents require corporate-email registration, and curl access to ithikios.com / trust.ithikios.com returned 403 during this pass.
AI use in the whistleblowing channel is left undisclosed: public suite-level copy mentions AI, but the reviewed whistleblowing, pricing, security, privacy, terms, and Trust Center pages did not document AI for the channel.
No public API documentation was found on the public pages reviewed.

Frequently asked questions about ithikios

Answers derived from vendor-published materials dated on this page.

Is ithikios suitable for SMEs under 250 employees?

Yes — ithikios's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a reporting channel. Whistleblowing channel: Basic €29/mo for up to 50 employees; Premium €49/mo for up to 500 employees; Business quote-based. Compliance all-in-one Grow from €99/mo; Enterprise quote-based. Spanish SMEs subject to Ley 2/2023 wanting a modular compliance suite (incident, rights, policy, third-party) from one vendor.

Which national whistleblower laws does ithikios explicitly reference?

ithikios explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Spain (Ley 2/2023), ISO 37301 compliance alignment. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

Does ithikios process whistleblower report content with AI?

ithikios does not publicly disclose whether report content is processed by AI or machine-translation services. For a no-AI compliance posture, obtain written confirmation and a subprocessor list before procurement.