# ithikios

> ithikios — from under €50 a month, EU-hosted. Independent profile: vendor-published facts, each with its source and the date it was checked.

Canonical: https://whistleblowertools.eu/tools/ithikios/
Last updated: 2026-10-23

## Notable

- Whistleblowing is one module of a broader modular compliance suite: Incident Manager (DORA, GDPR, NIS2), Rights Manager (consent), Policy Manager, Third Party Manager, Trust Center.
- Interface languages: Spanish, English, French, German, Italian, Portuguese, Catalan.
- Security page states SSL 256, ISO 27001 certification since December 2021, hosting on servers in Germany, WAF protection, and optional two-factor authentication.
- Anonymous and confidential reporting modes; teams/roles defined per risk category; case management with consolidated documentation.
- Cloud SaaS deployment — no customer infrastructure required.
- Configurable without programming: colours, logo, messages, custom fields, multi-company, multiple integrated channels.
- Target customers include lawyers, consultants, and advisors through an affiliate partner program.
- Set-up and compliance achievable in hours (vendor-stated).
- Trust Center publishes a browser-verified subprocessor list: Cloudflare, DigitalOcean, and Pipedrive. Some Trust Center documents require corporate-email registration, and `curl` access to `ithikios.com` / `trust.ithikios.com` returned 403 during this pass.
- AI use in the whistleblowing channel is left undisclosed: public suite-level copy mentions AI, but the reviewed whistleblowing, pricing, security, privacy, terms, and Trust Center pages did not document AI for the channel.
- No public API documentation was found on the public pages reviewed.

## Facts

- website: https://ithikios.com

- headquarters: Spain

- hosting: Germany (vendor security page)

- pricing: Whistleblowing channel: Basic €29/mo for up to 50 employees; Premium €49/mo for up to 500 employees; Business quote-based. Compliance all-in-one Grow from €99/mo; Enterprise quote-based.

- pricing note: Prices exclude VAT and may vary by company size. Free-start CTA is public; privacy policy describes a 15-day free trial account.

- languages: 7

- domain registered: 2020-02-08

- ownership: Digital Products Development SL

- customers: 1,000+ companies across 10 countries (vendor claim)

- product scope: suite_module

- suite name: iThikios modular compliance suite

- ideal for: Spanish SMEs subject to Ley 2/2023 wanting a modular compliance suite (incident, rights, policy, third-party) from one vendor.

- last verified: 2026-10-23

| Capability | Published evidence |
| --- | --- |
| anonymous reporting | Yes |
| case management | Yes |
| multi channel | Yes |
| api access | Not published |
| free trial | Yes |
| two factor auth | Not published |
| audit log | Not published |
| uses ai | Not published |

## certifications

- ISO 27001

## national laws supported

- Spain (Ley 2/2023)

- ISO 37301 compliance alignment

## strengths

- Basic plan from €29/month with free-start CTA

- Security page states ISO 27001 certification, German hosting, SSL 256, WAF, and optional 2FA

- Modular suite — Incident Manager (DORA/GDPR/NIS2), Rights, Policy, Third Party, Trust Center

## Assessment

Base score: 29/50. Access tier: P. Reviewed: 2026-05-24.

Public pages and Trust Center surface only. No trial or handler account was reviewed.

### Is ithikios suitable for SMEs under 250 employees?

Yes — ithikios's entry-tier pricing is published under €50/month, inside the range most 50–249-employee organisations budget for a whistleblowing channel. Whistleblowing channel: Basic €29/mo for up to 50 employees; Premium €49/mo for up to 500 employees; Business quote-based. Compliance all-in-one Grow from €99/mo; Enterprise quote-based. Spanish SMEs subject to Ley 2/2023 wanting a modular compliance suite (incident, rights, policy, third-party) from one vendor.

### Which national whistleblower laws does ithikios explicitly reference?

ithikios explicitly cites the following national transpositions of Directive 2019/1937 in its public materials: Spain (Ley 2/2023), ISO 37301 compliance alignment. Absence from this list does not mean the platform can't be used in other EU jurisdictions — all 27 member states have transposed the Directive. Verify jurisdictional fit with the vendor directly.

### Does ithikios process whistleblower report content with AI?

ithikios does not publicly disclose whether report content is processed by AI or machine-translation services. For a no-AI compliance posture, obtain written confirmation and a subprocessor list before procurement.

## Sources

- https://ithikios.com/

- https://ithikios.com/precios/

- https://ithikios.com/seguridad-de-ithikios/

- https://trust.ithikios.com/home

- https://ithikios.com/politica-privacidad/

- https://ithikios.com/condiciones-generales/