Corporate integrity: whistleblowing channel, criminal-risk prevention and AI governance
The three obligations behind most cases opened in 2026: the whistleblowing channel under art. 5 of Ley 2/2023, the criminal-risk prevention model under art. 31 bis of the Spanish Criminal Code, and the AI system inventory under Regulation (EU) 2024/1689.
The line covering the obligations that open the most cases in 2026: the whistleblowing channel required by Ley 2/2023 (with the AIPI already supervising), the criminal-risk prevention model that does — or doesn't — shield the director, and the AI governance the AESIA has been enforcing since August. Three programs on one single file.
The badges identify the rule each program helps you meet. They are not certifications or conformity accreditations.
6 programmes on the same core
They all share the same core: a single file, time-stamped evidence, watched deadlines, dashboards, and multi-entity, multi-country operation. View the 21 programas →
A report comes in at 09:12. Here's what happens next.
No step depends on somebody remembering: the system counts the statutory deadlines and every action is sealed.
- 01 The reporter files without giving a name They come in through the web channel, choose real anonymity and leave with a tracking code. No IP logging, no metadata.
- 02 The case lands in the inbox with its clock already running Acknowledgement within 7 days and resolution within 3 months, counted by the system and sorted by how close the deadline is.
- 03 The case handler works the file Facts, witnesses, the person named, classification and applicable rule. A conflict of interest locks out the line manager.
- 04 Every action is sealed User, date and time in a tamper-proof log, with the statutory deadlines met alongside. This is what you show the authority.
- 05 The compliance body sees the whole picture Open cases, deadlines at risk, the most reported conduct and the measures taken — the annual report, already written.
Per company, with unlimited users. Every new program rests on the core already in place: switching it on takes days, not months.
Training and Awareness
Professional services