All projects

in productionathena7.com.br2026evolution & deploy

Athena7 · Whistleblowing Channel

Athena7 is a multi-tenant SaaS platform for Whistleblowing Channels and Corporate Integrity that lets companies receive and investigate reports of harassment, discrimination and misconduct with full anonymity. The reporter files the case with no name, e-mail or IP, gets a single tracking code and follows it through a two-way chat, never revealing who they are.

TypeScriptNode.jsExpresstRPC v11Drizzle ORMMySQL 8React 19ViteTailwindCSSSocket.ioOpenPGPGoogle GeminiResendPDFKitDockerNginx

The problem

Harassment and misconduct almost never become a report. The person who suffers is afraid of retaliation, doesn't trust that the report is really anonymous, and often has no safe channel to even start, so the whole thing dies in silence. On the other side, the company is exposed: since 2022, Brazilian Law 14.457 requires organizations to keep a whistleblowing channel and a harassment-prevention committee.

The hard part is solving both sides at once. The person needs a place where they genuinely can't be identified, with no name, e-mail or IP, and can still follow the case. The company needs a tool that organizes the investigation, respects deadlines and produces documentary evidence that holds up legally.

Pick a channelWomen or IntegrityReportstep-by-step + filesGet the codeanonymous keyAI analyzesframing + severityFollow upanon chat + PDF

How it was built

Anonymous, protected reporting

The reporter files the case with full anonymity, with no name, e-mail or IP, gets a single code and follows everything through a two-way chat, without ever revealing who they are.

per-tenant OpenPGP + AES-256-GCM at rest · enveloped key · no IP trail

Two independent channels

The Women's channel and the Integrity channel run as separate channels within the same platform, each with its own persona and report categories.

Women's channel (Athena) vs Integrity (Atlas, gender-neutral, 10 categories)

Full investigation workflow

Each case runs on a Kanban with investigation, AI classification and formal closure, plus scheduled PDF reports, alerts and SLA control.

SLA alert engine · SHA-256 signed PDF, verifiable at /verificar/:code

Training & AI support

Granular per-role permissions, training with verifiable certificates, gamification, and AI assistants that guide users and suggest the legal framing of each report.

6 Gemini assistants: 5 conversational + 1 post-report analysis (fire-and-forget)

What it changed

The person reports in minutes, without identifying themselves, and walks away with a code to talk to Compliance anonymously and both ways. The company receives each report already organized in a Kanban, with an AI-suggested legal framing, SLA control and a signed audit trail. What used to be a lost form, or nothing at all, becomes a process with a beginning, a middle and proof.

2independent channelsWomen · Integrity
6AI assistantsGoogle Gemini
PT·EN·ESmultilingual reportingavailable 24×7
LGPDLaw 14.457/2022compliance built in

cat specs.txt # for the technical reader

architecture
multi-tenant SaaS · tRPC v11 · React 19 + Vite
database
MySQL 8 · Drizzle ORM · per-tenant isolation
security
OpenPGP + AES-256-GCM · RBAC · 2FA TOTP · LGPD
ai
Google Gemini (gemini-2.5-flash)
infra
private VPS · Docker Compose · Nginx + Let's Encrypt
migration
from AWS (ECS/RDS) to a private VPS

Designed, built and shipped live by Bernardo Iannini

Get in touch