It is easy to understand why GESINF is able to meet the real needs of its clients when considering the dual role the company has developed over the years: on one hand, it provides highly specialized consulting and operational support in the areas of accounting, taxation, and social security; on the other, it designs and develops technologically advanced software platforms and delivers the related services. The combination of these two roles has given rise to an organization with virtually unique characteristics in its field, fully aware of both the specific and broader needs of its clients, as well as the constraints and day-to-day challenges they face.

Each of the company’s areas of expertise is managed by a dedicated functional department staffed with highly qualified professionals in both information technology and administrative-accounting disciplines, supported by experienced specialists with extensive professional expertise.

For the design and development of software platforms, GESINF relies on a highly skilled team of expert designers and systems analysts who have long been engaged in the study and implementation of software specifically tailored to accounting and administrative management for public entities. The team of analysts works in close collaboration with a group of specialists in accounting and fiscal matters, thereby combining extensive technical expertise in advanced platforms with equally strong experience in the administrative field. It is from this synergy that, in 2000, the Integrated Unified Accounting System project was launched, which later materialized in the release of the TEAM Government platform—one of the few solutions on the market capable of enabling the “real” evolution of Public Administration toward corporate management principles.

“In the Public Administration sector, we increasingly witness the proliferation of highly complex and large-scale projects, where the principle of change management often conceals the significant gap between solutions and the reality of the organizations to which they are proposed. At GESINF, we believe that there is substantial room for the evolution of systems within the administrative sector of Public Administration, but that this must be assessed in terms of resources against the actual capabilities of the recipient organization, ensuring sufficient continuity with previous management practices. Only by providing solutions capable of rapidly integrating into the existing context is it possible to effectively address the evolutionary process that many public administrations urgently require.”

Since April 2022, Gesinf has been owned by Total Specific Solutions, an international group headquartered in the Netherlands, which includes more than 109 European companies. Its mission is focused on the acquisition and development of businesses operating in the vertical software sector.

The GESINF quality management system is certified according to UNI EN ISO 9001:2015 for the design, development, maintenance, and support of software.

The GESINF data protection system is certified according to UNI CEI EN ISO/IEC 27001:2024, for the following activities having as object. Design, development, support, maintenance and delivery of SaaS and Cloud Computing software services within the application guidance for relevant controls specified in ISO/IEC 27017:2015 and ISO/IEC 27018:2019

The Data Protection Officer (DPO), appointed pursuant to Article 37 of EU Regulation 2016/679, is Dr. Fabio Nicoletti.

Gesinf Srl’s Information and Data Security Management System (ISMS) defines a set of organizational, technical, and procedural measures designed to ensure compliance with the following fundamental security requirements:

Confidentiality
Integrity
Availability

The policy defines the information security principles that guide:

The behavior of the individuals to whom it applies within the ISMS;
The implementation of processes, procedures, instructions, practices, and other controls within the ISMS.

The ISMS applies to all company activities. The achievement of security objectives is governed through a risk-based approach, which includes the application of a risk management process that takes into account the organization’s context, the scope of the ISMS, and the organization’s objectives.

The following fundamental principles define and support the establishment and implementation of the ISMS to ensure information security.

Gesinf formally declares its support and commitment to achieving compliance with applicable legislation regarding PII and to agreeing with its clients (cloud service customers) clear and defined contractual terms as a cloud processor.

All essential information (e.g., technical and commercial documents, source code, configuration information, service-related emails, customer data, customer-provided information, etc.) is protected.

All information requiring protection is managed according to its assigned classification level, in compliance with relevant procedures throughout its entire lifecycle.

Information security is a key factor in Gesinf’s success and in achieving business objectives. The implementation of a system compliant with ISO 27001 and the adoption of controls in accordance with ISO 27002, ISO 27017, and ISO 27018 provide tangible, visible, and externally verifiable evidence of the company’s commitment to information security, continuous improvement of security levels, and business continuity.

Software development follows secure development principles, also ensured through the planning and execution of periodic security reviews.

All individuals who, in any capacity, come into contact with protected information play a direct role in ensuring its protection. It is therefore their explicit responsibility to comply with the principles set out in this policy and in all related applicable security policies, and to ensure their enforcement.

Information security is designed and implemented as an integral part of business processes and behaviors, ensuring the maintenance of declared service levels.

The organization adopts a structured process for managing information security incidents aimed at containing their impact, identifying their causes, and facilitating their resolution. All individuals within the scope of the ISMS are required to report any abnormal or suspicious circumstances related to information.

Information security objectives are defined in relation to, and in support of, strategic and business objectives, in compliance with contractual commitments and applicable regulations. The achievement of these security objectives is planned, implemented, monitored, and controlled. Security objectives, and the degree of their achievement, are reviewed at least once a year. Security objectives and the plans for achieving them are formalized through specific improvement plans.

Gesinf adopts an organizational and management model aimed at ensuring conditions of fairness and transparency in the conduct of business and corporate activities, in line with the provisions of Legislative Decree No. 231/2001. The adoption of this model, which involves the appointment of a Supervisory Body (“Organismo di Vigilanza”) tasked with independently overseeing the proper functioning of the Model and the implementation of the Code of Ethics, is intended to protect the company’s position and image and to prevent unlawful conduct by those acting on its behalf, where such conduct is in conflict with the ethical principles underlying the organizational model.

The Code of Ethics, as a charter of rights and duties, defines the ethical and social responsibility of all those who participate in the company’s life in any capacity, and is an integral and substantial part of the management model. Gesinf believes that the adoption of the Model also represents an important opportunity to review and integrate the company’s decision-making and implementation processes, as well as the related control systems, thereby strengthening the image of fairness and transparency that has always guided the company’s activities.

The directors, staff, collaborators, and control bodies are required to comply with these ethical values and to report directly to the Supervisory Body any conduct that does not comply with the provisions of the Model and the Code of Ethics.

The Code of Ethics can be accessed by clicking here.

Whistleblowing

Reports of violations of the 231 Model may be submitted, by registered mail or by telephone, to the Supervisory Body. For instructions on how to proceed, please send an e-mail to the following address: This email address is being protected from spambots. You need JavaScript enabled to view it., with the subject line “Report: request for contact”.

WARNING: the e-mail must NOT contain any information regarding the report, but ONLY the sender’s contact details (e-mail address, postal address and/or telephone number) in order to be contacted.

In the cases listed below, it is possible to use the external channel of the National Anti-Corruption Authority (ANAC):

• the reporting person has already made an internal report and it has not been followed up;
• the reporting person has reasonable grounds to believe that, if they made an internal report, it would not be effectively followed up or that the report itself could lead to a risk of retaliation;
• the reporting person has reasonable grounds to believe that the violation may pose an imminent or obvious danger to the public interest

The ANAC channel can be accessed at the following address:

Whistleblowing - Reporting form for unlawful conduct pursuant to Legislative Decree No. 24/2023 (anticorruzione.it)

For more information on the possibility and limitations of reporting through the ANAC channel, please consult the following address: Whistleblowing - www.anticorruzione.it.

The company’s history, mission, and references: click to download the brochure.