BKMS® System: verifiably the most secure reporting system on the market

Protect your company and your employees with the BKMS® System – an innovative reporting system that makes submitting, receiving, processing, and documenting anonymous reports as easy and secure as possible: Highly secure and fully compliant with European whistleblowing regulations.

Screenshot der BKMS System Website
background shapes

This is what the BKMS® System offers

Are you looking for a particularly secure reporting system that meets the legal requirements of the Whistleblower Protection Act and simultaneously fits the multi-faceted structures of your company or public institution?

The highly secure BKMS® System (short for: Business Keeper Monitoring System) is certified to meet the requirements of European data protection legislation. Furthermore, it verifiably does not allow access to the data in the systems, as regular audits and certifications by independent bodies confirm. The BKMS® System allows your team to process reports quickly and efficiently, manage them centrally, and contact the reporter anonymously.

With the BKMS® System, you can:

  • Protect employees and boost trust in your company
  • Prevent and combat corruption and misconduct within the company and its administrative offices
  • Successfully implement the legal requirements of the Whistleblower Protection Act and the complaints process under the German Supply Chain Due Diligence Act

How authorities and corporations benefit from the BKMS® System

Are you looking for a particularly secure reporting system that meets the legal requirements of the Whistleblower Protection Act and simultaneously fits the multi-faceted structures of your company or public institution?

The highly secure BKMS® System (short for: Business Keeper Monitoring System) is certified to meet the requirements of European data protection legislation. Furthermore, it verifiably does not allow access to the data in the systems, as regular audits and certifications by independent bodies confirm. The BKMS® System allows your team to process reports quickly and efficiently, manage them centrally, and contact the reporter anonymously.

With the BKMS® System, you can:

  • If required, the web-based system can also be supplemented with an ombudsperson or voice-based solution.
  • It also provides the option of mapping more complex corporate structures in the reporting and processing procedures.
  • Above all, sensitive reporting data within authorities or corporate groups is safe guarded in certified and auditable software that meets the highest security and data protection requirements.

Key Features

With the BKMS® System, we focus on security and the protection of reporters without compromise – right from the start.

Numerous companies rely on the BKMS® System

With the BKMS® System, you are using reporting software that meets the highest award-winning standards. More than half of German DAX-listed companies choose us to protect their employees and boost their confidence.

Would you like to learn more about how the BKMS® System can help you? Feel free to contact us!

How does the BKMS® System work?

The BKMS® System is a web-based reporting system. As an application service provider (ASP), we host it in a closed system in a high-security data center in Germany, or in Switzerland for Swiss customers. We therefore offer a highly secure infrastructure instead of a cloud solution

Secured report submission

The BKMS® System consists of an area for the reporting procedure and the report processing section. Clicking on the “Make a report” button on the system’s introduction page takes the reporter to the report submission screen after a security check. The reporter can choose from a list of categories and then describe the incident in the next step.

Efficient report processing

The report processing section of the reporting system features time-saving functions to make it easier for the case manager to process incoming reports efficiently. Using the BKMS® Case Management module, you can also perform flexible statistical evaluations, if desired, and obtain uniform, high-quality documentation of all cases.

Secured dialog function

A secured inbox within the BKMS® System that is only accessible to the reporter enables communication with the case manager – also anonymously, if desired.

Integrated translation function

Integrated translation functions enable efficient language-independent processing of incoming reports.

Data protection, information security & accessibility in the BKMS® System

Data protection and information security are the cornerstones of the BKMS® System. It complies with the highest data protection requirements and is the most secure reporting system on the market. Moreover, we make it a priority to ensure that the BKMS® System is accessible for reporters.

The following certifications confirm the outstanding data protection and information security level. They are emblematic of the particularly high demands we place on the BKMS® System.

TÜV AUSTRIA
TISAX
Penetrationstests
ISO-27001
European Privacy Seal
Allianz für Cybersicherheit

Additional security measures in the BKMS® System

High-security data center

The BKMS® System is operated on self-sufficient servers in a Tier 3+ high-security data center, which offers exceptional physical security. The data center is certified according to ISO 27001:2013. Administration and maintenance of the BKMS® servers is solely the responsibility of our in-house IT experts.

Secure data transmission & data storage

The security-critical data transmission between the reporter or case manager and the BKMS® System is protected by an https connection. Reporting and processing areas are strictly separated on the server; the data processing of the systems operated for customers is separate. The strong encryption in the BKMS® System intensifies this separation, making unlawful intermingling of the data impossible.

Server certificate

The BKMS® server features an extended server validation certificate that clearly and securely verifies its legitimacy. This ensures that all reports and correspondence take place over a clearly indicated TLS connection. TLS secures communication between the browser of the customer or reporter and the BKMS® server by means of standardized cryptographic mechanisms.

Contractual data processing for our customers

Although we do not have access to the reports of our customers, including any file attachments, we are a processor in the sense defined by Art. 28 of the GDPR. We therefore fulfil all technical and organizational measures required of controllers and processors according to Art. 32 GDPR for secure processing. Our data protection and IT security team supports customers in meeting the data protection requirements arising from the contract-based processing.

Logging and cookies

No IP address data, timestamps, or metadata are logged during the use of the BKMS® System by reporters. During use of the BKMS® System, the server is not capable of uniquely identifying the client (the user’s computer). In order to be able to clearly identify the client during a session, the application transmits a session cookie to the user’s computer. This session cookie is only used for the current connection and only has an identification number for the session in progress. This cookie is deleted once the browser is closed. This session number bears no relation to the reporter or the data being submitted and is only necessary for technical reasons.