# BKMS System — Whistleblowing Portals

BKMS System by Business Keeper AG holds a panel rating of 1.5/5 from 6 AI judges (category median 2/5), as of 2026-10-15. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: Business Keeper AG (https://www.business-keeper.com)
- Category: [Whistleblowing Portals](https://whats-best.ai/software/whistleblowing.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/whistleblowing/bkms-system
- Alternatives: https://whats-best.ai/software/whistleblowing/bkms-system/alternatives ([markdown](https://whats-best.ai/software/whistleblowing/bkms-system/alternatives.md))
- Data as of: 2026-10-21 · evaluated 2026-10-15 · oldest source captured 2026-10-13

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Business Keeper AG
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Default not stated; pages mention Europe [S1]
- Free plan: Not stated on the vendor’s pages as of 13 Oct 2026

## The panel's verdict

Business Keeper AG's BKMS System is a whistleblowing portal whose Whistleblowing module sits in a Compliance Cockpit alongside Third Parties, Approvals, Policies and Insights. Persona-weighted verdicts land between 2.9 and 3.3. Scoring peaks on case management and sovereignty, both a flat 4: self-configurable multi-stage investigation workflows, an audit trail built as events happen, and European server hosting stated as the platform default — with no public information on a data processing agreement, subprocessors or named data centers. Compliance alignment and multi-entity scale score weakest at 2–3, and reporting channels hold at 3, because anonymous reporting is the only intake claim in evidence, with no public information on voice or phone routes, language coverage, accessibility, or secured follow-up for anonymous reporters. Two spreads persist: security assurance runs 2–4, one scorer reading the single end-to-end-encryption line as assurance and another as assertion, and compliance alignment runs 2–3, between judges crediting GDPR, CSRD and AI Act logic in workflows and those noting the EU whistleblowing directive is never named. No prices appear on the public pages.

**Speaks for it:**
- Case management scores a flat 4 on automated routing, self-configurable multi-stage workflows, and an audit trail built as events happen.
- Sovereignty scores a flat 4: European server hosting is stated as the platform default and sold for data sovereignty.
- The Compliance Cockpit carries Whistleblowing, Third Parties, Approvals, Policies and Insights in a single system with unified dashboards.
- The vendor lists 14,000+ customers, 80+ operating countries, 24/7 technical support and a dedicated customer success manager.
- AI triages every case before anyone opens it, with humans in control of every decision.

**Held against it:**
- Compliance alignment spans 2–3: the captured pages never name EU Directive 2019/1937 or national transpositions such as the German HinSchG.
- Reporting channels hold at 3; anonymous reporting is the only intake claim, with no public information on voice or phone intake, language coverage, or secured follow-up for anonymous reporters.
- Security assurance spans 2–4 on a single end-to-end-encryption line, with no public information on certifications, penetration tests, or metadata and IP logging.
- We found no public information on statutory deadline clocks such as the seven-day acknowledgment and three-month feedback, role separation between handlers, or per-case retention and deletion.
- Multi-entity scale spans 2–3, with no public information on per-entity channels, separated case access per subsidiary, delegated administration, or ombudsman roles.

**Best for:**
- You want case handling at the core: automated routing, multi-stage workflows, and an audit trail built as events happen.
- You want European server hosting stated as the platform default for the most sensitive reports your company receives.
- You want one system carrying several compliance mandates — whistleblowing, third parties, approvals, policies — with consolidated Insights dashboards.
- You want a vendor operating at cross-border scale, with 14,000+ customers, 80+ operating countries and 24/7 technical support.

**Avoid if:**
- You need reporter-facing intake beyond an anonymous portal claim — documented voice or phone routes, languages, and accessibility — for the people you are asking to come forward.
- You must see the EU whistleblowing directive and national transpositions named in vendor documentation; the captured pages lean on GDPR, CSRD and AI Act logic instead.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The Compliance Officer | The Reporter's Advocate | The SME Operator | The Group Counsel | The Security Auditor | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Reporting channels & reporter experience | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| Case management & deadline discipline | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Legal compliance alignment | 1/5 | 1.5/5 | 1.5/5 | 1/5 | 1/5 | 1/5 |
| Security & anonymity assurance | 2/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1/5 |
| Group & multi-entity capability | 1/5 | 1/5 | 1/5 | 1.5/5 | 1/5 | 1/5 |
| European sovereignty | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **1.5/5** | **1.5/5** | **1.5/5** | **1.5/5** | **1.5/5** | **1.5/5** |

### The judges

- **The Compliance Officer** (v1.0): Runs the internal reporting office of a 600-employee company and answers for every missed statutory clock. Optimizes for case discipline: automated acknowledgment and feedback deadlines, role separation, documentation that survives a regulator. Rejects inbox-with-a-form products that make the deadlines her problem.
- **The Reporter's Advocate** (v1.0): Judges from the frightened side of the form. Optimizes for anonymity that survives contact, a two-way dialog without an account, languages the workforce actually speaks, and channels that work on a night-shift phone. Rejects login walls, app installs and anything that makes reporting feel like a deposition.
- **The SME Operator** (v1.2): Runs a 60-employee company that the law obligated, not convinced. Optimizes for compliance set up in an afternoon at a price the year-end review will not question, with the legal duties handled by the product. Rejects per-report fees, setup charges and anything that needs a compliance department to operate.
- **The Group Counsel** (v1.0): Rolls one system out to 25 subsidiaries in a dozen countries. Optimizes for per-entity channels with real access separation, per-country legal rule sets, external ombudsman roles and group reporting that respects entity boundaries. Rejects one-channel products multiplied by twenty-five contracts.
- **The Security Auditor** (v1.0): Pentests the anonymity promise for a living. Optimizes for evidenced security: current certificates with visible scope, published pentests, documented end-to-end encryption, metadata minimization, and hosting outside hostile jurisdictional reach. Rejects adjective security and "military-grade" anything.
- **The Skeptic** (v1.2): Assumes "audit-proof" and "100% anonymous" are marketing until the evidence says otherwise. Hunts certification claims without certificates, anonymity claims next to analytics scripts, per-report pricing traps and legal-update promises with no named lawyer. Exists to keep the rest of the bench honest.

## European sovereignty — proven facts

No sovereignty finding yet.

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- GDPR: yes [S1]
- SOC 2: yes [S1]

**Hosting**
- Region: European server hosting [S1]

**Integrations**
- Modular start: modular purchase: start with one module, scale later [S1]

**Legal**
- Company since: EQS Group · 2000 [S1]
- Entity name: EQS Group GmbH [S1]

**Product**
- AI features: AI-powered case management, automated disclosure routing, interactive data maps [S1]
- Approvals module: centralized declarations: conflicts of interest, outside roles, gifts, hospitality [S1]
- Benchmark: 6 · 120 [S1]
- Cockpits: Compliance Cockpit modules: Whistleblowing, Third Parties, Approvals, Policies, Insights [S1]
- Company scale: 14000 · 600 · 14 · 80 [S1]
- Csrd features: Double Materiality, non-financial data collection, CSRD/ESRS audit-ready reports [S1]
- Customer count: 14000 [S1]
- Insights module: unified compliance dashboards and data extraction [S1]
- Ir cockpit: IR Cockpit: Insider Manager, Disclosure, Newswire, CRM & Mailing [S1]
- Ir features: certified regulatory news (Ad-hoc/MAR), virtual events, mandatory reporting, investor materials [S1]
- Jurisdictions: European-hosted · EU · UK · US · APAC [S1]
- Policy management: policy distribution with legal attestation of receipt, targeted campaigns, reminders, reporting [S1]
- Privacy cockpit: Privacy Cockpit: GDPR Compliance, AI Governance, Risk Management [S1]
- Privacy features: RoPA, DPIA, DSR management, AI system documentation [S1]
- Q AI compliance: AI across compliance program: case triage, connecting parties, audit trail building, humans in control [S1]
- Regulation updates: system updates before EU directives take effect [S1]
- Regulatory logic: CSRD, GDPR, AI Act logic built into workflows [S1]
- Sustainability cockpit: Sustainability Cockpit: CSRD Reporting, CO2 Footprint, Double Materiality, Taxonomy [S1]
- Third party risk: TPRM: risk profiles, dynamic due diligence, status tracking, vendor code-of-conduct attestation [S1]
- Whistleblowing features: anonymous reporting, automated routing, multi-stage workflows, end-to-end encryption [S1]

**Support**
- Customer success manager: yes [S1]
- Hours: 24/7 [S1]
- Regulatory guidance: yes [S1]

## Questions

### Is BKMS System European?

Not determined: the vendor’s pages as captured do not say where BKMS System is based.

### Where does BKMS System store data?

The default storage location for customer data is not stated on the vendor’s pages as of 13 Oct 2026. The vendor’s pages mention Europe as hosting location, per [the vendor’s page captured 13 Oct 2026](https://whats-best.ai/evidence/8337).

### Does BKMS System have a free plan?

Not stated on the vendor’s pages as of 13 Oct 2026.

### What are the best alternatives to BKMS System?

As of 21 Oct 2026, the panel rates [preeco | hinweisgeberschutz (3.5/5)](https://whats-best.ai/software/whistleblowing/preeco-hinweisgeber), [EQS Integrity Line (3.5/5)](https://whats-best.ai/software/whistleblowing/eqs-integrity-line) and [Safecall (3.5/5)](https://whats-best.ai/software/whistleblowing/safecall) highest among the other 36 Whistleblowing Portals products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [preeco | hinweisgeberschutz](https://whats-best.ai/software/whistleblowing/preeco-hinweisgeber) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [BKMS System alternatives](https://whats-best.ai/software/whistleblowing/bkms-system/alternatives).

## What this page leaves out

- We found no public information on pricing on the pages we read (business-keeper.com). If the vendor publishes it somewhere else, send us the page.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor page: https://www.business-keeper.com (checked 2026-10-13)

---

Cite as: whats-best.ai, "BKMS System — Whistleblowing Portals", AI panel analysis, as of 2026-10-21. https://whats-best.ai/software/whistleblowing/bkms-system

Corrections: https://whats-best.ai/correct/840?target=page