# Bonita — Workflow Management

Bonita by Bonitasoft SAS holds a panel rating of 2/5 from 6 AI judges (category median 2.5/5), as of 2026-10-29. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: Bonitasoft SAS (https://www.bonitasoft.com)
- Category: [Workflow Management](https://whats-best.ai/software/workflow-management.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/workflow-management/bonita
- Alternatives: https://whats-best.ai/software/workflow-management/bonita/alternatives ([markdown](https://whats-best.ai/software/workflow-management/bonita/alternatives.md))
- Data as of: 2026-10-29 · evaluated 2026-10-29 · oldest source captured 2026-10-28

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Bonitasoft SAS
- Headquarters: Not stated on the vendor’s pages as of 28 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 28 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 28 Oct 2026

## The panel's verdict

The bench scores Bonita strongest at process design, clustering at 6-7: the captured clinical use-case page documents BPMN 2.0 modelling with deviation paths, escalation rules and approval chains, plus a rules engine encoding protocol requirements and decision criteria per trial phase. Governance and audit clusters at 4-5 on an execution trail that logs every step, clinical action and deviation with timestamp and full context, generating FDA, EMA and hospital accreditation records in real time. Run reliability sits at a flat 4 — governed error paths and an execution log, with no public information on retries, failure alerting or a status page. The weakest scores are in hosting and portability and sovereignty, both spanning 0-2, and the judges split over thin evidence: for hosting, one credited BPMN 2.0 as a documented notation while the rest found no public information on hosting regions, self-hosting or export; for sovereignty the only fact on record is AI steps naming OpenAI and Mistral, judged differently. Integrations and connectors hold a flat 3, connectors claimed by category only; the pricing page states no prices.

**Speaks for it:**
- BPMN 2.0 modelling with deviation paths, escalation rules and approval chains is documented, alongside a rules engine encoding protocol requirements and decision criteria per trial phase
- Every protocol step, clinical action and deviation is logged with timestamp and full context, with FDA, EMA and hospital accreditation records generated in real time
- Every protocol deviation is logged, escalated and resolved through a governed path
- Lab results, sample tracking and clinical observations feed into the process automatically
- Intelligent document processing extracts and classifies data from clinical forms, lab reports and regulatory submissions before injection into governed workflow steps

**Held against it:**
- Connectors to lab information systems, electronic health records and clinical data platforms are claimed by category, with no connector named by its triggers and actions
- We found no public information on hosting regions, a self-hosted or on-premise edition, the engine's licence, or export of workflow definitions
- We found no public information on roles and permissions, single sign-on, where connection credentials are stored, or separate environments
- We found no public information on automatic retries, failure alerting, runtime or rate limits, or a status page
- No sovereignty attributes are on record, with AI steps naming OpenAI and Mistral and no public information on a data processing agreement or subprocessor list

**Best for:**
- You run clinical trial protocols and need BPMN 2.0 modelling with governed deviation paths and automatic escalation
- You must generate FDA, EMA and ICH compliance records in real time as every step executes
- You need an execution log of every clinical action and deviation that an auditor or works council can inspect
- You want lab results, sample tracking and clinical observations flowing into the process automatically rather than by manual transfer

**Avoid if:**
- You need connectors documented by name into systems such as Microsoft 365, SAP or DATEV, or a public API to start and query workflows
- You must know where workflows and execution logs run, or need a self-hosted edition — we found no public information on hosting or an on-premise option
- Your clinical data may not reach a US model provider without a data processing agreement — AI steps name OpenAI and Mistral, and we found no public information on subprocessors
- You need role-based permissions, single sign-on and separate environments documented before signing — we found no public information on these

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v2). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Process Owner | The Integration Engineer | The Operations Analyst | The Head of IT | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Process design, forms & approvals | 3/5 | 3.5/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Connectors, API & on-premise reach | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| Execution, error handling & monitoring | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Governance, credentials & audit trail | 2/5 | 2/5 | 2/5 | 2/5 | 2.5/5 | 2/5 |
| Hosting options & portability | n/r | n/r | n/r | n/r | n/r | 1/5 |
| European sovereignty | 1/5 | n/r | n/r | 1/5 | 0.5/5 | 1/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **2/5** | **2/5** | **2/5** | **2/5** | **1.5/5** | **1.5/5** |

### The judges

- **The Process Owner** (v1.0): Runs purchase approvals and invoice release for a 400-person Mittelstand company. Wants approvers set by role rather than by name, a substitute when someone is on holiday, deadlines that escalate, and a process change that does not break the forty requests already in flight.
- **The Integration Engineer** (v1.0): Wires the ERP to the shop, the shop to DATEV and the CRM to everything else. Wants connectors documented by action rather than counted in logos, a generic HTTP step for the rest, an on-premise agent that reaches the SQL server without a hole in the firewall, and a failed run replayable from the step that failed.
- **The Operations Analyst** (v1.0): Is asked every Monday why invoices took eleven days. Wants a searchable execution history, cycle times per step, alerts that reach a channel rather than an unread mailbox, runtime and throughput limits published before the month-end run hits them — and to know what a loop over 5,000 rows costs in tasks.
- **The Head of IT** (v1.0): Answers for every automation a department builds without asking. Wants SSO, separate test and production, an inventory of workflows with their owners — and an exit: definitions exportable as BPMN or documented JSON, a self-hosted edition, and an engine licence that will still apply in five years.
- **The Data Protection Officer** (v1.0): Reads every workflow as a chain of transfers. Asks where the execution log keeps its copy of the payload and for how long, which subprocessors and AI model providers a step sends data to, whether payloads can be masked, and what the approval trail records about employees before the works council asks.
- **The Skeptic** (v1.0): Knows that "7,000 integrations" counts connectors nobody maintains, that "unlimited workflows" says nothing about the tasks each run consumes, and that "no-code" ends at the first API without a connector. Reads for what counts as a task, how long failed runs are kept, which model an "AI agent" step sends data to, and whether the workflows can leave the platform at all.

## European sovereignty — proven facts

No sovereignty finding yet.

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Standards: FDA · EMA · ICH [S2]

**Pricing**
- Page: Pricing link present; no prices stated on this page [S2]

**Product**
- AI connectors: OpenAI · Mistral [S2]
- Audit trail: yes · FDA · EMA · hospital accreditation [S2]
- Automated data capture: yes [S2]
- Bms testimonial: Bristol Myers Squibb · 5 [S2]
- Bpmn modeling: BPMN 2.0 process modeling of clinical protocols with deviation paths, escalation rules, approval chains [S2]
- Customer count: 130 [S2]
- Deviation escalation: yes [S2]
- Free start: yes [S2]
- Idp: yes [S2]
- Lab ehr connectors: yes [S2]
- Modules: Ofelia Agentic · Bonita BPM · Developer hub [S2]
- Product list: Ofelia Agentic · Ofelia Assistant · Ofelia Workflow · Bonita BPM · Bonita Fabric · Bonita Work Hub · IT Hub [S2]
- Related use cases: Care management · Compliance automation · Financial Accounting [S2]
- Rules engine: Business rules engine encoding protocol requirements and regulatory thresholds per trial phase [S2]

## Questions

### Is Bonita European?

Not determined: the vendor’s pages as captured do not say where Bonita is based.

### Where does Bonita store data?

Not stated on the vendor’s pages as of 28 Oct 2026.

### Does Bonita have a free plan?

Not stated on the vendor’s pages as of 28 Oct 2026.

### What are the best alternatives to Bonita?

As of 28 Oct 2026, the panel rates [Tray.ai (3/5)](https://whats-best.ai/software/workflow-management/tray-ai), [Frends (3/5)](https://whats-best.ai/software/workflow-management/frends) and [Appian (3/5)](https://whats-best.ai/software/workflow-management/appian) highest among the other 19 Workflow Management products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Frends](https://whats-best.ai/software/workflow-management/frends) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Bonita alternatives](https://whats-best.ai/software/workflow-management/bonita/alternatives).

## What this page leaves out

- 21 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.

## Sources

- [S1] Vendor page: https://www.bonitasoft.com (checked 2026-10-28)
- [S2] Process design, forms & approvals — found from sitemap: https://www.ofelia.com/use-case-bonita-clinical-workflow-automation (checked 2026-10-28)

---

Cite as: whats-best.ai, "Bonita — Workflow Management", AI panel analysis, as of 2026-10-29. https://whats-best.ai/software/workflow-management/bonita

Corrections: https://whats-best.ai/correct/980?target=page