Can I get a signed DPA / AVV?

Yes. We sign a standard German GDPR DPA (Auftragsverarbeitungsvertrag) on request - reach out from /sales. The text is the standard form most customer DPOs already know, no surprise clauses; we also accept your own paperwork if your legal team prefers their template. Reply time is within a working day. Most teams under 50 seats don't need one (the standard plan terms cover the legal posture); larger setups get a short signed addendum alongside.

How do I export my data?

Account settings → export. Returns a JSON archive containing every record you own, every file you uploaded, and the relevant audit-log entries. No support ticket, no waiting period, no fee. Same export shape works on every plan.

How do I delete my account?

Account settings → delete. Confirms once, then removes records, files, embeddings, and audit-log entries within 30 days. Stripe payment metadata stays as long as German tax law requires it (10 years), in line with §147 AO; everything else is gone.

Who are your subprocessors?

Two: Stripe (payment processing only, transferred under the EU-US Data Privacy Framework) and our transactional mail relay (EU-hosted). Neither sees your records. The full list and what each one is allowed to touch lives at /privacy and /security.

Does KI BMS use Google Analytics or Meta Pixel?

No. No third-party analytics at all. Device + session metrics live in our own Postgres + Redis. The cookie banner that GA / Meta require doesn't apply because we don't load them - one fewer dialog between a visitor and the page they came for.

KI BMS

Pricing

Compare

KI BMS: the GDPR-friendly alternative to Kenjo

Plain-language privacy notice, standard German GDPR DPA available on request, self-serve export + delete.

GDPR alternative

ATS

Comparison

HR suite

Julia YukovichCo-Founder + CEO

·April 19, 2026·

3 min read

GDPR isn't a checkbox - it's a posture. If you're moving off Kenjo because their AVV / DPA is opaque, KI BMS is what a clean alternative looks like: subprocessor list of two (Stripe + mail relay), self-serve export + delete from account settings, and a standard German GDPR DPA on request when your procurement team needs one.

At a glance

Kenjo is a fair pick when you want a lean all-in-one HR suite: personnel files, time tracking, shift planning, documents, reporting - and recruiting as an add-on module. The recruiting module is solid (careers page, many job-board connections, LinkedIn import, application phases, scorecards). For a team primarily digitalising HR admin, Kenjo is hard to beat. KI BMS is right when recruiting is the bottleneck and you want KI pre-sort with per-application reasoning as a default - not as another tab in an HR suite. Both host in the EU. If you need both, it's often cheap to run Kenjo for HR and KI BMS for recruiting side by side.

GDPR posture

GDPR is a posture, not a checkbox

Three things matter under GDPR for a tool like this: (1) lawful basis for processing, (2) data subject rights (export, delete, port), and (3) the auftragsverarbeitungsvertrag / DPA chain. KI BMS treats them as engineering invariants, not legal optics. Lawful basis is the contract you sign with us. Subject rights are self-serve from your account settings - no support ticket required. The subprocessor list has two entries (Stripe + mail relay). A standard German GDPR DPA is available on request from /sales whenever your procurement team needs one - we don't charge for it and don't gate it behind a plan tier. Where Kenjo sits on each of these is the rest of this page.

KI BMS vs Kenjo: GDPR comparison

	Ours KI BMS	Theirs Kenjo
GDPR auto-anonymisation		DPA + EU storage, anonymisation manual
Personnel files + time tracking
Shift planning + absence
Recruiting module	Specialist	Add-on module
Multi-job-board connection
LinkedIn candidate import
KI fit-score with reasoning		Scorecards manual, no KI score
Structured interviews + scorecards
Hosting	In Germany	EU (incl. Frankfurt, Dublin)
Free tier		Trial / demo
Starting price	€0 / €1 / €10 per month	from ~€5.40/person/month + recruiting add-on
Contract model	Monthly cancellation	Monthly or annual (discount)

When to pick which

Pick KI BMS when

Recruiting is your bottleneck - 5+ open roles or 100+ applications per quarter someone has to read.

You want KI pre-sort with per-application reasoning as a default, not just manual scorecards.

You already have an HR suite (Kenjo, Personio, DATEV) and just need a better, deeper ATS alongside.

GDPR retention with auto-anonymisation as a built-in switch matters to you, not as a manual task.

Pick Kenjo when

Your first bottleneck is HR admin - files, time tracking, shift planning, absence, not recruiting.

You want multi-job-board posting and LinkedIn import directly from the HR software.

A single suite for everything is organisationally easier to procure than two specialists.

Your recruiting volume is low (1-4 roles a year) and the module is entirely sufficient.

GDPR questions

What customer data-protection teams typically ask before signing a DPA.

Start with KI BMS

Free plan, no credit card. We host in Germany. Export + delete are self-serve.

Written by

Julia Yukovich

Co-Founder + CEO

Julia is one of the Co-Founders. She handles design, product direction, and most of the support replies that arrive in the morning.

julia.yukovich at aicuflow dot comLinkedIn