Can I get a signed DPA / AVV?

Yes. We sign a standard German GDPR DPA (Auftragsverarbeitungsvertrag) on request - reach out from /sales. The text is the standard form most customer DPOs already know, no surprise clauses; we also accept your own paperwork if your legal team prefers their template. Reply time is within a working day. Most teams under 50 seats don't need one (the standard plan terms cover the legal posture); larger setups get a short signed addendum alongside.

How do I export my data?

Account settings → export. Returns a JSON archive containing every record you own, every file you uploaded, and the relevant audit-log entries. No support ticket, no waiting period, no fee. Same export shape works on every plan.

How do I delete my account?

Account settings → delete. Confirms once, then removes records, files, embeddings, and audit-log entries within 30 days. Stripe payment metadata stays as long as German tax law requires it (10 years), in line with §147 AO; everything else is gone.

Who are your subprocessors?

Two: Stripe (payment processing only, transferred under the EU-US Data Privacy Framework) and our transactional mail relay (EU-hosted). Neither sees your records. The full list and what each one is allowed to touch lives at /privacy and /security.

Does KI BMS use Google Analytics or Meta Pixel?

No. No third-party analytics at all. Device + session metrics live in our own Postgres + Redis. The cookie banner that GA / Meta require doesn't apply because we don't load them - one fewer dialog between a visitor and the page they came for.

KI BMS

Pricing

Compare

KI BMS: the GDPR-friendly alternative to Greenhouse

Plain-language privacy notice, standard German GDPR DPA available on request, self-serve export + delete.

GDPR alternative

ATS

Comparison

Tech recruiting

Julia YukovichCo-Founder + CEO

·March 20, 2026·

2 min read

GDPR isn't a checkbox - it's a posture. If you're moving off Greenhouse because their AVV / DPA is opaque, KI BMS is what a clean alternative looks like: subprocessor list of two (Stripe + mail relay), self-serve export + delete from account settings, and a standard German GDPR DPA on request when your procurement team needs one.

At a glance

Greenhouse is clearly the leader for US tech companies that have a dedicated recruiting team with their own sourcers, coordinators, and a documented hiring process. For a 1-3 person German HR team that doesn't think in English, the tool is often too big, too expensive, and too complex to configure. KI BMS isn't trying to clone Greenhouse for Germany - it's a deliberately leaner tool that serves the 80% recruiting reality where nobody needs 18 approval stages.

GDPR posture

GDPR is a posture, not a checkbox

Three things matter under GDPR for a tool like this: (1) lawful basis for processing, (2) data subject rights (export, delete, port), and (3) the auftragsverarbeitungsvertrag / DPA chain. KI BMS treats them as engineering invariants, not legal optics. Lawful basis is the contract you sign with us. Subject rights are self-serve from your account settings - no support ticket required. The subprocessor list has two entries (Stripe + mail relay). A standard German GDPR DPA is available on request from /sales whenever your procurement team needs one - we don't charge for it and don't gate it behind a plan tier. Where Greenhouse sits on each of these is the rest of this page.

KI BMS vs Greenhouse: GDPR comparison

	Ours KI BMS	Theirs Greenhouse
DACH languages + GDPR		GDPR yes, UI EN-centric
Pipeline depth (approvals, stage gates)	Mid	Very high
Sourcing tools	Talent pool
Structured interviews + scorecards
KI fit-score built in		Third-party plugin
Branded careers page
Setup time	Hours	Weeks with implementation partner
Price	€0 / €1 / €10 per month	5-figure per year (quote-only)
Minimum term	None	1+ year
Hosting region	Germany	US primary, EU region available

When to pick which

Pick KI BMS when

You're 1-30 staff and recruiting is part of one HR person's job, not the whole job.

The workflow is reasonable: New -> Review -> Screening -> Interview -> Offer. Not 18 stages with approvals.

GDPR is required, German wording subtleties (Du form, salutation) shouldn't feel translated.

You want KI pre-sorting as a default, not as a paid third-party plugin.

Pick Greenhouse when

You have a recruiting team with dedicated coordinators, sourcers, and a documented process per role.

100+ roles a year, multi-country, multi-currency - Greenhouse's depth is then justified.

English is your working language and procurement accepts 5-figure annual contracts.

GDPR questions

What customer data-protection teams typically ask before signing a DPA.

Start with KI BMS

Free plan, no credit card. We host in Germany. Export + delete are self-serve.

Written by

Julia Yukovich

Co-Founder + CEO

Julia is one of the Co-Founders. She handles design, product direction, and most of the support replies that arrive in the morning.

julia.yukovich at aicuflow dot comLinkedIn