Kimobox

What it is

Kimobox is a low-code platform for digitizing processes, portals and quality management in small and mid-sized companies. The company says it is "built in Spain, hosted in the European Union." Its Spanish home page describes a platform where a company models its processes, publishes self-service portals for employees, customers and suppliers, and keeps its quality management system running. What separates it from buying 3 separate tools, the FAQ says, is that everything shares users, permissions and traceability.

The reader it targets is not a developer. The site says it is meant mostly for SMEs in industrial, food and service sectors that have demanding processes and certifications to maintain but no large IT department. It also works for groups with several companies, through a multi-company model. The business process management page is the English entry point, and it makes the case for treating processes as "an asset to be designed, executed, measured and continuously improved."

How you build

The process builder is the heart of the BPM page. You build low-code forms with fields, validations, calculations and attachments, all by dragging, "published in minutes." Approval workflows define who reviews, who approves and what happens if nobody responds within 3 days. Alerts track deadlines, and automatic escalation moves a stalled task to the next owner. Dashboards show indicators calculated from the process data itself, and every run keeps a full history. The company calls this the "full BPM cycle": design, publish, run, measure and improve the same process without leaving the platform.

3 worked examples on the page show the style of process:

• Purchase approval by amount. A form validates the amount against the budget line, requires dual approval above 3,000 euros, and escalates to the next approver if nobody replies within 72 hours. Average approval time appears on the dashboard.
• Onboarding a new supplier. One flow holds the supplier record, the list of mandatory documents and the expiry date of each. If a certificate lapses, the supplier is blocked and Purchasing sees it before issuing an order.
• On-site work report. A technician fills in the report on a phone, attaches photos, the customer signs on screen, and the sealed document reaches the case file and the ERP.

The FAQ fills in the mechanics. The visual designer works with BPMN 2.0 logic (tasks, decisions, events, deadlines) without forcing anyone to draw the whole notation. Each process run keeps its own history, and when you change a process in use, in-progress instances can follow either the version they started with or the new one, as you choose. A published process can be cloned as a template for another department or site. You can describe a process in plain language and AI proposes the flow, the fields and the approvals, which you review and publish. A process that involves outside parties uses an external portal where a supplier, customer or contractor takes part with their own credentials and sees only their part.

The 5 portals on the Spanish home page are processes, ISO standards, an employee portal, a CAE portal for supplier and subcontractor documentation with controlled plant access, and regulatory compliance. In the company's words, each person enters through their own door and sees only theirs, because the data is the same and only the view and permissions change. The employee portal covers clocking in, vacation, expenses and payslips in self-service. The site says the portals arrive assembled rather than blank, preconfigured with the usual processes of an industrial or food SME, and that the company also handles initial data loads from Excel, an API or another system.

Other features named on the site include electronic signature under eIDAS, expense management with AI, certified invoice digitization, blockchain sealing, working-time control under the mandatory register rules, and process automation with AI.

Integration is with the ERP, not instead of it. The pages name SAP, Microsoft Dynamics, Sage 200, Sage X3, Odoo and A3, or in-house developments, connected through an API or an intermediate database. There is a mobile app for iOS and Android, on the App Store and Google Play, covering clocking in, expenses, signature, document lookup and approvals with the same user and permissions as the browser.

The evidence

Pricing is by subscription, according to the active modules and the number of users. The usual start is a half-hour demo on a case like yours, which produces a proposal with scope and price. The site publishes no prices.

On timing, the FAQ says a standard module such as working-time control or the employee portal goes into production in a few weeks, a custom process in 2 or 3 weeks, and that projects that drag on for months are almost always the ones trying to digitize everything at once.

The site's banner sums up its pitch as own servers in Europe, GDPR and support in your language. On hosting, the FAQ says data sits in the company's own data centers inside the European Union, with daily backups whose restore is tested, and encryption in transit and at rest. The company argues this avoids the international transfer analysis that chapter V of the GDPR requires when a provider is outside the European Economic Area. For leaving, the data can be extracted through the API or bulk export in open formats, and the contract sets out what happens to it at the end.

The quality side lists ISO 9001, 14001, 45001, 27001, 13485, 17025, 15189, 20000, 22716, 26000, 37301 and 14064, plus IATF 16949, IFS Food, BRCGS, FSSC 22000, APPCC, GMP+, SQAS, SGE 21, UNE 19602, UNE 73401, the ENS and the GDPR. The shared Annex SL structure lets several standards share the process map, document control, internal audits, nonconformities and indicators. These describe what the software supports for customers' certifications, which is not a claim that Kimobox holds them itself.

Who it suits and who it does not

The FAQ says it is designed mainly for small and mid-sized companies of 20 to 500 people. Kimobox suits a manufacturer, food producer or service company that already has certifications to keep and processes living in spreadsheets, email and paper. A quality manager can start with one department, one process and measurable results, then expand. A company with suppliers and subcontractors gets a portal for them, and a firm with an ERP gets a layer for approvals and procedures that the ERP does not cover.

It is less suited to a founder who wants a public website, a store or a consumer app, since the pages are about internal processes, portals and compliance. The site is also aimed at Spanish SMEs: the main text is in Spanish, with an English BPM page, and the regulatory modules follow Spanish rules such as the BOE and the ENS. Pricing needs a demo.