Process optimization with expert reviewAsks like a senior consultant. Process results reviewed and quality-assured by our experts.
ProzessInterview captures your processes in days instead of weeks: the AI interviews your employees in short chats and turns their answers into work instructions, knowledge documentation, graphical process documentation (BPMN models, ARIS models and more) and a check against your policies and official audit catalogues. The foundation for ISMS, internal controls, compliance, quality, business continuity and data protection – every result then reviewed and quality-assured by our experts.
ProzessInterview is the discovery phase in front of GRC, modelling and audit. Your GRC or modelling tool stays – we fill it with the process knowledge that has been missing. No GRC tool yet? Then our CONSUVATION GRC platform takes over.
You capture, we assess.
Your employees provide their knowledge directly and verbatim. Our experts assess independently. That keeps the project lean, traceable and in your hands.
Fixed scope
You pay for assessment and evidence, not for discovery effort – no open-ended consulting days, no creeping scope extensions.
Transparent, at your pace
Services and prices are clear up front. You decide when your employees answer – we assess independently.
Nothing gets lost
Knowledge comes straight from the people who live the process. No minutes, no translation between client and consultant, no misunderstanding.
Faster to an audit-ready process
Speak or type
Answers by keyboard or voice input. The recognised text is reviewed before sending; the audio is not stored.
Use existing documents
Work instructions and policies feed in. The AI asks where practice deviates from paper.
Days, not weeks
Employees answer in parallel, whenever it suits them – no chains of meetings. Models and assessment follow right after.
Consistent and neutral
The same structured questions for everyone involved – independent of moderator and mood.
Real practice made visible
Targeted questions on exceptions, workarounds and deviations from the manual.
Improvement potential
Media breaks, manual steps and bottlenecks are identified.
Audit-proof evidence
Every risk and every control references the verbatim interview answer.
Several standards at once
Assessment modules ask targeted follow-up questions and map to official catalogues.
No recording
No screen or behaviour recording – we capture processes, not performance data.
Reusable
Export to BPMN, Excel, CSV and HTML – including your GRC or modelling tool.
Rework processes, cut costs – on solid ground
Many companies are currently reviewing their processes to reduce costs and become more efficient. But you can only optimize what you know. ProzessInterview delivers the as-is picture quickly and without a large consulting project.
- As-is capture in days as the basis for optimization, reorganization and shared services
- Duplicate work, media breaks and manual steps become visible – that is where the savings are
- Documented processes as the prerequisite for automation and the use of AI
- Capture once, use twice: the same discovery serves optimization and compliance
Every management system starts with its processes
Information security, compliance, quality, business continuity or data protection: every standard requires documented, owned and monitored processes. ProzessInterview captures them once – and reuses them across several management systems.
Information security
Processes, protection needs, risks and controls for ISMS and industry assessments.
Quality management
Process map, responsibilities, interfaces and key figures.
Business continuity
Critical processes, dependencies and recovery times as the basis of the business impact analysis.
Data protection
Derive processing activities from your processes – including the record of processing under Art. 30.
Compliance management
Assign compliance obligations to processes and evidence who performs which control, and when.
Internal controls and audit
Risk-control matrix with evidence for auditors, internal audit and SOX control testing – and the process foundation for SOC 1 and SOC 2 reports.
Tax and fiscal authorities
Procedural documentation for accounting, document flow and archiving, as German tax auditors expect it.
Financial supervision
ICT risk management and process documentation for banks and insurers.
Environment, energy, health and safety
The same process foundation for your integrated management system.
AI management
Capture the processes around developing, purchasing and operating AI systems.
Assessment modules mapped to official catalogues: ISO/IEC 27001, TISAX® (VDA ISA), CADIS®, KRITIS/NIS2, GDPR, internal controls (IDW PS 982), IDW PS 340, MaRisk and DORA. For other standards ProzessInterview provides the process foundation; further modules on request.
Secure expert knowledge before it walks out the door
Severance programmes, retirement, job changes: in workforce reductions it is often the most experienced who leave – and their knowledge of exceptions, shortcuts and contacts goes with them. There is little time before their last working day. ProzessInterview captures it in a structured interview and turns it into traceable process descriptions.
- Processes, exceptions and responsibilities in the words of the knowledge holders
- Results as models and documentation for onboarding and your knowledge base
- Evidence for “organizational knowledge” under ISO 9001, clause 7.1.6
Made for regulated industries
Banks and financial services
DORA, MaRisk, ICT third-party risk
Insurance
DORA, MaGo, data protection in claims and contracts
Pharma and medical devices
GMP, EU GMP Annex 11, MDR, ISO 13485
Healthcare and hospitals
NIS2, KRITIS, sector-specific security standard (B3S), GDPR
Automotive and suppliers
TISAX® with VDA ISA, IATF 16949
Defence
CADIS® under the DEKRA audit catalogue
Energy and utilities
NIS2, KRITIS, IT security catalogue under the German Energy Act (EnWG)
Public administration
BSI IT-Grundschutz, NIS2
IT, cloud and managed service providers
ISO/IEC 27001, NIS2, BSI C5
Industry and mechanical engineering
NIS2, Cyber Resilience Act, ISO 9001
Listed companies and US subsidiaries
Sarbanes-Oxley Act (SOX), internal control over financial reporting
Service providers with customer audits
SOC 1 and SOC 2, ISAE 3402, ISO/IEC 27001
Capture, map, approve, hand over
Capture
AI interviews with your business units instead of workshops – typed or by voice input. Existing documents feed in as context; known facts are only confirmed.
Map
Results mapped to the audit catalogues – with maturity level and evidence. An expert with the necessary know-how and many years of audit experience then reviews them.
Approve
The responsible manager in your organization reviews the process description and approves it – with a documented trail.
Hand over
Risks, controls and records straight into the CONSUVATION GRC platform or into your existing GRC, ISMS or data protection tool; models to SAP Signavio, ADONIS or ARIS; evidence to auditors.
From a single source: the CONSUVATION GRC platform
Results go straight into our GRC platform for ISO 27001, NIS2, TISAX®, BCM, CADIS®, AI and compliance – with a shared control model, maturity per framework and support from our experts from project to ongoing operation.
We are happy to show you the application live in a demo session. Request a demo →
Built by information security auditors
Process knowledge is confidential. That is why ProzessInterview meets the same standards we apply in our audits.
- Operated in a data centre in Germany
- AI processing in EU regions, no training on your data
- Tenant separation enforced in the database
- Sign-in with two-factor authentication
- Data processing agreement under Art. 28 GDPR
- No recording of screens or behaviour; voice recordings are not stored
Start the way that suits you
Pilot
One process, up to five interviews, results presentation – measurable within weeks.
Project
Several processes for a specific initiative, for example certification, business continuity or year-end closing.
Annual licence
Standard or Professional – unlimited processes, all exports, selectable assessment modules. Also for consulting and audit partners.
The annual package: audit-ready, year after year
Annual licence, coverage evidence, catalogue update service and regulatory monitoring in one package, optionally together with the CONSUVATION GRC platform – with a multi-year term and pricing per framework. Predictable for you and current before every audit.
Additional services
Captured processes become lasting evidence: we show that your processes cover every requirement – and keep it up to date when catalogues, standards and laws change.
Coverage evidence
From your approved processes we map every requirement of the selected frameworks. You and your auditor see at a glance which requirement is met by which process – and where the gaps are.
- Coverage matrix across all selected standards and catalogues
- Gap list with proposed measures
- Process map with references to the standards, pre-filled Statement of Applicability (SoA)
- Every mapping confirmed by our experts
Catalogue update service
We compare new versions of audit catalogues and standards with your coverage matrix – for example when a new version of the VDA ISA for TISAX®, the CADIS® catalogue or an ISO standard is released.
- What is new, what is removed, what has changed
- Which of your processes need to be adapted
- Updated coverage matrix for your next audit
Regulatory monitoring
Our regulatory monitoring keeps your legal register for data protection and information security up to date – quarterly, for the EU and your sites, with assessment and action items.
- Regular report on new and changed requirements
- Assessment of relevance for your organization
- Direct link to your captured processes
Onboarding via e-learning
Interviewees, process owners and the project team learn how to use ProzessInterview on our e-learning portal – at their own pace and without classroom training.
- Short learning units per role
- Can be used alongside the project
- Participation documented – also as training evidence
Prices and licence terms on request.
Experts with the dual competence of auditors
We know what auditors, IT auditors and financial auditors check. CONSUVATION GmbH is a management consultancy for information security, data protection and compliance. Our team also includes IT auditors. Together we bring more than 25 years of experience, hold CISA, CISM, CRISC and CGEIT certifications and contribute to the standards committees for ISO/IEC 27001 and 27701. This expertise is built into every interview and every assessment module of ProzessInterview.
Go deeper on our specialist sites
We run dedicated sites on the key regulations, with background, obligations and checklists. Most of them are in German.
Frequently asked questions
Can employees dictate their answers?
Yes. Answers can be dictated by voice input, up to two minutes at a time. The recognised text appears in the answer field and is reviewed before sending. Conversion takes place in the EU; the audio is not stored. Voice input can be switched off per organization.
Can we use existing process descriptions and policies?
Yes. Up to ten documents can be added to each interview (PDF, Word, Excel, PowerPoint, text). The AI only briefly confirms what is already known, asks specifically about deviations in practice and shows in the evaluation where actual practice differs from the documented target. Only the extracted text is stored.
How much effort does ProzessInterview save?
That depends on the organization, the process and its starting point – which is why we do not quote blanket savings figures. In the pilot we measure effort and results on your own process, so you can decide on a solid basis.
How do we prove that our processes cover all requirements?
With coverage evidence: we map your approved processes to every requirement of the selected frameworks and show in a coverage matrix what is met and where the gaps are. The catalogue update service keeps the matrix current when new catalogue versions are released.
What is ProzessInterview?
A web platform in which an AI interviews employees via chat about their workflows. The output is process models (BPMN 2.0, eEPC/ARIS), process documentation, risk assessment and audit evidence.
Who is it for?
For everyone who has to evidence processes for a management system, a certification, regulators, tax authorities or auditors – such as CISOs, compliance, quality and data protection officers, internal control owners, internal audit and finance – as well as for consultants and auditors.
Does the AI replace the consultant?
No. The AI handles the interview and the first evaluation. An expert with the necessary know-how and many years of audit experience then reviews the results, and the responsible manager in your organization approves the process description.
How does the solution handle AI errors (“hallucinations”)?
Every risk, finding and control must reference an interview answer, which is displayed verbatim. Catalogue findings are only mapped to valid control numbers; invalid ones are discarded. A human then reviews the result.
Which AI is used?
Claude by Anthropic only, connected via AWS Bedrock in EU regions. No other AI models are used.
Is our data used to train the AI?
No. AWS Bedrock does not store inputs and outputs, does not share them with the model provider and does not use them for training.
Where is the data stored?
Application and database run in a data centre in Germany. AI processing takes place in EU regions.
Is there a data processing agreement?
Yes. An agreement under Art. 28 GDPR, including the list of sub-processors and technical and organisational measures, is part of the offer.
What about the works council?
The platform documents workflows, not the performance or behaviour of individuals, and records no screens. We recommend informing the works council early and provide a description of purpose, data, roles and deletion concept.
We already use process mining or task mining – do we still need this?
The two complement each other. Mining shows from system and desktop data how work is done. ProzessInterview asks why: exceptions, responsibilities, controls and manual steps that leave no trace in any system – and maps them to the audit catalogues.
We already use SAP Signavio, ADONIS, ARIS or a GRC tool – does that fit?
Yes. ProzessInterview is the discovery layer in front of them: BPMN 2.0 models can be imported into these tools, risks, controls and records go into your GRC tool via Excel or CSV. Your tool stays; the interview replaces the workshops. Without a GRC tool of your own, results go straight into the CONSUVATION GRC platform.
Which languages are supported?
German and English for user interface, interview, results and exports – selectable per user and per interview.
Does ProzessInterview replace the audit?
No. The platform prepares evidence and estimates maturity. Certification, assessments and audits are still performed by the responsible auditors.
Try ProzessInterview on one of your processes
One process, up to five interviews, a results presentation – within a few weeks you will see what changes for your management system. We do not make blanket savings promises: every organization and every process is different. In the pilot we measure effort and results on your own process.
Peter Rentschler, Managing Director · Phone +49 7031 4181-860 · info@processinterview.com