Implementing d.velop process studio typically follows a structured four-phase journey designed to ensure a smooth transition from manual to digital workflows. The process begins with an **Analysis & Scoping** phase, where d.velop consultants or certified partners work with your stakeholders to map existing processes and identify automation potential using BPMN 2.0 standards. This is followed by the **Configuration & Modeling** phase, where the no-code visual editor is used to build workflows, design responsive forms, and set up task delegation rules. For complex scenarios, the scripting engine is configured at this stage. The third phase is **Testing & Quality Assurance**, involving rigorous UAT (User Acceptance Testing) in a dedicated sandbox environment to verify logic, integrations, and user experience. Finally, the **Go-Live & Onboarding** phase involves moving to production, supported by end-user training and the 'd.velop academy' resources. Depending on complexity, a standard departmental workflow can go live in as little as 2-4 weeks, while enterprise-wide orchestrations may take several months.

Customization is a core strength of d.velop process studio, catering to both no-code business users and professional developers. Business users can customize workflows through a visual drag-and-drop interface, defining decision paths, user task subjects, and responsive forms without writing a single line of code. They can also leverage the 'Template Library' to import and modify pre-existing process models. For deep technical customization, the platform provides a professional **Scripting Engine** based on Node.js (currently supporting version 22). This allows developers to write custom JavaScript to handle complex data transformations, call external REST APIs, and implement sophisticated business logic that exceeds standard modeling capabilities. Additionally, the platform’s open architecture allows for UI customization within forms and the creation of custom 'Actions' that can be reused across different processes, ensuring the software adapts to the specific corporate identity and functional requirements of the organization.

Beyond the base subscription or license fees for d.velop process studio, organizations should be aware of several potential cost factors. First, usage-based scaling: if an organization exceeds the monthly limit of workflow executions (typically 50 per user in the Basic plan), additional executions are billed at approximately €2.00 each. Second, **professional services**: costs for initial process analysis, custom modeling, or complex system integration performed by d.velop or its partners are typically billed on a project basis. Third, **training and certification**: while basic documentation is free, advanced 'd.velop academy' live trainings or official certifications carry separate enrollment fees (e.g., around €749 for a basic process studio course). Lastly, depending on the deployment model, on-premises customers may incur internal infrastructure and maintenance costs, while cloud customers may choose to purchase additional storage or high-availability add-ons for the underlying d.velop documents platform.

d.velop offers a comprehensive training ecosystem through the **d.velop academy**, ensuring all user levels can achieve proficiency. The offering is divided into several tracks: 1. **End-User Training**: Focuses on navigating the task list, completing forms, and monitoring personal processes. 2. **Administrator/Modeler Training**: Detailed 'Basic' and 'Advanced' courses for d.velop process studio cover BPMN 2.0 modeling, form design, and process administration. 3. **Developer Training**: Specialized sessions on using the Node.js scripting engine and REST APIs for custom development. Training is delivered through various formats, including live virtual classrooms, on-site workshops, and a vast library of e-learning modules and video tutorials. Additionally, the 'Getting Started' guide in the Help Center provides a step-by-step path for new users to model their first process, while the developer portal offers technical documentation for advanced users.

Security is a foundational element of the d.velop cloud platform. d.velop AG holds the **ISO/IEC 27001:2024** certification, ensuring that its information security management system meets the highest international standards. Data security is further reinforced through end-to-end encryption: all data is encrypted at rest (using file-level or drive encryption) and in transit via HTTPS. The platform employs a restrictive, person-related authorization model, ensuring users only access the data required for their specific tasks. In the cloud, the data centers used are also ISO 27001 certified and located within the EU to ensure compliance with strict data sovereignty laws. d.velop also undergoes regular external penetration testing to identify and remediate vulnerabilities. For the automotive industry, the company is **TISAX** certified (Assessment Level 2), and for document storage, it complies with **IDW PS880** for audit-proof, tamper-evident archiving, ensuring legal certainty for all automated processes.

d.velop follows a modern, agile release cadence, particularly for its cloud-based offerings. Major functional updates and 'Highlights' are typically released on a quarterly basis (e.g., 2025.Q1, 2025.Q2), with smaller feature enhancements and security patches deployed more frequently in the background. Cloud customers receive these updates automatically, ensuring they are always running the most secure and feature-rich version without manual intervention. For on-premises or hybrid deployments, updates are managed via a structured installation and roll-back process, supported by detailed documentation. The 'Product News' section of the Help Center and the company's newsletter keep administrators informed about upcoming changes, such as the recent migration from Node.js 18 to 22. Release notes provide a comprehensive overview of bug fixes, performance improvements, and new capabilities included in each version.

d.velop operates under a clear 'customer-centric' data ownership policy. All data processed within d.velop process studio—including process definitions, forms, scripts, and the documents they handle—remains the sole property of the customer. d.velop acts as a data processor under GDPR Art. 28, providing the infrastructure but maintaining no rights to the content. The platform includes built-in **Data Portability** features; all processes, forms, and scripts can be exported as standardized files (BPMN for processes, JSON/JS for forms and scripts) and imported into other environments. In the event of contract termination, d.velop provides a structured deletion concept where customer data is purged after a grace period (typically 30 days post-cancellation), following a final opportunity for the customer to export their information. This ensures that organizations maintain full control over their intellectual property and business logic at all times.

The architecture of d.velop process studio is built for scalability, capable of growing from a single departmental workflow to millions of process instances across a global enterprise. In the **Cloud**, the platform leverages the elastic resources of modern data centers, automatically adjusting processing power to handle spikes in workflow volume. For organization-wide growth, the centralized 'Process Monitoring' and 'Process Administration' tools allow admins to manage thousands of active instances simultaneously, with the ability to perform bulk actions like migrating instances to new versions or retrying failed tokens. The licensing model also scales linearly, allowing companies to add users and execution quotas as their digital maturity increases. On-premises customers can scale horizontally by adding additional server resources to their d.velop environment. The software's ability to handle high-frequency document updates (up to 600 per minute) and new object saves (up to 1600 per minute) in the cloud demonstrates its enterprise-grade performance.

The contractual relationship for d.velop process studio is governed by d.velop AG’s General Terms and Conditions of Sale and specific Service Level Agreements (SLAs). For cloud services, the **SLA** typically defines availability targets (often 99.5% or higher) and support response times based on incident severity. Contracts are usually structured as annual or multi-year subscriptions with automatic renewal, unless cancelled within the specified notice period (typically 3 months before the end of the term). For on-premises customers, a software maintenance agreement ensures access to updates and technical support. Termination of individual 'Apps' or modules within the d.velop platform can often be handled through the central cloud management portal. The terms also include a Data Processing Agreement (DPA) that outlines the company's strict adherence to EU GDPR requirements, providing legal security for the processing of sensitive employee and customer data.

d.velop AG is committed to meeting the most stringent global and regional compliance standards. Key certifications include **ISO/IEC 27001:2024** for information security, **ISO 9001:2015** for quality management, and **ISO 14001** for environmental management. For specialized industries, d.velop holds the **TISAX** certificate for automotive data security and complies with **EU-GDPR** requirements. A critical differentiator is the **IDW PS880** certification, which confirms that the software enables audit-proof and GoBD-compliant storage of electronic documents, a vital requirement for financial and tax-related processes in Germany and Europe. Furthermore, d.velop documents and process studio support 'Software Certification according to IDW PS880', ensuring that when the application is used properly, documents are stored in a tamper-evident manner. The company’s focus on the public sector also ensures adherence to specific governmental standards for digital file management and e-government procedures.