600,000+
member businesses
reachable through the service platform
10+
workflows
live and in preparation
Co-Build
with WKO
built together, operated together
In production
Work. Done.
Product
Workflows and service tools from UNOY for more than 600,000 member businesses, from the KMU.DIGITAL advisor report to the data protection compliance suite. More than ten already run live, three are in preparation, many more will follow.
Different WKO departments work in parallel on the same platform, independently and with UNOY support. This enables WKO to pass on its expertise and its support to its members in the best possible way.
That is the platform effect: every further service is built on an existing foundation, not from scratch.
Live in production
In preparation
Model & reach
Who is WKO?
The Austrian Federal Economic Chamber (WKO) is the statutory representation of 600,000 member businesses, spread across 9 regional chambers and 90 trade associations. For its members it develops regulatory services in the domains of law, data protection, funding, compliance, sustainability and electronic invoicing.
UNOY works closely with WKO. Today more than ten workflows run live, more are in preparation, all on a shared platform.
The problem
At WKO, regulatory expertise has to be accessible to 600,000 members, across all federal states, industries and company sizes. The classic answer: advisory hotlines, leaflets, PDF forms. That does not scale, because every question ties up a person.
On top of that come the regulatory waves. Every new directive affects every member business, and no chamber can work through that in a thousandfold of individual consultations.
The solution is digital workflows with three properties: legally backed, authenticated against the WKO system, result delivered directly. Built and operated via UNOY, the legal accountability remains with WKO.
Services in detail
Every service follows the same pattern: Work in. Result out. For each service we describe the task, the feature scope and the reach. Seven services in detail, from KMU.DIGITAL to the ESG Report Agent.
03.01 · Live
Digitalisation initiative of the Federal Ministry of Economy, Energy and Tourism (BMWET) in cooperation with WKO. Certified advisors use UNOY to create the advisor reports required for the funding application, captured in a structured way, validated automatically and handed over to the funding body in a uniform format.
Technical depth
14 report schemas, 4 consulting tracks. Seven classic reports (PA1 to 3, SB1 to 4) plus seven Twin Transition reports (GPA1 to 3, GSB1 to 4). Tracks: business models and processes, e-commerce and marketing, IT and cybersecurity, digital administration. A structured export pipeline for the WKO backend submission system. Advisor report capture with four tracks plus a pipeline-run overview in the admin dashboard.
03.02 · Live
Overview and selection platform for ESG software solutions, as a guide for Austrian companies of every size and industry. Three workflows work together: an admin dashboard for maintaining the listed tools, a public detail view per software product and a filter engine that guides users through the selection process.
Criteria covered
Use case, standards, hosting, interfaces and more. Standards (CSRD, EU Taxonomy, VSME, GRI), hosting and server location, interfaces (ERP, HR, APIs), company size and industry, language and support, module system, pricing model.
03.03 · Live
A few targeted questions, a clear overview. An online advisor that, with a few targeted questions, gives companies an overview of which sustainability regulations affect them, directly or indirectly through the value chain. The result is a detailed, personalised compilation of the relevant regulations with scope, objectives and implementation deadlines.
Criteria covered
CSRD, CSDDD, ESPR, LkSG and others. CSDDD (EU supply chain directive), ESPR (Ecodesign Regulation), LkSG (the German Supply Chain Due Diligence Act) and others. Cross-industry and industry-specific.
03.04 · Live
Privacy notices under Art. 13 and 14 GDPR. A generator for privacy notices under Art. 13 and 14 GDPR. Each data processing activity is run through separately; at the end there is a leaflet with ready-made text modules, in German or English as preferred.
Criteria covered
All mandatory content under Art. 13/14 GDPR. Controller, data protection officer contact details, data categories, data source, processing purposes and legal bases, legitimate interests, recipients, third-country transfers, storage period, data subject rights, right to lodge a complaint, automated decision-making.
03.05 · In preparation
A free e-invoicing tool for WKO members. The target group is sole traders and small businesses without their own accounting software. The strategic background is the EU-wide B2B obligation to issue e-invoices; the tool is the bridging offer.
Feature scope
Form entry with up to 999 line items, sending via Peppol. Import of existing XML drafts, sending and receiving in UBL format via Peppol, conversion from ebInterface, a dashboard with quotas and status, CSV export of the metadata at the end of the quarter.
Fair-use logic
A maximum of 10 invoices per user per month (incoming and outgoing counted together); the tool stays focused on micro-enterprises that do not run an ERP stack. Invoice data remains local with the user, metadata is stored in the tool for traceability. Optionally, a hash of the XML can be stored per invoice in a blockchain; a QR code in the PDF makes the authenticity traceable.
03.06 · In preparation
Six main modules and five special tools. A structured GDPR self-check for WKO member businesses, organised into six main modules and five special tools. Methodologically co-owned by a data protection officer, auditable from a subject-matter perspective.
Criteria covered
Six main modules cover the fundamentals: lawfulness and principles of processing, data subject rights, the general data protection duties of a company, data security and the handling of data breaches, and transfers to third countries. Five special tools single out concrete use cases: from data protection on the website and web shop through video surveillance and impact assessment to information obligations and the review of processor agreements.
Platform lever
Master data, processing activities and processor agreements are reused across modules. Duplicate entries are eliminated, and the suite is worth more than the sum of the individual tools.
03.07 · In preparation
For SMEs that have to answer requests about their value chain. Large companies increasingly request ESG and due-diligence data from their suppliers, and many small businesses are overwhelmed by this. The agent classifies the incoming request automatically using AI and proposes suitable answer options, based on a decision logic developed jointly by WKO and UNOY. Where the AI is not sufficient, the required knowledge can be added or retrieved manually. The result is a document that the business can process further as needed.
Distinction from Service 03
The sustainability obligations advisor clarifies which regulations affect a business. The ESG Report Agent comes a step later, at the concrete answering of a request that has come in.
Feature scope
AI-assisted classification of the request, answer options from the shared WKO/UNOY logic. Manual knowledge addition as a fallback, the full user journey including individual review, a maintainable questionnaire and maintainable decision logic, an editable output document.
How a service is built
Every service is built in the same pattern. We have applied it to six running and three upcoming workflows; the steps are reproducible, the time frame reliable.
Go through the rule set together with the WKO subject-matter team. Which question does the member ask? What is the correct answer? Which sources are cited? Where does final legal accountability apply?
1 week
Building the workflow on the platform: advisor logic, mandatory fields, branching, output templates. WKO lawyers help maintain the rule base directly in the system, without a development ticket.
2 to 3 weeks
First members go through the workflow. We measure along the way, collect edge cases, refine the rule base. The WKO subject-matter team has the final say on critical outputs.
1 week
Workflow public, integrated into WKIS, audit trail active. Changes to the rule set are tracked with versioning; new case law, new thresholds, new obligations enter the system directly.
ongoing
The prerequisite is a subject-matter accountable body that maintains the rule set. UNOY delivers the engineering, not the legal interpretation.
Service family
Seven services above in detail, plus two additional self-service review tools. Six live, three in preparation.
Review information obligations, with data protection officer methodology.
Review your data protection posture across six areas.
Structured XML invoices via Peppol.
Review mandatory VAT-law particulars in a structured way.
Check CSRD and NaBeG applicability.
A curated DACH market overview plus a selection guide.
Ten dimensions, an individual action plan.
Structured advisor reports plus a data pipeline.
AI-assisted answering of supply-chain requests.
WKIS integration
UNOY has connected the service platform to WKIS, the central single sign-on of the Austrian Federal Economic Chamber. Members log in once and all workflows are available. No additional registration, no separate passwords.
Connection · WKIS SSO
Member
WKIS login
WKO identity
OAuth2 authentication
UNOY platform
All workflows
A standardised connection to the WKO identity system. Authentication remains entirely within the WKO infrastructure, with no additional identity provider needed.
Every member business with WKIS access can use every UNOY workflow immediately. New services are added without members having to register again.
Data remains under WKO accountability, UNOY processes on its behalf. Versioned, with an audit trail per matter, in EU data centres with ISO 27001 certification.
On the way
The service family grows along the regulatory waves. Four topics are currently up next.
In preparation
E-invoicing & Peppol
E-invoicing · Pilot
The tool is conceptually complete: sending and receiving structured e-invoices via Peppol, for sole traders and small businesses without their own accounting software. Pilot operation is in preparation.
In preparation
In preparation
Data protection compliance suite
Data protection · Self-check
A structured GDPR self-check with six main modules and five special tools, methodologically owned by a data protection officer. Master data and processing activities are reused across modules.
In preparation
In preparation
ESG Report Agent
ESG · Supply chains
AI-assisted answering of supply-chain requests for SMEs. Classification of the incoming request plus answer logic, developed jointly with WKO, with manual knowledge addition as a fallback. It covers the full user journey including individual review.
In preparation
In preparation
ESG reporting obligations
ESG · CSRD/NaBeG check
Who is affected by CSRD and the Austrian NaBeG, from when, and to what extent? The workflow leads with a few questions to the appropriate reporting standard, from full reporting obligation through VSME for SMEs to non-applicability.
In preparation
Experience
WKO is the broadest live implementation of UNOY in the German-speaking region. Several workflows in production, more in preparation, different departments on a shared platform. This constellation shaped the product, above all in three places.
Lesson one: self-service needs final legal accountability, and both are possible. When 600,000 businesses access one platform, every routine matter has to run cleanly without human intervention. Even so, legal accountability must not be diluted at any point. Routine runs under controlled automation, critical points run with an approval path.
Lesson two: subject-matter partners need a platform on which they work themselves. Workflows with subject-matter involvement, such as the sustainability obligations advisor with unfold consulting or the data protection compliance suite with data protection law curation, need an environment in which content is maintained directly. Without the detour via a development ticket.
Lesson three: regulatory waves are not a special case, they are the normal case. The platform is designed to take on wave after wave: new services are built modularly, without touching the existing ones.
Frequently asked
WKO. UNOY provides the platform on which the workflows run. The legal accountability is carried by WKO through its subject-matter lawyers and partners; critical outputs are approved before delivery. For data protection workflows the methodology is co-authored from a data protection law perspective; for the sustainability obligations advisor, unfold consulting curates the content.
Four workflows currently run live: the KMU.DIGITAL advisor reports, the ESG software solutions platform, the sustainability obligations advisor and the GDPR information-obligations advisor. Four more are in preparation: e-invoicing and Peppol, the data protection compliance suite, the ESG Report Agent and the ESG reporting obligations.
The UNOY services run on beratung.wko.at as a multi-tenant platform, one engine, several advisors. Data residency in the EU, data centres certified to ISO 27001, SOC 2 Type II and ISO/IEC 42001. Versioning and an audit trail per matter.
A new service takes four to six weeks from workshop to pilot. The prerequisite: a subject-matter accountable body that maintains the rule set. UNOY delivers the engineering, not the legal interpretation.
Yes. The platform runs in an EU data centre with a high-availability setup. Load peaks arise above all on regulatory deadlines, and the architecture is designed for them.
Three topics are in preparation (see On the way): e-invoicing and Peppol, the data protection compliance suite and the ESG Report Agent. Each regulatory wave gets its own service, without touching the existing ones.
Tech stack
OAuth2 connection to the WKO identity system for secure member authentication.
Data isolation per federal state and industry, with central analysis.
Legal rules are maintained directly by WKO lawyers, with an audit trail on every change step.
Methodology developed together with the Austrian data protection authority, validated against GDPR and the Austrian Data Protection Act.
Connection to the Austrian Peppol network, with certificate management.
Structured question sets for ESG reports, with XBRL export for authorities.
All data in Frankfurt and Vienna. No third countries. Data centres certified to ISO 27001, SOC 2 Type II and ISO/IEC 42001 (AI management).
Other customers
100,000+ cases per year, reviewed in a structured way and enforced with subject-matter approval.
Reviewing engagement agreements, managing playbooks, approving review assignments.
Processing claims notifications, in hours instead of days.
30 minutes. Your matter. One concrete recommendation.
