Home

/

Resources

/

Glossary

/

Business Process Management (BPM)

Business process management (BPM) is the discipline of discovering, designing, automating, measuring and improving processes. What it is, how it works, what AI changes.

Business process management (BPM)

Business process management (BPM) is the discipline of discovering, designing, executing, automating, measuring and improving the processes an organisation runs, so that they serve its strategy. A process can be a loan approval, an insurance claim, a purchase request or a customer onboarding. BPM treats each one as an asset: described explicitly, run by software where it helps, measured with data and changed on purpose. BPM software, often called a BPM platform, runs these process models in production and enforces the rules, roles and deadlines they contain.

Why BPM matters now

BPM took shape in the early 1990s, when quality management and process reengineering made the process itself something to manage. Interest comes back every time a new technology changes how work runs: ERP in the 1990s, workflow and low-code in the 2010s, AI agents today. The pattern is the same each time. The technology arrives faster than the discipline to run it. Gartner expects more than 40% of agentic AI projects to be cancelled by the end of 2027, citing rising costs, unclear business value and inadequate risk controls. Analysts and practitioners draw the same conclusion: an agent needs a defined process around it, with owners, rules and a record of what happened. BPM has covered that ground for thirty years, which is why a discipline many had filed under legacy is back on the agenda.

How BPM works: the process lifecycle

BPM runs as a five-step loop. Discover and design: the process is observed as it really runs, then described, with its steps, roles, decisions and exceptions. Model: it is drawn, most often in BPMN, the standard notation that business and IT both read. Execute and automate: a BPM platform runs the model, assigns tasks to people and systems, applies business rules, enforces deadlines and records every step. Monitor: dashboards show where each case stands, how long each step takes and where cases pile up. Optimise: the owner changes the model and redeploys it. The loop never really closes: the owner reopens the process whenever the rules, the volumes or the organisation change. Automation is only part of BPM: the discipline also covers steps that stay manual by choice. The repeatability it brings is why BPM is strong in regulated and high-volume sectors: banking, insurance, public services, healthcare, utilities.

  1. Discover and design

    Observe the process as it really runs, then describe its steps, roles, decisions and exceptions.

  2. Model

    Draw it, most often in BPMN, the notation business and IT both read.

  3. Execute and automate

    A BPM platform runs the model, assigns tasks, applies rules, enforces deadlines and records every step.

  4. Monitor

    See where each case stands, how long each step takes and where cases pile up.

  5. Optimise

    Change the model and redeploy it.

The loop never really closes: the owner reopens the process whenever the rules, the volumes or the organisation change.

What BPM is for

BPM suits processes that are repeatable, cross several roles and systems, and carry rules the organisation must apply the same way every time. Practitioners usually distinguish three kinds. Integration-centric processes run mostly between systems, with little human input: an order flowing from an e-commerce site to an ERP and a carrier. Human-centric processes turn on people’s decisions: a discount approval, a contract review, a claim handled by an adjuster, with screens built for the people who work them. Document-centric processes follow a document through its life: a contract, a claim file, a permit. Most real processes mix the three. Because these processes are specific to each organisation, they are usually built as dedicated process applications, with their own data, screens and integrations. That is why BPM has long been an IT-led discipline, with modelling and development skills of its own. Shorter, simpler work is more often handled with workflow tools, collaboration platforms or, more recently, conversational assistants: a request between two teams, a recurring approval, a procedure run from a document. Most organisations run both. The market increasingly connects them: the same process can start as a workflow in a chat tool and grow into a BPM application when its volume or complexity requires it.

BPM vs BPA, workflow automation, agentic orchestration and process mining

Five terms often get mixed up with BPM. Business process automation (BPA) is the practice of executing a process with software, so that tasks, data and decisions move without manual relay. BPM is the discipline around it: discover, design, run, measure, improve. A BPM platform is where BPA runs at enterprise scale, with a model, roles, rules and a trail. Workflow automation chains tasks and moves data between tools, usually with no-code triggers and actions. It automates a sequence, without modelling the whole process, enforcing roles and service levels, or keeping an audit trail across systems. Process mining reads the event logs of existing systems to show how processes actually run. It diagnoses, and leaves execution to other tools. Agentic orchestration coordinates AI agents, people and systems through a process, with agentic steps inside a governed sequence. It extends process discipline to work that lives in conversations, and it borrows BPM’s foundations: defined steps, owners, exceptions, trace. Low-code platforms build applications of any kind. BPM builds process applications, where the process is the application. BPM is the engine room, and the other five work around it.

BPM and the five terms it gets mixed up with.
Term What it does How it relates to BPM
Business process management (BPM) Discovers, designs, runs, measures and improves processes The discipline itself
Business process automation (BPA) Executes a process with software, without manual relay Runs inside BPM, at enterprise scale on a BPM platform
Workflow automation Chains tasks and moves data between tools Automates a sequence, without a full process model or an audit trail across systems
Process mining Reads event logs to show how processes actually run Diagnoses, and leaves execution to other tools
Agentic orchestration Coordinates AI agents, people and systems through a process Borrows BPM's foundations: defined steps, owners, exceptions, trace
Low-code platforms Build applications of any kind BPM builds process applications, where the process is the application

What AI changes in BPM

Three shifts are visible across the market. At design time, AI drafts process models and documentation from a plain-language description, which cuts the first weeks of modelling. In the flow, AI steps classify a document, extract data or draft a response inside a process that still decides the next step. At execution, vendors are adding agentic steps: an agent acts within rules, with a person validating where the process requires it. Analysts stay cautious. None of the causes Gartner names behind cancelled agentic projects is the model itself: they are cost, unclear value and risk controls. The process layer is where companies now place those controls: who may act, within which limits, with what record. BPM’s role moves from automating the known to governing the autonomous.

Callout: Three signs a process needs a BPM application

  • The process needs its own screens, data model and integrations, not a conversation.
  • It runs thousands of cases a month with long-running logic: sub-processes, timers, compensation when a step fails.
  • It is built and maintained by IT, with versioning, testing and deployment constraints.
Learn more: See how Bonita BPM runs mission-critical processes.

Ofelia and business process management

For Ofelia, BPM is the complex end of one spectrum. The same discipline, defined steps, owners, exceptions, trace, runs from a governed workflow in Slack or Microsoft Teams to a mission-critical application. The engine is the same, and AI assists the design. Bonita BPM is the BPM platform of the Ofelia suite, built for the operations that need their own application: mission-critical, regulated, high-volume, human-centric or integration-centric. It runs on the BPA Engine that has executed enterprise processes for more than 15 years, with more than 130 enterprise customers and open-source origins. Two paths lead to production. Bonita Fabric, for IT: Process Designer generates a BPMN model from a sentence and refines it by prompt, Bonita Studio builds the full application, UI Builder shapes the screens. Bonita Work Hub, for business teams: governed process applications without code, on the same engine, with a path to Studio when the process grows. AI runs across the lifecycle: at design, in the flow through AI connectors, and at execution through the AI Agent Orchestrator, where a step is delegated to an agent inside a process that keeps control. AI proposes. The process controls. Open architecture, no vendor lock-in, deployment where you decide, on-premise included. And when a process does not need an application, Ofelia Agentic orchestrates it from Slack and Teams, on the same principle: AI speed, human control, one suite across the whole spectrum.

See Bonita BPM handle your most critical processes in a personalised session

Get a demo

‍

Reading time: 5 min
Table of contents
‍
Frequently asked questions
‍
What does human-in-the-loop mean?
It means a person sets the limits an AI system works within, decides at the critical points and can step in at any time. The agent researches, analyses, acts and proposes inside those limits, and a person validates the outcome. Every step goes on record. The term is best known from machine learning, where people correct a model’s outputs to train it. It now extends to AI agents, which act with real autonomy. In automated and agentic processes, it applies to execution: the steps that commit the company.
Does the EU AI Act require human-in-the-loop?
The EU AI Act requires human oversight and record-keeping for high-risk AI systems. Human oversight means a person can understand, intervene and override. Human-in-the-loop by design is a practical way to meet that requirement. Whether a given process falls under the high-risk category, and from when, is a legal question for your counsel.
Where should a human stay in the loop in a sales process?
At the points that commit the company. A discount above policy goes to the sales director, the COO or the CEO, by threshold. A contract clause outside Legal’s approved matrix goes to a lawyer. The scope of the offer deserves a human eye too: a CIO of an industrial group notes that a scoping error at the offer stage surfaces 18 to 24 months later. Everything else, an agent can prepare: the quote, the standard clauses, the handoff to Finance and Customer Success.
What is BPMN and why does it matter in BPM?
BPMN, Business Process Model and Notation, is the standard notation for describing processes: tasks, decisions, roles, events and flows. Business and IT read the same diagram, and a BPM platform can execute it directly. A process modelled in BPMN is both the documentation and the application logic.