Certified ITSM, on an executable business architecture base.
PinkVERIFY is the scheme Pink Elephant uses to verify that a tool genuinely supports service management processes, in functionality and in terminology. Dexon BPM is the only BPM platform in that public registry: 12 certified processes, 14 years without interruption, valid until 2 August 2027. Among the twelve are two that most of the registry does not hold — AI Capability, present in 8 of the 36 certified products, and Performance and Improvement Management, present in only 3. And the difference is what sits underneath: the engine that runs the service desk is the one that models the organization's capabilities, services, processes and indicators, so an incident is traceable from strategy to indicator like any other critical process.
Download the certificate (PDF)Verify in Pink Elephant's public registrysigned by the president of Pink Elephant · 12 processes · certified until 2 August 2027 · the table loads by script — sort by number of processes to find Dexon BPM
Why it matters
A vendor claim is not proof.
It de-risks the purchase →
An accredited third party verified the functionality against published criteria. In public or financial procurement, that evidence is demandable and defensible. And it is not a one-off: Dexon has renewed this certification for 14 years without interruption — and regulated organizations have renewed the platform itself for over a decade, in competed public procurement you can verify.
It shortens technical evaluation →
Much of the functional questionnaire your team would have to validate has already been assessed and documented under a scheme the industry recognises.
It covers AI too →
The certification includes AI Capability, assessed with the same rigour as the traditional service management processes.
Actual scope
The twelve certified processes
The scope is not limited to knowledge management or the service desk: it covers the full service management cycle, from the catalogue through to improvement.
| Process | What the criteria verify |
|---|---|
| AI Capability | Natural language processing, predictive analytics, conversational assistants and generative AI inside service operations. |
| Incident Management | Service restoration with logging, classification, prioritisation, escalation and evidence per case. |
| Request Management | A catalogue that systematically triggers the workflow matching each request. |
| Problem Management | Identifying and eliminating causes of recurring failures, with analysis and known error control. |
| Change Management | Maximising successful changes through risk assessment and appropriate authorisation. |
| Configuration Management | Service components and assets managed distinctly, linked, and sharing data. |
| IT Asset Management | Full asset lifecycle from acquisition to disposal, with financial traceability. |
| Knowledge Management | Turning what was learned into reusable assets available at the point of use. |
| Service Catalog Management | Services and offerings published with owner, value proposition, criticality and consumption terms. |
| Service Level Management | Agreements measured against real operations, with thresholds, alerts and escalation paths. |
| Service Desk | Single point of contact with the user: capability awarded for fully covering incidents, requests and knowledge. |
| Performance & Improvement | Measurement tied to continual improvement, with indicators that feed redesign decisions. |
Why no other BPM is on this list
The certification is not the product: it is the product's proof
Dexon built an executable business architecture engine first — Dexon BPM — and Dexon ServiceDesk is the ITSM platform built on Dexon BPM: the ITIL processes run on the same engine as any other critical process in the organization.
That is why the auditor could certify Dexon BPM. And it is why no modelling tool can enter this assessment: it executes nothing an auditor could verify. The certification is, at bottom, an accredited third party confirming that the architecture genuinely executes.
What it means in practice
A catalogue request, an incident and a public procurement process are, architecturally, the same kind of object: an offering that executes a process, consumes governed data, applies rules and feeds indicators.
That is why you need neither one tool for IT and another for the business, nor two repositories that drift apart. And it is why the same engine today carries the tax enforcement of a revenue authority and the indicators of a nuclear power plant.
See the architecture approachAre you evaluating an ITSM tool?
We will share the detail of the PinkVERIFY assessment and show you the certified processes running on a case comparable to yours.