The Software

The Digital Vault System gives your customers access to their safe deposit boxes regardless of branch hours.

Man working on desktop computer at home, mockup blank screen mon
Imhotec Tresore und Sicherheitslösungen

Secure safe deposit box management for modern banks worldwide.

SafeControl Manager is the field-proven safe deposit box management software for banks that prioritize integrity, scalability, and audit compliance. Developed by Gunnebo and integrated with the infrastructure and security expertise of IMHOTEC Engineering AG, the system manages operations centrally, efficiently, and securely.

The solution meets all regulatory requirements in accordance with MaRisk and BAIT and has been successfully certified by independent testing bodies such as ATRUVIA and S-CONSIT. It is thus officially approved for use in cooperative banking environments such as agree21—a clear sign of verified IT security and long-term audit compliance.

As an integral software component of a modern digital vault system, SafeControl Manager covers all processes, from traditional counter service to ESDL (Electronic Safe Deposit Locker) with self-authentication, all the way to fully automated customer access (24/7).

The software is OPDV2-certified*, used in thousands of locations worldwide, and is already in productive use at over 250 banks in Switzerland. As a browser-based application,
it provides a real-time overview of the status of all safe deposit boxes at any time and enables remote monitoring and management of fully automated safe deposit systems such as SafeStore Auto as well as SafeStore 2000C or SafeStore 3000F.

In addition to older Gunnebo solutions, SafeControl Manager also supports systems from other manufacturers, including AVM, DM5, ASA, Elan Controller, Keba SC, KABA, Fichet, Wertheim, and Secure Safe systems, thus ensuring seamless integration of existing infrastructures.

Cantonal banks have tested the solution as part of extensive penetration tests (PEN tests) and confirmed its suitability for use in modern, secure banking environments.

Upon request, we can arrange a reference visit to banks that are already using SafeControl Manager in productive operation.

*OPVD2 certification means that the software or IT system has been verified to operate securely, transparently, and in compliance with the law; it is therefore also recognized by auditors and approved for audit purposes.

Benefits of the Safe Control Manager

imhotec-rf-werdenberg-autosafe-07

The following features demonstrate how SafeControl Manager addresses specific requirements in banking operations, from cross-system management to technical security and integration with existing core banking solutions.

  • Centralized management of all safe deposit box systems, including those from different manufacturers (e.g., Gunnebo, KABA, Fichet, Wertheim)
  • Direct integration into core banking systems such as OSPlus and Avaloq via standardized web services (e.g., DynS)
  • Fully audit-proof audit trail, including logging of manual approvals with a B-key
  • Integrated backup and archiving system to secure the entire data set
  • Real-time status of all safe deposit boxes with usage analysis and event overview
  • Automatic user management with optional single sign-on
  • Process support for all usage models: manual, with an operator, via self-authentication, or fully automated
  • Multilingual user interface in 33 languages
  • Maximum system availability through replication servers
  • Real-time monitoring of all systems via an integrated event monitoring system with automatic error detection and forwarding to designated service teams.

In addition to technical control, SafeControl Manager supports numerous administrative processes in the background—from automated billing and contract management to loyalty card and time control.

This standardizes routine tasks, streamlines workflows, and significantly reduces administrative overhead in the branches.

Customer Benefits

SafeControl Manager has been tried and tested thousands of times: Currently, more than 7,000 systems with over 13,000 licenses are in use across 50 countries on 6 continents. With this safe deposit box software, you can digitize your safe deposit box processes securely, scalably, and in compliance with auditing requirements. Benefit from a proven IT solution that leverages your existing infrastructure while meeting the highest standards.

imhotec-rf-werdenberg-autosafe-15

Clear Added Value for Your Bank Customers

SafeControl Manager creates a new user experience for your bank customers.

Thanks to state-of-the-art security architecture—ranging from encrypted customer chip cards to biometric authentication—customers can access their bank safety deposit boxes independently and securely around the clock. End-to-end encryption and intelligent fraud detection reliably secure
every access.

Your bank customers thus benefit from a transparent and fully digital environment. Every access is protected, every transaction traceable, with the same security standards used in electronic payment transactions.

The result is a service that combines security and freedom—true added value for your bank customers.

Experience SafeControl Manager in live operation

Would you like to see for yourself?

We’ll arrange a personal reference visit for you at a bank that actively uses SafeControl Manager. Discreet, non-binding, and practical.

Schedule a site visit

Technical Overview for Decision-Makers

Modern banking environments require systems that function flawlessly, are easy to understand, and integrate seamlessly into existing IT infrastructures. SafeControl Manager was developed precisely for this purpose—it is technically transparent, operates reliably, and is designed for long-term security.

aek

Benefits for Bank Management

  • Offers your customers modern, secure, and digital access (around the clock, without the need to visit a branch).
  • Creates efficient, seamless workflows and reduces internal administrative burdens
  • Strengthens the bank’s reputation as a modern and trustworthy institution
  • Enables investment protection through the integration of existing systems

Benefits for ICT and infrastructure managers

  • Unified user management and role-based access control
  • Improved signature capture functionality
  • Comprehensive logging for audits and security testing
  • Open, backward-compatible architecture with documented interfaces to OSPlus, Avaloq, and DynS
  • Scheduled updates and stable release cycles ensure reliable continuous operation

 Technical Highlights

  • Highly available system architecture with replication servers, backup strategies, and defined failover processes
  • Runs on proven database systems such as Firebird, Oracle, or Microsoft SQL, and supports IIS and Apache
  • web servers for maximum compatibility and upgradeability
  • Encrypted data processing and audit-proof audit trails in accordance with OPDV2, verified by the independent audit body SIZ3
  • Unicode-compatible, available in 33 languages, and multi-tenant capable for multiple locations
  • State-of-the-art user authentication systems with card readers for crypto memory cards, touchpads for PIN entry, biometric fingerprint/vein scanners including ID matching, and optional video recording

A detailed description of the architecture, interfaces, and system requirements can be found in the following section “Scope of Functions” or in the technical data sheet.

Features of SafeControl Manager

SafeControl Manager handles a wide range of functions, from event logging and service diagnostics to payment processing and contract management.

Security and Encryption

  • Database server with strong encryption
  • SSL encryption for web server communication
  • Encryption of smart card technology
  • Multi-factor authentication (MFA)
  • OTP with Authenticator app
  • License for biometrics extension
  • Access time control
  • GDPR-compliant

System Integration

  • Installation on a dedicated banking server VM
  • Interface (API or dynamic) to core banking systems (e.g., ACS, Avaloq, Finova)
  • Support for simultaneous connection of multiple systems (multi-client capability)
  • Compatibility with various institutions and their core banking systems
  • Dynamic configuration of connections depending on the bank and system environment
  • Integrated solution for Single Sign-On (SSO) connectivity, supporting modern standards such as OpenID Connect, for example in conjunction with Microsoft Entra ID (formerly Azure Active Directory)

User and Permissions Management

  • User management for up to 9,999 users
  • Granular, comprehensive permissions structure
  • Audit-compliant event and access logging
  • Confirmation of changes and approvals following the dual-control principle, optionally via remote approval, for maximum transparency and compliance

Features and Reports

  • Optional night safe compartment feature
  • Compartment overview with report printing
  • Customer management with report printing
  • Customer history with detailed event logs
  • Database export to PDF and XLS formats
  • Graphical and statistical reports with report printing

 Data Backup and Archiving

  • Integrated backup and archiving system for a complete data set
  • GDPR-compliant

Documentation and Interfaces

  • Complete User Manual
  • Provision of a REST server for external integrations

Additional features with SafeStore systems

CMS – Crypto Memory System

End-to-end encryption of smart card data and biometric
customer data in the SafeControl Manager software and the Crypto
Memory Card.

SAM – Secure Access Module

Integration of a Secure Access Module to provide additional security
for key operations, certificate verification, and secure access to
backend systems.

CMC – Crypto Memory Chipcard

Use of a forgery-proof and copy-protected customer chip card
for unique customer identification and secure authentication.

Safe Control Detect Module

Integrated module for detecting and preventing fraudulent
activities in real time.

Intelligent Tamper Detection

Analysis of user behavior, system access, and transaction patterns to identify suspicious activities. Detection is based on dynamic rules and anomaly detection. Part of the central security component SafeControl Manager. Prevention of internal and external fraud attempts, including logging and immediate alerts for suspicious activities.

MFA via OTP – Multi-factor authentication with an authenticator app

Enhanced access security through an additional authentication component – in addition to a username and password, a second factor (one-time password) is required via a mobile app. SafeControl Manager’s MFA option for OTP multi-factor authentication using a smartphone app, such as Microsoft Authenticator.

Biometric Authentication

Fingerprint sensor for unique user identification.

Data Storage in Compliance with Privacy Regulations

Biometric reference data is stored exclusively on the customer’s Crypto Memory Card—no centralized storage, fully GDPR-compliant.

Reference Projects

Why IMHOTEC?

IMHOTEC-Showroom: mehrere zertifizierte Tresore nebeneinander in heller Ausstellungsfläche.

For decades, we at IMHOTEC Engineering AG have been supporting banks throughout Switzerland in digitizing and securing their physical infrastructures.

As a Swiss systems integrator with over 250 successfully implemented systems, we know exactly what matters when it comes to security, efficiency, and reliability.

We offer a one-stop solution, from initial consultation and project management to professional installation and commissioning. Our experienced security experts are always at your side with practical know-how and personalized support.

Whenever possible, we use spare parts made in Switzerland, which our technicians integrate precisely into existing systems. This ensures that your system remains not only reliable but also easy to maintain in the long term.

Our customers value the high quality and transparency of our work. Upon request, we’d be happy to arrange a visit to an existing reference system so you can see for yourself.

See for yourself and schedule a visit.

Contact

Thanks to Alex Moser’s expertise, experience, and professional guidance, the entire project has been a great success. We are very satisfied and happy with our new system.

Petra Kuratli
Raiffeisenbank Werdenberg

Without a doubt, the best advice

Without a doubt, the best advice

Do you have questions about SafeControl Manager? Our security experts would be happy to assist you.

With extensive expertise and years of experience, we’re here to help you find the best possible solution for your needs. Our team of experienced specialists is at your service throughout Switzerland. You can count on our team of experts.

SafeControl Manager -FAQs

Is the SafeControl Manager software audit-proof?

Yes. SafeControl Manager was specifically developed for regulated financial environments and meets the requirements of the OPDV2 standard. Certification by the independent testing body SIZ confirms that all system accesses and safe deposit box operations, including mechanical releases with a B key, are logged completely, immutably, and in compliance with data protection regulations. This ensures that your bank is optimally prepared for internal and external audits.

Which banking systems can be integrated?

SafeControl Manager features standardized web service interfaces (e.g., DynS) for secure, bidirectional integration with common banking IT systems. Integration with OSPlus and Avaloq has proven particularly effective. Customer data, contract information, and user permissions are automatically synchronized, eliminating the need for manual double-entry.

Can multiple locations or clients be managed simultaneously?

Yes. SafeControl Manager is multi-client capable and is ideal for banks with multiple branches, brands, or legal structures. All data is managed centrally and can be analyzed and controlled across branches or clients—in multiple languages if needed.

Do our employees need special training?

The “SafeControl Manager” digital vault system has been designed so that it can be used safely even by employees without an IT background. The user interface is intuitive, and user management is handled via roles and existing directories (SSO). The specialists at IMHOTEC Engineering AG provide your team with practical training, either on-site or remotely.

Does SafeControl Manager also work with existing locker systems?

Absolutely. The system is manufacturer-independent and integrates seamlessly with third-party locker systems such as KABA, Wertheim, Stacke, Müllersafe, Fichet, or Vidmar. The existing infrastructure remains intact and can be digitally expanded. This protects your investment and often eliminates the need for a completely new system. IMHOTEC Engineering AG supports you during integration with comprehensive project planning, hardware expertise, and years of experience.

What happens in the event of a server failure?

IMHOTEC Engineering AG relies on a redundant architecture with replication servers and automated backups. Should the digital control system ever become unavailable, lockers can be opened at any time using the mechanical B key, including audit-proof logging. Your processes remain stable, even in exceptional circumstances.

How does the implementation process work?

IMHOTEC Engineering AG guides you every step of the way. From system analysis and integration with your existing infrastructure to training your teams, we handle the entire implementation process. The implementation is modular,
efficient, and follows clearly defined milestones. Contact us for a no-obligation consultation.

Are there banks that already use SafeControl Manager?

Yes. In Switzerland, over 250 banks use SafeControl Manager, including Raiffeisen banks, cantonal banks, regional banks, and private banks. The solution has been tried and tested thousands of times and is scalable to meet a wide range of requirements. Upon request, we can arrange a site visit to a bank with a similar setup. Experience the added value firsthand.

Get in touch with us

Contact us

Do you have any questions about our range or a specific product? Give us a call, contact us by e-mail or via the contact form. Our security experts will get back to you shortly.

Your request