
AI Governance for BGF Portfolio Companies
AI adoption is accelerating across BGF portfolio companies. Make sure you have the governance frameworks to protect your business. ISO 42001 + ISO 27001 certification in 90 days—with exclusive BGF portfolio pricing.

"Following the recent BGF AI webinar, we've created this resource specifically for our BGF peers. As fellow portfolio companies adopt AI (and BGF is actively encouraging this), proper governance frameworks aren't optional—they're essential for protecting your business, customers, and exit value."


BGF Portfolio Companies
What is ISO 42001, and why does it matter?
ISO 42001 is the world's first international standard for AI management systems. It's also about to become your new reality.
AI isn't a side project anymore—it's embedded in your workflows, your vendor stack, and definitely your risk register. Whether you're shipping AI features or just trying to wrangle that rogue GPT workflow in ops, ISO 42001 helps you manage AI responsibly without turning into a bureaucracy nightmare.
No more "we'll figure out governance later" moments when the board starts asking hard questions.
.avif)
Who in your BGF portfolio company cares about this?
Whether you're in MedTech, SaaS, HealthTech, or Financial Services—if you're in the BGF portfolio and adopting AI, this applies to you. Here's why different teams in your organisation care:
Audit-Ready in 90 Days
We understand BGF companies move fast. That's why we've created a streamlined path specifically for the portfolio—90 days from kickoff to audit-ready, with dedicated support every step of the way.
AI system mapping, risk baseline, stakeholder alignment

Control deployment, policy automation, team onboarding

Audit preparation, evidence collection, final validation

Governance That Keeps Pace with BGF Growth Expectations
Less friction for dev teams, clearer oversight for leadership, faster compliance reviews—exactly what you need when BGF is pushing for aggressive AI adoption timelines.
Track models across environments without killing sprint velocity
Map bias, explainability, and model drift to actual controls, not consultant frameworks
Control owners get assigned, compliance gets monitored, changes get logged automatically
Integrate with your existing stack. No mysterious compliance black boxes.
Real-time dashboards show compliance posture across all AI systems
Timestamped evidence trails and version control. Show regulators you've done the thinking.
All-in-One AI Management Toolkit
Manage AI systems, policies, risks and evidence in one workflow. Make audits predictable.
Every model, use case, and decision point mapped and tracked

Score risks like bias, hallucination, and model drift with built-in ISO 42001 methodology

ISO 42001 Annex A templates you can ship today, with auto-assigned ownership

Immutable record of model updates, retraining, and policy changes

Real-time compliance view with export-ready audit packages

Slots right into your existing ISO 27001, SOC 2, or GRC workflows

Built for the AI governance pioneers
Early adopters use Hicomply to get ISO 42001-ready while others are still figuring out what AI governance even means.
Hicomply has completely transformed the way that we manage our ISO27001 certification. We purchased Hicomply a few months before our re-certification was due. Zoe worked with us to set up everything up and show us how to use the platform most efficiently. She has been an amazing support to myself and my colleague as we navigated through this process.

"Implementing Hicomply has streamlined our compliance processes, making it more efficient to manage and maintain our ISO certifications. The platform's intuitive design and comprehensive features have been instrumental in enhancing our operational excellence."

%2013.avif)
“The things that we've seen this product and service deliver has far exceeded what we originally thought we would get from it."

FormusPro achieved ISO 27001 certification in under six months. Less than half the typical timeline predicted by other providers.


From start to finish, the service and engagement from Hicomply has been fantastic… Whenever we had any questions, the team were always on hand to offer advice.

Hicomply has reduced our compliance preparation time by over 50%, ensuring we’re always audit-ready. It’s a game-changer for maintaining trust with clients.

I have found Hicomply to be incredibly useful as a platform for a new company… it has taken the stress out of our hands.

Organization at its finest. A great sorting system—I can easily find new articles that I need to review with a click.

Very interactive, not boring at all. It’s straight to the point and teaches you things in an interactive way.

Hicomply delivers a refreshingly streamlined experience in compliance management… What truly sets them apart is their outstanding support.

Easy to use and straightforward for confirming you’ve read the necessary documents. The dashboard lets you see what your direct reports have completed.

Possibly the most helpful feature about Hicomply is the UI itself—user-friendly and easy to use without over-complicating things.

Easy way to track compliance learning. A simple product that makes keeping up to date with policy changes simple.

“The real benefit of Hicomply, as far as I’m concerned, is twofold: the software and the personnel. It’s an all-encompassing tool that consolidated everything and enabled us to deliver on our commitments with confidence.”
.avif)

Hicomply is particularly user-friendly for someone unfamiliar with this type of software… It’s making us more organised.

Very interactive, not boring at all. It’s straight to the point and teaches you things in an interactive way.

Easy to use and straightforward for confirming you’ve read the necessary documents. The dashboard lets you see what your direGreat app for ISO implementation and auditing—task managing, informative dashboard, intuitive to implement.ct reports have completed.

Everything you need
to get started
We've created resources specifically for BGF portfolio companies navigating AI compliance. Download, share with your team, and start your journey to ISO 42001 certification.

Build your AI compliance foundation
New to AI governance? Start with these compliance essentials while we build the full ISO 42001 toolkit.
Got questions? Start here
Planning for AI regulations? These will help.
For anything else, just ask.
Is this only for companies that attended the BGF AI webinar?
Not at all. While the webinar sparked this initiative, any BGF portfolio company adopting AI should consider ISO 42001 + ISO 27001 certification. We're here to help the entire BGF portfolio get ahead of regulatory requirements.
What makes the BGF portfolio pricing different from standard pricing?
As a fellow BGF portfolio company (yes, Hicomply is BGF-backed too!), we understand the unique pressures and timelines you face. Our BGF-exclusive pricing reflects that peer relationship and includes additional support touchpoints with our team and optional peer learning sessions with other BGF companies.
Will BGF be promoting this to other portfolio companies?
Yes. We're working closely with BGF to ensure this becomes a standard resource across the portfolio, similar to how KYND provides cyber risk monitoring. If you have questions about BGF's involvement, reach out to Sophie Day (Head of BGF Community) at BGF.
What is ISO 42001 and why should I care?
ISO 42001 is the international standard for AI management systems—think ISO 27001 but for artificial intelligence. With the EU AI Act and other regulations ramping up, it's becoming the baseline for responsible AI governance. Get ahead now or face the compliance chaos later when regulators are knocking.
How does ISO 42001 relate to the EU AI Act?
ISO 42001 provides the framework for managing AI systems responsibly. The EU AI Act sets legal requirements for AI use in Europe. They complement each other—ISO 42001 gives you the management system, the AI Act gives you the legal obligations. Our platform helps with both.
Can developers actually use this without a GRC background?
Absolutely. We've built workflows that make sense to engineers, not just compliance folks. Track models, log changes, map risks—all in language that doesn't require a governance degree. Your dev team won't revolt.
Do I need this if I already have ISO 27001?
ISO 27001 covers information security. ISO 42001 specifically addresses AI management and governance. If you're using AI systems (and you probably are), you'll want both. Good news: they integrate beautifully and our platform handles both frameworks.
What kinds of AI risks does Hicomply actually track?
The real ones: bias in decision-making, model explainability, data drift, hallucination risks, privacy impacts, and human oversight requirements. We map these to actual controls you can implement, not just theoretical frameworks.
Ready to get ISO 42001-ready in 90 days?
Book a 15-minute consultation to discuss your AI governance needs. We'll walk you through the 90-day fast-track process and share exclusive BGF portfolio pricing.


