For operating partners in private equity
Roll out AI across a portfolio one process at a time.
An operating partner should roll out AI across portfolio companies one process at a time, owned by each company's management, rather than as one programme pushed from the fund. The fund sets a shared baseline: a one-page usage policy, an inventory of the AI each company uses, and one way of measuring. Each company picks a named process with volume, measures it before and after on its own work, and the method carries to the next company.
A portfolio rollout means getting the people inside each portfolio company to use AI on their own work: the finance team on the month-end close, the sales team on proposals, customer service on the inbox. Buying the licences is the easy part. What decides the result is which work gets handed over, how the request is framed and how the answer is checked, company by company.
The difficulty is variety. Each company has its own systems, its own data and its own management, and a plan written for one rarely fits the next. The fund's job is to set what has to be common and leave the rest to the people who run each business.
The operating model
Should the fund push one AI programme to every portfolio company?
Look at how different your companies' systems, data and management teams are before you write one plan for all of them.
Usually not. A single programme sent from the fund tends to arrive as a tool and a training deck, and the people whose work is meant to change are asked last. Adoption stalls and the tool takes the blame.
The fund sets what has to be common. Each company owns the process, the build and the result.
Split the work instead. The fund owns what has to be common: the usage rules, the inventory, the measure and a way for companies to compare notes. Each company's management owns the process it picks, the build and the result, because they run the business and will still be running it after the fund has moved on.
| One programme pushed from the fund | One process at a time, owned by each company | |
|---|---|---|
| Who owns the result | The fund's central team, which does not run the business | Each company's management, who run the process after the fund moves on |
| What goes first | A tool and a training deck for everyone at once | One named process with real volume at one company |
| Governance | One set of rules for every use, whatever the risk | A shared inventory and one-page policy, with stricter testing where the risk is higher |
| How it is measured | Licences issued | People who use the tools well, by team, and time and error rate before and after |
| What carries to the next company | The tool, which may not fit its systems | The method: discovery, design, a person who decides, measurement |
The shared rules
What governance should the fund set before any portfolio company starts?
Ask whether you can name every AI tool in use across your companies today, and who approved each one.
Start with an inventory and a short usage policy. The NIST AI Risk Management Framework (AI RMF 1.0), published in January 2023, is voluntary guidance built on four functions: Govern, Map, Measure and Manage. Guides to it describe adoption starting with an inventory of AI systems and a governance structure, then moving to risk mapping, measurement and monitoring.
That order suits a portfolio. A fund-level risk register template can track each system's owner, intended use, risk classification and open mitigation items, and every company fills in its own. The framework's profiles allow stricter testing for high-impact systems and lighter review for low-risk internal tools, so a customer-facing model and an internal drafting aid need not meet one standard.
The policy each company's staff will read should fit on one page: what may go in, what may not, who decides the edge cases. Our usage policy guide sets out that page for a fund, and the same shape works for a portfolio company.
Where to start
Which portfolio company and which process should go first?
Pick the company where a named process costs the most time and the person who owns it will give you an hour a week.
Choose one process with enough volume, where the work is mostly reading, drafting or reconciling, and where the owner is reachable. Leave the broadest ambition in the value creation plan for later. A narrow process can be measured; a theme cannot.
One named process with volume
The month-end close, the bid response, the support inbox. Something with a start, an end and a volume you can count.
An owner who will sit with it
The person who holds the process in their head. Discovery means interviewing them and writing the process down as it runs, which is rarely the process as written.
A person who still decides
Settle which steps a model does the reading and drafting for, and which decisions stay with a person who reviews, approves or signs.
The number
How do I know whether AI is working across the portfolio?
Your board pack may already report licences. Ask what it tells you about how many people use the tools well.
Licence counts tell you little. The number that matters is how many people in each company use the tools well, on their own work, read by team each month. It is usually much lower than licence utilisation, and it is the figure that moves when the work is done.
For a single process, measure time and error rate on the company's own volume, before and after, and write down how it was counted. Set no fixed date for results and promise no saving in advance. A figure counted the same way at every company lets you compare them fairly, and it is the figure the next management team will ask to see.
Our guide to AI adoption in private equity explains why utilisation is the wrong number inside a fund, and the argument holds for a portfolio company.
The fund first
Should the fund use AI itself before rolling it out to portfolio companies?
Ask your own deal, finance and IR teams how many of them used AI on real work last week.
It helps. An operating partner who has watched one process rebuilt inside the fund knows what discovery, design and measurement take, and portfolio management teams hear that differently from a slide. The fund's own documents make good practice: the quarterly portfolio report, the investor inbox, the roll forward.
That is where our work sits. By The People works inside the fund, with deal, operations, finance and IR teams, and does not run portfolio-company programmes. At one private equity firm, investor-email triage went from days to under five minutes. What transfers to a portfolio company is the method: one process, its own people building it, a person in the loop, measured before and after.
A forward deployed engineer rebuilds one fund process with your own people, so your operating team has the method in hand before the portfolio asks for it.
If what you need is a team inside every portfolio company, we are the wrong firm for it, and we will say so on the first call.
Questions on rolling out AI across portfolio companies
Is the NIST AI Risk Management Framework mandatory for a portfolio company?
No. AI RMF 1.0 is voluntary guidance, not a certification scheme or a regulation. It is technology neutral, does not require specific tools, and is meant to be adapted to each organisation's own risk tolerance. Organisations with limited resources or AI expertise can find it hard to turn its principles into specific steps, so a fund can help by supplying an inventory template and a one-page policy for each company to fill in.
Should the fund negotiate one AI licence for the whole portfolio?
It can, but a shared licence does not make anyone use it well. Count the people in each company who use the tools on their own work, by team, each month, and put the effort there. Skills learned on the model itself carry over if a company or the portfolio changes vendor later.
Does By The People work with portfolio companies?
Our work is inside the fund: deal, credit, operations, finance and IR teams. We do not run portfolio-company programmes. We can rebuild one process inside the fund with your own people, so your operating team has the method, the governance and the measurement in hand when it takes them to the portfolio. If you need a team inside each company, we will say we are the wrong firm.
How soon should portfolio companies see results from AI?
There is no fixed date. Results depend on the process, its volume and how much time its owner gives it. Agree before anything starts how the result will be counted, usually time and error rate on the company's own volume, before and after, and report that figure when it moves.
Will AI let portfolio companies reduce headcount?
We make no promise about headcount. The aim is capacity for work the company cannot reach today, with a person in the loop on every decision that needs judgment. Any staffing decision belongs to each company's management, made on measured figures.
Sources
- Cyberhaven, “NIST AI Risk Management Framework: What It Is and How It Works”, 24 September 2026
- Securiti, “NIST AI Risk Management Framework (AI RMF 1.0)”, updated 3 August 2026
- Orca Security, “NIST AI RMF Explained: Framework & Adoption”
- Palo Alto Networks, “NIST AI Risk Management Framework (AI RMF)”
Tell us what you are seeing.
If your documents or your experience say otherwise, we would like to hear it.
