Digital portfolio management and EU AI Act governance in one console.

The NIS2 measures (Art. 21) at organisation level: status, owner and target date per measure, with the initiatives that treat each gap. The management body's approval (Art. 20(1)) is recorded with the status it saw, and a training register tracks who is due (Art. 20(2)). Gaps, a stale approval and overdue trainings appear in Board Actions, Governance and the board memo and pack. Switched on in Settings → Compliance & reminders.

Every person field works the same way: pick a member, stored by id and always shown under their current name, or type a name. The People page lists your items, most urgent first: initiatives you own, risks, follow-ups, AI Act obligations and approvals, artefacts, incidents and recent decisions. Its Overview shows each person's load and flags anyone overloaded, the Person filter narrows every page to one person, and admins link old typed names to their member in one step.

Rate how good the delivered solution is on eight factors after ISO/IEC 25010, safety included: per factor a required level, a state from 1 to 5, a target date and evidence or an SLA. A gap is a High-required factor at state 1 or 2, or a Medium-required one at 1. The inventory filters and shows gaps, the Governance page counts them per factor, Board Actions flag a High gap at Scaling or in production, and the board memo and the PPTX board pack carry a quality chapter. Innovation portfolios see R&D names, and the MCP Composer reads and writes the ratings. Nothing changes a score.

The Composer also analyses a full backup, read-only, in Claude Desktop or any MCP client: query and filter initiatives, KPIs and readings, the ranking and cut line with budget what-ifs, one initiative in depth, change since a snapshot, the data of the board memo's main chapters, skill demand and capability maturity with what-ifs. Every figure comes from the app's own rules, so the assistant quotes rather than recomputes. Seven ready-made analyses, from a board briefing to a one-page initiative brief, sit under the “+” button in Claude Desktop. The Composer runs on your computer and needs no login; the AI client sees the answers it returns, so use one your organisation has approved.

Track the open points of each initiative as follow-ups: a title, an assignee from the organisation's members (or a free-text name), a due date, a done date and an optional link to a milestone or risk. The home page lists your open follow-ups by due date (without sign-in, the portfolio's overdue and soon-due ones), the inventory shows each initiative's next follow-up and filters to overdue ones, and Board Actions flag overdue follow-ups. A severe risk counts as handled only with an owner and a linked follow-up.

Keep a risk register per initiative: probability and impact from 1 to 5, a score and band, owner, mitigation and an optional residual rating; an occurred risk becomes an issue. The Governance page shows the heat map and the top risks, Board Actions flag severe risks without an owner or follow-up and rising risks, and the board memo and the PPTX board pack carry a risk chapter.

Plan each initiative's milestones with a baseline, a forecast and a done date; the app marks each one on track, slipped, overdue or done and shows the slip in days. The roadmap draws them as diamonds on the bars, the inventory shows the next milestone and filters to overdue ones, Board Actions flag overdue milestones and initiatives past their planned end, and the board memo and the PPTX board pack carry the chapter "Milestones: missed and next 90 days".

Map the business capabilities by domain, each with current and target maturity, importance and owner, and record which capabilities each initiative changes and to what level. The Capabilities page shows the map as a heatmap with domain radar charts (now, projected, target), the gaps the portfolio leaves open and the maturity steps by quarter. The board memo and the PPTX board pack carry a Capability impact chapter, Board Actions flag uncovered strategic gaps and stalled capabilities, and the BICon Composer & Analyst drafts capability links.

An MCP server that turns a conversation with Claude Desktop or any MCP-capable AI client into a complete, valid initiative: it knows every field, checks answers against the app's own rules, derives the four dimension scores from the 30 sub-scores, and returns an import file. Draft-first by design — the file goes through the Single Initiative import and a human confirms, so nothing reaches a portfolio automatically and the Composer never holds a login. Installed as a one-click Claude Desktop extension or the published @bicon/mcp-composer npm package.

The Reports page builds ad-hoc tabular reports over the whole data model: pick any of ~45 fields across master data, evaluation, economics, governance and status reports, order them freely, filter with the shared filter bar, sort by any selected field, and group with automatic counts and money totals. Named reports are saved per portfolio mode — optionally including the active filters — and the current view exports to Excel with collapsible groups and formatted totals.

The Roadmap page shows where your skills go: an expandable per-initiative overview with status, budget, usage and total FTE, plus a stacked chart summing FTE demand per skill and month across every initiative's timeline. A dashed line marks the total capacity of the skill pool and a marker highlights the current month; both views follow the page's filters.

Initiative managers file dated status reports rating scope, timeline, budget and skills as green, yellow or red — each with a short comment plus an overall note. The Status Report page shows the whole portfolio as a traffic-light grid: grouped by lifecycle status with the worst lights first, a status filter, trend arrows against the previous report, and drill-down into commentary and history. The board memo and the PPTX board pack include a matching Initiative Status chapter, and a granular permission controls who may edit reports.

Two people can work the same initiative safely. When a teammate saves one you have open, their changes merge into your form field by field: fields you have not touched update live and stay highlighted until you save, with a note of who changed what; your unsaved edits are never overwritten. A real collision — same field, both changed — keeps your value and asks you per field: take theirs or keep yours. Your own saves stay silent, and background tabs pause polling and catch up on return.

Every initiative as a bar on a grouped timeline: what lands when, what runs in parallel, dependencies and overdue markers — grouped by business unit, status or category.

A rules-based, severity-ranked list of the decisions the portfolio's own data calls for: stop/defer candidates, gate discipline, capacity and budget shortfalls, concentration, and AI Act follow-ups whose urgency escalates as the legal enforcement date approaches. Benefits-realisation rules flag production systems that under-deliver — or never measure — their promised value. Board-set guardrails add the red lines: admins define policy limits in Settings — a budget-concentration cap per business unit, a value floor for funded initiatives, a governance-load ceiling and an EU AI Act readiness floor for production — each showing a live pass/fail, and every breach lands here as a decide-now item.

Run the console as a multi-tenant SaaS: each organisation is an isolated tenant with its own portfolio and data. Members sign in through managed authentication and get role-based access — admin, member or viewer — refined by granular per-section permissions an admin grants from Settings, enforced on both the server and the UI. Every governance-critical, Core Metadata and EU AI Act change is captured in a per-field audit trail with the acting user and a timestamp, and each initiative shows who created and last edited it. Cloud sync keeps the shared portfolio consistent across the team, while local (no-account) mode still works for a single user. Privileged admin actions — access grants, role and permission changes, settings, profile and initiative changes — are additionally recorded in an organisation-level admin activity log in Settings.

Generate audit-ready EU AI Act documentation in one click. Every AI Act artifact, operational obligation and supporting document ships with a bundled, editable .docx template — and a Document Templates section in Settings lets you keep the built-in version or point any row at your own external URL, with a live preview and a placeholder reference. Create from Template in the Evaluate form downloads a document pre-filled with the organisation, AI system name, owner, status and last review date from the initiative; your template choices survive backup and restore.

A dedicated AI Act surface: a plain-language Explanation tab (scope, risk classes, roles, Annex III, GPAI, core obligations, penalties, milestones), a Portfolio Readiness view (classification, documentation, oversight, logging, conformity per initiative), per-initiative applicable-articles list and a phased-application timeline. The Evaluate page gains a formal classification block (Role / Annex III / Art. 5 prohibited practices / Art. 50 transparency / GPAI flags) and a soft-sync hint that flags contradictions with the legacy Risk Tier.

End-to-end stage-gate process across Idea → Pilot → Scaling → In Production with per-transition gate checklists, evidence stamps and a Promote / Bypass decision log. A bypass is recorded only when an initiative is advanced without completing that gate — parking, retiring and moving back a stage are logged without one. Evidence on an already-passed gate can be refreshed in place, and the interval after which it counts as stale is an org setting. The Stage-Gate Report visualises the funnel with clickable initiative bubbles, colour-codes the three risks (bypassed, stale, never captured) and exports a full audit CSV (one row per initiative × transition × checklist item) for compliance review.

One engine, three portfolios. Switch the workspace mode in Settings to re-skin the entire console — dimensions, quadrants, sliders, prioritisation buckets, concentration cuts, board memo and Concept narrative — in English and German. Scoring math, snapshots and the board pack stay structurally identical.

Build any portfolio view on demand: select two axes (Value, Feasibility, Strategic, Confidence, Budget, NPV, Y3 benefit, average score), choose what colours and sizes the bubbles, save and share the view. Designed for board-specific questions that don't fit a standard chart.

Portfolio health on one screen — funded vs. parked, score distribution, transitions at risk, governance hotspots and stale gate evidence. Designed for the weekly steering meeting and standing committee reviews.

A single source of truth for the portfolio. Each initiative captured with owner, business unit, lifecycle status, tags, regulatory tier and a 0–100 score across all four steering dimensions. Inline edit and bulk update let teams maintain dozens of initiatives without spreadsheet drift.

Business Impact × Feasibility as a live bubble chart, coloured by governance band, with Scale / Prove value / Assist / Stop quadrant counts updated in real time. The recommendation recalculates as inputs change, so steering discussions stay anchored to current data.

Strategic impact × feasibility as bubbles sized by Year-3 benefit, coloured by estimate confidence, with collision-aware labels for boardroom readability. Surfaces how much value rides on weak positions and low-confidence business cases before they affect the run rate.

A deterministic, explainable ranked queue from weighted multi-criteria scoring, with explicit upstream/downstream dependency tracking. V4.2 adds cut-line exclusions for must-do initiatives with cascade warnings on impacted dependants, one-click Make-it-fit to lift parked rows (and their upstream chain) above the cut-line, and named portfolio filters so every view captures funding for the active subset. Every position is reproducible and defensible in a review.

Every parked row in the ranked sequence carries a Zap button. One click promotes the row and all its transitive upstream dependencies above the cut-line, then iteratively raises the budget trade-off and per-skill FTE deltas by the exact gap needed until the target is funded. Bumps are local what-if state — original capacity envelope and skill catalogue stay untouched and the change is fully reversible.

Automatic governance-band assignment per initiative, plus concentration cuts by business unit and operating model. Provides early visibility on dependency on a single unit, model or vendor for risk and compliance review.

CapEx, OpEx p. a. and a P10/P50/P90 benefit range per initiative with a configurable Y1 → Y2 → Y3 ramp profile, confidence rating and risk-adjusted NPV. Rolled up to portfolio totals, net 3-year value, Y3 benefit pool, Value-at-Stake (P10–P90) and Σ raNPV — visible on both the Portfolio Map and the Steering KPIs cockpit.

Freeze the entire portfolio state at any point in time. Compare quarters, document decisions, and demonstrate what the board approved versus what was delivered. Provides a reproducible record for governance and audit.

One-page Executive Memo (TXT/MD) plus a multi-page PPTX board pack covering Portfolio Economics, Capacity, Stage-gates, governance and concentration. Boardroom-ready in EN or DE.

Full JSON backup of the workspace — initiatives, views, scenarios, snapshots, gate evidence and decision log — plus TSV import/export for bulk edits in Excel. Produces a complete audit trail suitable for internal audit.

Full English and German parity across UI, methodology, narratives, memos and exports. Switching language updates the entire console, including every page of the board pack.

Dedicated page that translates the portfolio into seven organisational readings — the governance work it creates, operational dependence, delivery readiness, scale headroom, operating-model shift, process automation and pipeline maturity — each with the inputs behind it and a plain-language takeaway, so the board can see what the portfolio demands of the organisation.

A dedicated page with HHI scores per cut, a business-unit × AI-category cluster heatmap and drill-downs into over-exposed combinations — beyond the aggregate signal in the Governance band.

Single form to score one initiative end-to-end: 0–100 sliders with confidence, EU AI Act classification block, stage-gate roadmap, dependencies, costs, P10/P50/P90 benefit ranges — with soft-sync hints when fields contradict each other.

Per-mode Skill Catalogue with individual FTE caps. The Prioritisation cut-line treats per-skill caps as hard constraints: any initiative that would push a skill above its cap is parked with a Skill bottleneck badge — utilisation bars turn green / amber / red.

Each initiative captures explicit upstream / downstream dependencies in Evaluate. The Prioritisation cut-line treats them as a hard constraint: an initiative is only funded if all its active upstream dependencies are also funded (cascade), and a Quick Win is automatically demoted when it depends on a non-Quick-Win upstream.

Beyond freezing a state, two snapshots can be compared side by side — what scores moved, which initiatives were added or dropped, how the cut-line shifted between quarters.

Promote / Bypass decisions at stage-gates and gate-evidence stamps are persisted in the workspace state and round-tripped through the JSON backup — restore a backup and the full decision history comes back with it.

Prioritisation thresholds, stage-gate checklists and their review interval, AI Act review windows and reminder cadences are all editable in Settings — so the framework can be tuned to your portfolio without forking the code.

Self-contained demo portfolios per mode (AI / Digital / Innovation) load with realistic initiatives, dependencies and AI Act data — so new users can explore every view immediately without entering data.

Define named portfolio subsets with any combination of filters (business unit, status, tags, score ranges) and save them as reusable views. Saved filters persist across sessions, can be shared via URL, and integrate with the Prioritisation page so funding capture always reflects the active subset.

Flag individual initiatives as excluded from the capacity cut-line — useful for regulatory mandates or board-committed programmes. Exclusions trigger cascade warnings when dependant initiatives would fall below the line, and tooltip indicators on dependants make the knock-on impact visible at a glance.