How a MedTech scale-up centralized its mandatory training after its funding round

A funding round – and suddenly every mandatory topic counts

With the closing of a funding round, a young MedTech scale-up grew noticeably within a short time – new teams, new roles, a faster pace. Along with the growth, however, came a growing list of statutory training and information obligations that until then had tended to be handled on the side within the founding team: data protection, information security and, as soon as AI systems are used, AI literacy under Article 4 of the EU AI Act (Regulation (EU) 2024/1689). On top of that came whistleblower protection: The Act for the Better Protection of Whistleblowers (HinSchG) does not require training but the establishment of an internal reporting office – for this office to serve its purpose, employees must be informed about the reporting channels. What was still manageable in a ten-person team became a little harder to keep track of with every new hire.

Investors who accompany such a round sooner or later also ask about precisely these topics: Are the statutory obligations met, and can this be proven? For a scale-up in this phase, this is not a theoretical risk but a concrete expectation you should be prepared for – especially because in the MedTech environment other regulatory evidence (for example on product approval) is already required on an ongoing basis, and compliance topics in the HR area should not add to the uncertainty.

Why spreadsheets reach their limits before anyone notices

In the founding team, manual tracking in Excel spreadsheets had proven its worth: one row per person, one column per topic, status updated by hand. The method works as long as a few people keep track of everything. As headcount grows, exactly that tips over: Who still has which training course open, when the next deadline expires, and whether proof actually exists can hardly be answered reliably any more unless someone actively maintains the spreadsheet.

Things got particularly tight in onboarding. New employees needed all relevant training courses from the start – with an increasing hiring pace, a point that is easily overlooked when assignment is done manually. For a team that actually wanted to invest its energy in product and market, maintaining the spreadsheets tied up HR time that was missing elsewhere. There was also a structural problem: Responsibility for the spreadsheet lay with a single person in the founding team – if this person was absent or otherwise occupied, maintenance stalled without anyone noticing at first.

Why a ready-made solution instead of in-house development

An obvious option would have been to develop the tracking further internally – a better spreadsheet template, a small internal application. For a scale-up whose development capacity is dedicated to the actual product, however, this would have meant diverting resources from the core task to solve a side problem. Instead, the search was for an already fully rolled-out solution, ready for immediate use, that fits into everyday work without a separate IT project. It was also decisive that the content itself is continuously adapted to new legal situations, without anyone in the scale-up having to actively follow legislative changes and revise the training materials on their own.

A note on our own behalf: Bridgly is the provider of the training platform described in this case study. With Bridgly's Compliance Basics package, the scale-up chose a platform that brings together the mandatory topics defined in the project in one place, without a separate system having to be operated or a separate application having to be built for each topic.

Four mandatory topics, one system

Whistleblower protection, data protection, information security, and AI literacy have since been running through the same learning environment. Each topic comes with its own content requirements – from the reporting structure for whistleblower protection to the secure handling of personal data to the fundamentals of AI literacy – but technically and organizationally they all run through the same access. Switching between different tools and maintaining participant lists twice are no longer necessary.

Built in automatically: onboarding

New employees are automatically assigned the training courses intended for their role when they join. Coverage thus grows by itself with every new hire, without HR having to follow up on the assignment manually. The employees already on staff at the time of the switch were also recorded once, so that no part of the workforce was lost sight of.

Proof that is immediately at hand when it matters

Every training completion is logged with person, topic, and date. In an audit – whether by a supervisory authority, as part of a certification, or at the request of investors in the course of a due diligence review – the records can be presented without searching, instead of first having to be compiled from scattered spreadsheets.

What has changed in day-to-day work since then

The most noticeable difference lies not in a single key figure but in the shift of effort: Instead of maintaining spreadsheets and chasing deadlines by phone, the system monitors the assignment, and HR only intervenes in exceptional cases. The training topics rolled out in the project have since been running through the same system, and every new team member is automatically assigned these topics without anyone having to trigger the assignment manually. Which mandatory topics apply in an individual case depends on the respective legal requirements and was defined jointly in advance.

For the founding team, this means one thing above all: Attention that would otherwise have gone into managing spreadsheets stays with the core business – in the knowledge that the mandatory topics will not be left undone and, if in doubt, are reliably documented. A task that previously depended on a single person has become an ongoing process that continues even when that person is busy with other things. And because the system is not tied to a specific team size, nobody has to rethink the topic of mandatory training in the next growth phase.

Three principles that can be transferred to other scale-ups

• Consolidate early instead of cleaning up later. If you centralize mandatory training from the start, you avoid duplicate maintenance in several spreadsheets, which otherwise grows along with the team.
• Automate assignment instead of chasing it. Automatic assignment on joining closes gaps in onboarding that are most likely to arise with manual maintenance.
• Think about proof from the outset. Dated, person-specific records can be presented during audits, certifications, and investor inquiries without any search effort, provided the logs are maintained and retained.

Further examples of how organizations implement their mandatory training with Bridgly are collected in the case studies section.

Which mandatory training courses do fast-growing companies need?

Depending on the activity, typically data protection (GDPR), information security and – when AI systems are used – AI literacy under Art. 4 of the EU AI Act. The HinSchG does not require separate training but an internal reporting office; employees must, however, be informed about the reporting channels. Which topics are mandatory in an individual case depends on the industry, company size, number of employees, and the systems used, and should be checked individually.

How do you keep track during rapid growth?

What works is consolidating the relevant mandatory topics on one platform with automatic assignment during onboarding. This avoids duplicate maintenance in several separately operated systems, and new employees automatically receive their mandatory topics from the start – there is no need for HR to trigger anything manually, regardless of how quickly the team grows in a growth phase.

What does reliable training documentation mean?

Documentation is reliable when every training completion is logged with person, topic, and date and can be retrieved immediately in the event of an audit. It serves as proof to supervisory authorities, as part of a certification, or in response to inquiries from investors in the course of a due diligence review after a funding round. The prerequisite is that the logs are continuously maintained and retained.

Can such a system scale with team growth?

Yes. Because new employees are automatically assigned to the appropriate training courses, coverage grows along with the workforce with significantly less administrative effort. This also applies when hiring increases significantly within a short time, as is often the case after a funding round – a situation in which manually maintained spreadsheets can hardly keep up.

• Whistleblower Protection Act (HinSchG) – Act for the Better Protection of Whistleblowers, gesetze-im-internet.de (as of 9 Jul 2026)
• Regulation (EU) 2024/1689 (EU AI Act), Art. 4 – AI literacy, EUR-Lex (as of 9 Jul 2026)
• Featured image: AI-generated; labeled "Created with AI" as an overlay in line with Art. 50 EU AI Act. Proof of license/creation will be added during image production (provider/date).