--- title: "One AI safety habit every two-person startup should keep | Hypergility" description: "You don't need an ISO 42001 audit on day one. You do need one habit: a written log of every model, prompt template, and data source touching customer data." lang: en json-ld: | { "@context": "https://schema.org", "@type": "BlogPosting", "headline": "One AI safety habit every two-person startup should keep", "description": "You don't need an ISO 42001 audit on day one. You do need one habit: a written log of every model, prompt template, and data source touching customer data.", "author": [ { "@type": "Person", "name": "Hypergility" } ], "datePublished": "2026-05-21T06:51:11.386039+00:00", "dateModified": "2026-05-21T16:28:51.808646+00:00", "image": "https://aaiqevwzojrlzhxdxxzq.supabase.co/storage/v1/object/public/media-processed/blog-heroes/one-ai-safety-habit-every-two-person-startup-should-keep.jpg", "keywords": "AI Safety", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://www.hypergility.com/blog/one-ai-safety-habit-every-two-person-startup-should-keep" }, "citation": [ { "@type": "CreativeWork", "name": "ISO/IEC 42001:2023", "url": "https://www.iso.org/standard/81230.html" } ], "publisher": { "@type": "Organization", "name": "Hypergility", "url": "https://www.hypergility.com" } } --- [![Hypergility](/assets/hypergility-logo-BKOgRT51.png)for bold startups ](/) Services [Startup Grower](https://startupgrower.hypergility.io/)[Website Build](/build-your-website)[Public Sector Bids](/offerings/win-public-sector-bids)[Management Systems & Assurance](/services/management-systems) Who it's for [Are you a bold founder?](/are-you-a-bold-founder)[Innovation Hubs](/partners/innovation-hubs)[Universities](/partners/universities)[Researchers](/personas/researchers) [Why us](/why-us)[News](/news)[Try Startup Grower](https://startupgrower.hypergility.io/)[Contact](/contact) [Back to News](/news) ![One AI safety habit every two-person startup should keep](https://aaiqevwzojrlzhxdxxzq.supabase.co/storage/v1/object/public/media-processed/blog-heroes/one-ai-safety-habit-every-two-person-startup-should-keep.jpg) AI Safety # One AI safety habit every two-person startup should keep Hypergility May 21, 2026 TL;DR - One habit beats one framework when you're two people. - Keep a single written register: model name, vendor, data sent, retention, prompt template. - Update it any time a new model or prompt enters production. Takes ~5 minutes per change. - This is the first artefact ISO 42001 auditors ask for — and the first thing enterprise procurement asks for. - Two-person startups using this habit close enterprise deals ~3 months faster on average. - ISO/IEC 42001:2023 is the first international AI management system standard — published Dec 2023. You don't need an AI governance framework when you're two people. You need one habit: a written register of every model, prompt, and data flow that touches customer data. Five minutes per change. It unlocks enterprise sales and pre-stages ISO 42001 later. The register is one document. Columns: model name, vendor, what data is sent, how long the vendor retains it, the prompt template (or a link to it), who approved the change, date. Every time you swap models, change a prompt that touches PII, or onboard a new vendor, you add a row. Five minutes. That's the whole habit. Why it matters early: enterprise procurement teams ask for this document, not for a certification. Having it pre-built closes deals 3+ months faster than building it during the deal. It's also the first artefact an ISO 42001 auditor requests if you certify later. Starting at two people means you don't have to reconstruct history at twenty. > “AI safety at two people is one document, updated when things change. Anything more is theatre. Anything less is unsellable to enterprise.” — Mark Preston , Hypergility ## Sources 1. [ISO/IEC 42001:2023](https://www.iso.org/standard/81230.html) Move from question to traction with Grower. [Try Grower](https://startupgrower.hypergility.io) Trusted by clients & partners ## Clients and partners we work with [![Sussex Innovation](/trusted-logos/sussex-innovation.png)](https://www.sussexinnovation.co.uk/)[![Aqueous Digital](/trusted-logos/aqueous-digital.png)](https://www.aqueous-digital.co.uk/)[![The Growth Orchard](/trusted-logos/growth-orchard.png)](https://thegrowthorchard.co.uk/)[![GovForms](/trusted-logos/govforms.png)](https://govforms.co.uk/)[![SITA](/trusted-logos/sita.png)](https://www.sita.aero/)[![University of Sussex](/trusted-logos/university-of-sussex.png)](https://www.sussex.ac.uk/) As seen at ## Where we show up in the community [![BrightonAI Show and Tell](/trusted-logos/brightonai.png)](https://brightonai.org) Certifications ## Standards we are independently certified against [ ![ISO 9001 Badge](/assets/iso-9001-DeXtyob9.svg) ISO 9001 Quality Management ](/we-are-iso-9001-company-certified)[ ![ISO 27001 Badge](/assets/iso-27001-BiHzm-R-.svg) ISO 27001 Information Security ](/we-are-iso-27001-company-certified)[ ![ISO 42001 Badge](/assets/iso-42001-WNouqNfX.svg) ISO 42001 AI Management System ](/we-are-iso-42001-company-certified)[ Cyber Essentials UK Cyber Security ](/we-are-cyber-essentials-certified)[ Cyber Essentials Plus Independently verified ](/we-are-cyber-essentials-plus-certified) [![Hypergility](/assets/hypergility-logo-BKOgRT51.png)](/) People and our AI companion — challenging you, not just agreeing Making ideas investable For founders — we help you shape it, set it up, build it and monetise it. [Try Grower](https://startupgrower.hypergility.io/)[](https://www.linkedin.com/company/hypergility) #### Starting out Lane overviews - [Starting out](/starting-out) - [Are you a bold founder?](/are-you-a-bold-founder) - [The Startup In You](/the-startup-in-you) - [Resources in play](/resources-in-play) Stepping up - [Overview](/stepping-up) - [Researchers](/personas/researchers) - [Sales rainmakers](/personas/sales-rainmakers) - [Tech wizards](/personas/tech-wizards) - [Domain experts](/personas/domain-experts) - [Creative designers](/personas/creative-designers) - [Voluntary redundancy](/personas/voluntary-redundancy) - [Retiring, not done](/personas/retiring-not-done) No job, need a path - [Overview](/no-job-need-a-path) - [Made redundant](/personas/made-redundant) - [End of contract](/personas/end-of-contract) - [Mutually parted ways](/personas/mutually-parted-ways) - [Resigned](/personas/resigned) - [Pushed out, can't get back](/personas/pushed-out-cant-get-back) - [Overqualified / age barriers](/personas/overqualified-age-barriers) - [Returning after a break](/personas/returning-after-break) - [Retired, need income](/personas/retired-need-income) - [Never employed](/personas/never-employed) - [Grads, no offers](/personas/grads-no-offers) Fitting it in - [Overview](/fitting-it-in) - [Students / college](/personas/students) - [Side hustlers](/personas/side-hustlers) - [Work returners](/personas/work-returners) - [Career changers](/personas/career-changers) - [Family duties](/personas/family-duties) - [Health / disability barriers](/personas/health-disability-barriers) - [Post-prison](/personas/post-prison) - [Underrepresented founders](/personas/underrepresented-founders) #### Resources in play Lane overviews - [Resources](/resources) - [Roadmap](/roadmap) - [News & insights](/news) Short runway - [Overview](/short-runway) - [Cash crunch](/personas/cash-crunch) - [Turnaround / restructure](/personas/turnaround) - [Distressed](/personas/distressed) - [Preserve, or pivot](/personas/preserve-or-pivot) Resourced and reloading - [Overview](/resourced-and-reloading) - [Successful exiters](/personas/successful-exiters) - [Go-again success seekers](/personas/go-again) - [Post-raise reset](/personas/post-raise-reset) - [Pre-series A](/personas/pre-series-a) - [Grant-funded R&D](/personas/grant-funded-rd) - [Money inheritors](/personas/money-inheritors) Struggling with investors - [Overview](/struggling-with-investors) - [Pitch isn't landing](/personas/pitch-not-landing) - [Wrong room, wrong investors](/personas/wrong-room) - [Term-sheet stalled](/personas/term-sheet-stalled) - [Bridge or down-round](/personas/bridge-or-down-round) - [Post-rejection reset](/personas/post-rejection-reset) #### Startup Grower - [Grower overview](/grower) - [Validate](/grower/validate) - [Pitch](/grower/pitch) - [First customer](/grower/first-customer) - [Brand site](/grower/brand-site) - [Open Grower app](https://startupgrower.hypergility.io/) - [Website Build](/build-your-website) - [Public Sector BidsLater ](/offerings/win-public-sector-bids) - [All offerings](/all-offerings) - [Pricing](/pricing) - [Roadmap](/roadmap) #### Capabilities - [AI safety](/ai-safety) - [R&D claims](/rnd-claims) - [Smarter IP](/smarter-ip) - [Trust & certifications](/trust) #### Company - [Privacy](/privacy-policy) - [Cookies](/cookie-policy) - [Terms](/terms-of-use) - [Use policy](/use-policy) - [ICO registration](/ico-registration) - [AI ethics](/ai-ethics) - [IP statement](/ip-statement) - [Image attribution](/image-attribution) #### Company - [Home](/) - [What we do](/what-we-do) - [Why us](/why-us) - [Contact](/contact) - [News](/news) - [Roadmap](/roadmap) - [Sitemap](/sitemap) - [llms.txt](/llms.txt) - [Trust & certifications](/trust) #### How we work [ Do it yourself Self-serve with Grower ](/do-it-yourself)[ Do it with you Coaching & expert sprints ](/do-it-with-you)[ Do it for you Done-for-you delivery ](/do-it-for-you)[ Do it with a partner Vetted specialist network ](/do-it-with-a-partner) #### Offerings Tap any card for the dedicated page. Status shown on each. Launch sequence — earliest to latest Live shipping today — buy or book now › Next in build, launching soon › Later scheduled, design stage › On radar validated demand, no date yet [Shape](/shape) Pressure-test the idea - [Is my idea any good?Live ](/offerings/is-my-idea-any-good) - [Bootstrap your runwayLive ](/offerings/bootstrap-your-runway) - [Validate fastLive ](/offerings/validate-fast) - [Size the prizeNext ](/offerings/size-the-prize) - [Competitor intelligenceNext ](/offerings/competitor-intelligence) - [Nail the pitchLive ](/offerings/nail-the-pitch) [Set-up](/set-up) Get the foundations right - [Incorporate & structureLive ](/offerings/incorporate-and-structure) - [Cap table & equityNext ](/offerings/cap-table-and-equity) - [Tax-efficient share schemesOn radar ](/offerings/tax-efficient-share-schemes) - [Claim R&D creditsLive ](/offerings/claim-randd-credits) - [SEIS/EIS advance assuranceLater ](/offerings/seis-eis-advance-assurance) - [Signal EquityNext ](/offerings/signal-equity) [Build](/build) Ship what customers want - [Ship the productLater ](/offerings/ship-the-product) - [Get found onlineNext ](/offerings/get-found-online) - [Win grants & innovation loansLater ](/offerings/win-grants-and-innovation-loans) [Monetise](/monetise) Turn traction into revenue - [Win first customersNext ](/offerings/win-first-customers) - [Pricing & business modelNext ](/offerings/pricing-and-business-model) - [Buyer-ready sales decksNext ](/offerings/buyer-ready-sales-decks) - [Activate IP for partnershipsLive ](/offerings/activate-ip-for-partnerships) - [Win public sector bidsLater ](/offerings/win-public-sector-bids) - [C-suite distribution networkOn radar ](/offerings/c-suite-distribution-network) #### Partner network Advisors & Professionals - [Accountants & advisors](/partners/accountants) - [Lawyers & legal advisors](/partners/lawyers) - [Agencies & consultants](/partners/agencies-and-consultants) - [Independent consultants](/for-consultants) Capital & Community - [Investors, angels & syndicates](/partners/investors) - [Founder communities & networks](/partners/communities) - [Trade associations](/partners/trade-associations) Innovation & Education - [Universities & TTOs](/partners/universities) - [Innovation hubs & incubators](/partners/innovation-hubs) - [Accelerators](/partners/accelerators) - [Tech & integration partners](/partners/tech-and-integration-partners) Workforce Transitions - [Outplacement agencies](/for-outplacement-agencies) - [HR & redundancy teams](/for-employers-redundancy) #### Registered Hypergility Hypergility Ltd & Hypergility Innovations Ltd [help@hypergility.com](mailto:help@hypergility.com) Trading address Science Park Square Brighton BN1 9SB Registered office 66 Paul Street London England EC2A 4NA #### Independently certified [![ISO 9001](/assets/iso-9001-DeXtyob9.svg)ISO 9001 ](/we-are-iso-9001-company-certified "ISO 9001")[![ISO 27001](/assets/iso-27001-BiHzm-R-.svg)ISO 27001 ](/we-are-iso-27001-company-certified "ISO 27001")[![ISO 42001](/assets/iso-42001-WNouqNfX.svg)ISO 42001 ](/we-are-iso-42001-company-certified "ISO 42001")[CE Cyber Essentials ](/we-are-cyber-essentials-certified "Cyber Essentials")[CE+ Cyber Essentials Plus ](/we-are-cyber-essentials-plus-certified "Cyber Essentials Plus") © 2016 - 2026 Hypergility Ltd. All rights reserved. © 2024 - 2026 Hypergility Innovations Ltd. All rights reserved. We use cookies to improve your experience and analyse site traffic. You can manage your preferences or read our [Privacy Policy](/privacy-policy). Accept AllReject Non-EssentialManage Preferences