What BMGRIP does

BMGRIP (legal entity: Bouw en van de Meerendonk B.V.) is a Utrecht-headquartered, Netherlands-focused compliance and information security consultancy that helps organizations achieve and maintain certifications against NEN 7510 (healthcare information security), ISO 27001, ISO 27701, ISO 9001, ISO 22301, ISAE 3402, and SOC 2, as well as compliance with the AVG/GDPR, BIO, NIS2, and the Dutch MedMij PGO framework. The firm operates three interlocking revenue lines: (1) certification consulting and implementation packages sold in three tiers (Helpen / Samen / Ontzorgen); (2) Professionals-as-a-Service providing legally mandated roles such as CISO, Security Officer, Privacy Officer, Functionaris Gegevensbescherming, Internal Auditor, and Quality Manager on an outsourced basis; and (3) the proprietary SmartManSys SaaS platform, which digitizes management-system maintenance through norm-practice coupling, smart templates, Statement of Applicability linkage, automated gap identification, and an integrated Audit Module.

The underlying technology is SmartManSys, a SaaS management system built around a unique norm-practice coupling layer that automatically maps regulatory changes (e.g., updates to NEN 7510) into centralized document management rather than requiring manual updates across multiple artifacts. The Audit Module supports norm-framework selection, functionary linking, interview planning with sample questions, findings capture linked to requirements with evidence, and conversion of findings into action plans assigned to responsible parties. SmartManSys is developed and maintained in-house by a named product owner (Marieke van Zuidam) and a senior development team (Steven Hofstede, Wesley Stam, Maarten van Kooten) using React and JavaScript on the front end. No public API, SDK, or third-party integrations are disclosed.

BMGRIP's go-to-market is sales-led and direct, anchored by free initial consultations (nulmeting / second opinion) and supported by a content-marketing engine of blog articles, downloadable whitepapers and checklists, a monthly newsletter, team-profile pages, and customer case studies. Pricing is quote-based and not publicly disclosed; example published benchmarks show NEN 7510 engagements running €9,000–€20,000 over the first three years, with internal audit or implementation work billed separately. The customer base of 1,500+ is concentrated in Dutch healthcare and IT/SaaS, with named logos including Niped, Innovattic, Jetmail, De Hoop GGZ, CVD, SignRequest, Klimaatroute, Konica Minolta, and Samhoud. Since 2024, BMGRIP has operated as part of the Kader Group, a 400-person QHSE conglomerate serving 100,000+ clients, which provides cross-sell into occupational health and safety, technical safety, and sustainability practices under the 'six Kader Kapitalen' framework.

Name

BMGRIP

Legal name

Bouw en van de Meerendonk B.V.

Website

https://bmgrip.nl

Company type

Private

Founded year

2004

Operating status

Operating

Headcount range

11–50 employees

Short description

BMGRIP is a Netherlands-based information security and compliance consultancy helping healthcare and IT organizations achieve and maintain certifications against NEN 7510, ISO 27001, AVG/GDPR, and related standards, via consulting, outsourced CISO/Privacy Officer services, and its proprietary SmartManSys SaaS platform.

Ownership category

akta.pro rank

Product category

Information Security & Compliance Consulting

NAICS

Management, Scientific, and Technical Consulting Services (5416), Computer Systems Design and Related Services (5415), Software Publishers (51321)

SIC

Services-Engineering, Accounting, Research, Management (8700), Services-Computer Programming, Data Processing, Etc. (7370)

akta.pro primary industry

Security Audits & Compliance (ISO 27001, SOC 2, PCI DSS, HIPAA, SOX) (BPAKADAC)

akta.pro secondary industries

Data Privacy, Consent & Compliance Management (HDAEADAG), Records Management, Information Governance & Retention (BPAEAPAO)

Keywords

• Information security consulting
• Privacy compliance services
• Management system software
• ISO certification advisory
• Healthcare compliance consulting

Headquarters

HQ city

Utrecht

HQ country

Netherlands

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure

Revenue model

1. Certification Consulting Services: Advisory and guidance for NEN, ISO, and ISAE certifications including gap analysis, risk analysis, implementation support, and certification preparation. Services include initial measurement (nulmeting), implementation packages, setup (inrichten), maintenance (onderhoud), and optimization.
2. Professionals as a Service: Providing legally required specialists such as CISO, Security Officer, Privacy Officer, Data Protection Officer (FG), Internal Auditor, and Quality Manager on a service basis.
3. SmartManSys Software: Digital solution for configuring and implementing management software. Software platform for streamlining processes related to information security, privacy, and quality management.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

BMGRIP helps organizations implement and maintain integrated management systems and obtain certifications for information security, privacy, quality, and business continuity. It delivers this through three integrated offerings: certification consulting (gap analysis, implementation, audits, and certification support for NEN 7510, ISO 27001, ISO 9001, ISO 27701, ISO 22301, ISAE 3402, and SOC 2), professionals-as-a-service (CISO, Security Officer, Privacy Officer, FG, Internal Auditor, Quality Manager), and SmartManSys, a proprietary SaaS management system platform that digitizes those same management systems.

Product overview

BMGRIP offers a portfolio of consulting services and a proprietary SaaS platform called SmartManSys for managing information security, privacy, quality, and business continuity. The core product is SmartManSys, a management system software with modules including an Audit module for conducting internal audits. Alongside the software, BMGRIP provides professional services (CISO-as-a-service, Privacy Officer, FG, Internal Auditor, Quality Manager), certification advisory and implementation, and training via the Academy. The integrated approach combines consultancy, digital tooling, and education to help organizations achieve and maintain compliance with standards such as NEN 7510, ISO 27001, and the AVG/GDPR.

Differentiator

Problem solved

Functional benefit

Brands

• SmartManSys: Digital management system software platform for managing compliance, certifications, audits, and process documentation according to ISO/NEN standards

Products and services

• SmartManSys SaaS management system software platform that enables organizations to manage information security, privacy, quality, and business continuity management systems in one integrated solution, with structured templates, norm-to-practice mapping, an Audit module, gap analysis, and action plan management. Designed for organizations seeking to digitize ISO/NEN compliance programs.
• BMGRIP Academy Custom training programs and workshops covering security, privacy, continuity, AI literacy, and compliance awareness. Includes dedicated courses such as Functionaris Gegevensbescherming training, employee awareness training, SmartManSys training, and NIS2 management training, delivered to client teams.
• Professionals-as-a-Service (CISO, Security Officer, Privacy Officer, FG, Internal Auditor, Quality Manager) Outsourced specialists covering legally required roles for NEN, ISO and AVG environments. Provides CISO-as-a-service, Security Officer, Privacy Officer, Functionaris Gegevensbescherming (Data Protection Officer), Internal Auditor, and Quality Manager on a service basis, including ongoing internal audit execution and management system maintenance.
• Certification Consulting (NEN 7510, ISO 27001, ISO 9001, ISO 27701, ISO 22301, ISAE 3402, SOC 2, BIO, Certificatieschema Arbodiensten, MedMij PGO) Project-based advisory and implementation services covering the full certification lifecycle: initial measurement (nulmeting), implementation packages (Helpen, Samen, Ontzorgen), setup, maintenance, optimization, and certification preparation for NEN, ISO, ISAE, and SOC standards as well as BIO government compliance and MedMij PGO.

Quantifiable outcome

• Trusted by 1,500+ customers in healthcare and IT
• +2 more outcomes

Named customers7 records

Segments4 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature3 records

Partnerships

One partnership is on record.

• Kader GroupcoreStrategic or Co-development PartnerBMGRIP merged with the Kader Group, gaining access to their QHSE (Quality, Health, Safety, Environment) consultancy expertise. The combined organization benefits from 400 colleagues and supports over 100,000 clients. BMGRIP now offers integrated expertise across the six Kader Kapitalen: employee wellbeing, occupational safety, technical safety, organizational quality, information security, and sustainability.

Scale indicators3 records

Recent moves7 records

Expansion highlights5 records

Direct peers

• Vanta: Global SaaS platform automating ISO 27001, SOC 2 and other compliance audits; competes directly with SmartManSys on the same software wedge for SMB certification workflows.
• ICTrecht: Dutch legal-tech/privacy consultancy (Amsterdam) providing AVG/GDPR, security, and IT-law compliance services to SMEs and IT companies — closest direct competitor in the Dutch niche consulting vertical BMGRIP serves.
• Drata: Automated GRC/compliance SaaS for SOC 2, ISO 27001, HIPAA — directly competitive on SmartManSys' product wedge with substantially greater scale and venture funding.

Emerging players

• ISAE 3402 / SOC reporting boutiques (e.g., AssuranceLab): Smaller assurance firms that, like BMGRIP, assist service organisations with ISAE 3402/SOC 2 readiness — comparable on the assurance pre-audit workflow.

Broad incumbents

• OneTrust: Global privacy/GRC platform offering consent, ISO 27001, and vendor-risk management — overlaps with SmartManSys and BMGRIP's AVG/GDPR practice at a much larger scale.
• DNV Business Assurance Netherlands: Major global certification body auditing ISO 27001 / NEN 7510 across the Dutch market — incumbent that BMGRIP prepares clients to feed into, and partial overlap with BMGRIP's broader assurance practice.
• PwC Nederland Risk Services: Big-4 risk, cybersecurity, and compliance practice competing for the same Dutch enterprise budget as BMGRIP, particularly in healthcare and public-sector ISO/AVG mandates.
• BSI Group Netherlands: Global certification and standards body with Dutch operations issuing ISO 27001 / NIS2 / ISO 9001 certificates — comparable incumbent that intersects with BMGRIP's implementation work.
• KPMG Nederland Risk & Compliance: Big-4 advisory practice delivering information-security, privacy and GRC consulting to large Dutch enterprises — overlaps with BMGRIP's regulated-industry work but at materially larger scale.

Regional players

• Securance (NL): Dutch information-security consultancy offering ISO 27001 implementation and CISO-as-a-service — direct regional peer in BMGRIP's core consulting vertical and target verticals.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/bmgrip
• LinkedInlinkedin.com/company/bmgrip

Compliance9 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles8 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about BMGRIP