The Governance Roadmap
Coverage & delivery — what's live, what's being built, and what ships next.
17 frameworks
tracked across 4 stages
Live in product
7 frameworks
- EU / International
EU AI Act
World's first comprehensive AI regulation — role-differentiated obligations across every risk tier.
- U.S. Federal
NIST AI RMF 1.0
The primary U.S. voluntary framework; Govern, Map, Measure, Manage across the AI lifecycle.
- Voluntary
AIUC-1
Certification-based assurance purpose-built for agentic AI systems.
- International
ISO/IEC 42001
The first internationally certifiable AI management system standard.
- Brazil
Lei de IA do Brasil (PL 2338/2023)
Brazil's risk-based AI bill, modeled partly on the EU AI Act.
- Canada
OSFI Guideline E-23
Model risk management for Canada's federally regulated financial institutions.
- U.S. · Texas
TRAIGA — Texas Responsible AI Governance Act
Texas HB 149 — disclosure rules, prohibited practices, and an AI regulatory sandbox.
In active development
3 frameworks
- EU / International
EU GDPR — AI intersections
AI-specific transparency, explainability, and automated-decision rights under GDPR.
- U.S. Federal
SR 11-7 / OCC 2011-12
Model risk management for covered U.S. financial institutions.
- Japan
Act on Promotion of R&D and Utilization of AI-Related Technologies
Japan's first national AI statute — coordination-based governance, no direct penalties.
Shipping next
2 frameworks
- U.S. Federal
HIPAA — AI & automated decision intersections
Privacy, Security, and Breach rules mapped to AI processing of ePHI.
- U.S. · Colorado
Colorado AI Act — SB 26-189 (Revised)
Notice-and-transparency framework for automated decisions; effective Jan 1, 2027.
On the radar
5 frameworks- U.S. · New York
New York City Local Law 144
Bias-audit and candidate-notice rules for automated employment decision tools.
- U.S. · New York
New York RAISE Act (S6953B/A6453B)
Safety protocols and 72-hour incident reporting for frontier AI developers.
- U.S. · Illinois
Illinois Human Rights Act — AI Amendment (PA 103-0804)
Bars discriminatory AI in employment; adds notice and ZIP-code-proxy limits.
- U.S. · Connecticut
Connecticut CART Act (PA 26-15)
One of the most comprehensive state AI laws; staggered from Oct 1, 2026.
- U.S. · New York
New York AI & Privacy Legislation — 2026
Data-broker, children's-safety, and synthetic-content obligations enacted in 2026.
