Colorado ADMT law
Colorado SB26-189 repeals and reenacts the state's requirements for developers and deployers of high-risk automated decision-making technology. The replacement requirements take effect January 1, 2027.
Regulatory Context · Supporting Resource
Regulations are no longer optional.
The regulatory environment around AI is now concrete: named laws, effective dates, and enforcement calendars. Companies without a defensible governance layer are taking on real exposure.
Last reviewed August 8, 2026.
The environment
Two dates already on the calendar.
EU AI Act
The EU AI Act uses a staged application schedule. Most provisions apply from August 2, 2026, while some obligations began earlier and others apply later.
Frameworks and standards
Use current primary sources.
The NIST AI Risk Management Framework provides a voluntary structure for managing AI risk. ISO/IEC 42001 defines requirements for an artificial intelligence management system.
These sources help teams frame governance work, but applicability and conformity decisions remain matters for qualified legal, compliance, and certification professionals.
What a governance layer provides
Mechanisms, not promises.
Ovatio Comply provides enforceable controls at the point where AI meets your systems:
- Stops risky AI requests before they reach your systems
- Blocks or masks sensitive data before it returns
- Holds high-impact actions for a human to approve
- Flags integration changes so they are reviewed, not silent
- Writes a tamper-evident log every auditor can verify
Where the responsibility sits
No software makes an organization compliant on its own, and Ovatio Comply is not a certification. What it provides is enforceable policy and tamper-evident evidence: the raw material of a defensible compliance posture. Your counsel and compliance team own the determination.