Each card gives the rule, its status, the words that matter and our part in the work. Your agency makes the determinations; we provide the evidence and the documentation.
U.S. federal (executive agencies)Key date: April 3, 2025
OMB M-25-21: Accelerating Federal Use of AI through Innovation, Governance, and Public Trust
In force; rescinds and replaces M-24-10. Minimum practices for high-impact AI were due within 365 days (April 3, 2026).
“the intended purpose for the AI and its expected benefit, supported by specific metrics or qualitative analysis”
What we do: We produce the evidence an AI impact assessment asks for: the expected benefit against the current process, the costs and expected savings, the pre-deployment test results and the monitoring plan, and your agency's reviewers make the determinations.
Source: OMB M-25-21 (whitehouse.gov, PDF) (opens in a new tab) · Checked November 10, 2026
U.S. federal (executive agencies)Key date: April 3, 2025
OMB M-25-22: Driving Efficient Acquisition of Artificial Intelligence in Government
In force; rescinds and replaces M-24-18. Applies to contracts awarded from solicitations issued on or after September 30, 2025 (180 days after issuance) and to options exercised after that date; it does not apply to AI acquired as a component of a National Security System.
“Ensuring contracts permanently prohibit the use of non-public inputted agency data and outputted results to further train publicly or commercially available AI algorithms, consistent with applicable law, absent explicit agency consent”
What we do: Our contract terms keep your data out of model training without your written consent, keep your data and the work we build for you portable, make knowledge transfer a deliverable, and give a performance-based contract a pre-registered measure it can use.
Source: OMB M-25-22 (whitehouse.gov, PDF) (opens in a new tab) · Checked November 10, 2026
U.S. federal (executive agencies; LLM procurement)Key date: December 11, 2025
OMB M-26-04: Increasing Public Trust in Artificial Intelligence Through Unbiased AI Principles
In force (issued December 11, 2025); agency policies were due March 11, 2026, and existing LLM contracts should be modified, at the latest, before an option extends the period of performance. The memo ceases to have effect on December 11, 2027 unless the OMB Director provides otherwise.
“No later than March 11, 2026, agencies must update their policies and procedures to ensure that contracts for the procurement of LLMs include contractual requirements addressing compliance with the Unbiased AI Principles.”
What we do: For every model we deploy, we gather the vendor documentation your acquisition team requests under M-26-04, such as the acceptable use policy and model or system cards, and set up the user-reporting route your policy describes.
Source: OMB M-26-04 (whitehouse.gov, PDF) (opens in a new tab) · Checked November 10, 2026
U.S. federal (voluntary framework; named by Texas law)Key date: January 26, 2023
NIST AI Risk Management Framework (AI RMF 1.0) and the Generative AI Profile (NIST AI 600-1)
AI RMF 1.0 released January 26, 2023 and being revised under the AI Action Plan; NIST AI 600-1 released July 26, 2024.
“The AI RMF 1.0 is being revised as part of the White House AI Action Plan.”
What we do: We map the delivery to the NIST AI RMF and its Generative AI Profile, and keep the risk screen, the test results and the review records with your team.
Source: NIST AI Risk Management Framework (nist.gov) (opens in a new tab) · Checked November 10, 2026
U.S. federalKey date: April 13, 2026
2025 Federal Agency AI Use Case Inventory (OMB)
Published repository; summary as of April 13, 2026.
“3,611 individually-reported AI use cases (all stages of development)”
What we do: We turn an agency's inventory entries into a ranked roadmap with a business case for the use cases worth funding first.
Source: 2025 Federal Agency AI Use Case Inventory (github.com) (opens in a new tab) · Checked November 10, 2026
TexasKey date: January 1, 2026
Texas TRAIGA (HB 149): disclosure when a governmental agency's AI interacts with consumers (Bus. & Com. Code §552.051)
In force since January 1, 2026.
“shall disclose to each consumer, before or at the time of interaction”
What we do: Every public-facing agent we build for a Texas agency tells people they are talking to AI before the conversation starts, in wording your counsel approves.
Source: Texas TRAIGA §552.051 disclosure (capitol.texas.gov) (opens in a new tab) · Checked November 10, 2026
Texas (state agencies and local governments)Key date: September 1, 2025
Texas SB 1964: heightened scrutiny AI systems, the AI code of ethics and vendor duties (Gov. Code §§2054.003, 2054.702, 2054.703, 2054.708)
In force since September 1, 2025; DIR's implementing rules (1 TAC chapter 219: the AI code of ethics, the risk and impact assessments and the vendor risk-framework requirement) took effect March 18, 2026, and DIR publishes the standardized notice form (AI System Facts).
“A state agency that deploys or uses a heightened scrutiny artificial intelligence system or a vendor that contracts with a state agency for the deployment or use of a heightened scrutiny artificial intelligence system shall conduct a system assessment that outlines:”
What we do: When a system will make, or be a controlling factor in, a decision about access to a government service, we document whether it meets the heightened-scrutiny definition for your agency's inventory, draft the risk assessment DIR's rules ask for, write the impact assessment Texas asks of a state agency and its vendor (or the review a local government completes), and prepare DIR's standardized notice for your agency to publish.
Source: Texas SB 1964 (capitol.texas.gov) (opens in a new tab) · Checked November 10, 2026
U.S. (state and local governments)Key date: April 20, 2026
ADA Title II web and mobile accessibility rule: compliance dates extended (DOJ interim final rule)
IFR (91 FR 20902) effective April 20, 2026: 50,000 or more → April 26, 2027; under 50,000 and special districts → April 26, 2028; WCAG 2.1 AA stands as adopted in 2024. DOJ plans future rulemaking on the substance, and NFB v. DOJ, No. 1:26-cv-02007 (D. Md., filed May 21, 2026), which asks the court to vacate the extension, is pending.
“The compliance date for public entities with a total population of less than 50,000, or any special district government, is extended from April 26, 2027, to April 26, 2028.”
What we do: Public-facing apps, agents and dashboards we build for state and local governments are built and tested to WCAG 2.1 Level AA, and remediation against your compliance date becomes a costed line in the business case.
Source: ADA Title II web and mobile accessibility rule (govinfo.gov) (opens in a new tab) · Checked November 12, 2026