15 REGULATIONS. 4 CONTINENTS. ONE EVALUATION. — Colorado SB 26-189 (Jan 1, 2027) · EU AI Act (Phased) · NYC LL144 · SR 11-7 · Texas · California · South Korea · UK · China · GDPR — View all →
Regulations
United States — Federal
Banking & Lending (SR 11-7)Enforcing
United States — States
California — EmploymentEnforcing California — HealthcareEnforcing California — ADMT (CCPA)Jan 1, 2027 ColoradoJan 1, 2027 IllinoisEnforcing New York CityEnforcing TexasEnforcing
European Union
EU AI ActPhased EU — GDPR Article 22Enforcing
International
United KingdomEnforcing South KoreaEnforcing ChinaEnforcing CanadaWithdrawn BrazilDraft
View all regulations →
Tools
AI Exposure AssessmentFree AI Assurance Gap AnalyzerFree AI Risk MirrorFree AI Compliance TimelineFree Agentic AI Risk ChecklistFree AI Vendor Liability ScreenerFree AI Evidence Reliability ScreenerFree OMB M-25-21 ReadinessFree Government AI Failure MirrorFree AI Regulation CheckerFree AI Constitution BuilderFree
Tools overview →
Industries
Private sector
Employment & HR Workforce & Gig Background & Reporting Lending & Financial Insurance Fraud & Account Access HealthcareComing soon Housing Education
Government & public sector
Government & public sector Law enforcement Homeland & borders Immigration & visa Benefits & health Justice & defense State & local government
Industries overview →
Evidence Certification Certify Your AI
AVAAS · OMB M-25-21 Readiness Check

Your AI use case decides something about a person. M-25-21 says prove it is safe to.

OMB M-25-21 requires federal agencies to identify High-Impact AI and put minimum risk-management practices around it. This tool shows whether your use case is High-Impact, which practices attach, where the gaps are, and the 2026 deadlines you are already inside.

Free About 2 minutes No signup Private
This is a readiness aid, not legal or compliance advice. It reflects the High-Impact AI definition and minimum practices in OMB M-25-21 and its 2026 deadlines. Your CAIO and counsel own the determination. Confirm specifics against the memo and your agency policy.
The use case Step 1 of 2
Who are you running this for?
What does the AI output bear on?

Select all that apply. These are the areas M-25-21 presumes can be High-Impact.

How does the output drive the decision?
Is the use case operational, or still a pilot?
Which minimum risk-management practices are in place for it?

Select all that apply. These are the practices M-25-21 requires for High-Impact AI.

Is it in your agency AI use-case inventory with a risk determination?
How is the system's behavior evaluated?
Keep going, all free
Two more ways to see where you stand
Government
Government & public sector

How AI decisions play out across benefits, enforcement, immigration, and defense, and where independent evidence fits.

See the vertical →
Risk Mirror
AI Risk Mirror

See what has already gone wrong with government AI, from benefits algorithms to wrongful arrests, with sources.

Open the tool →

Exposure guidance shows the pressure. Certification is the evidence.

These free tools show you where you stand. AVAAS gives you documented, third-party evidence you can put in front of a regulator, a court, or a customer.

Certify Your AI →
Or email [email protected]