One evaluation pipeline. Every regulation that matters.
AVAAS doesn’t just evaluate your AI system once and walk away. Five structurally independent validators provide initial evaluation with causal attribution, then sealed deployment verification ensures the AI running in production is the same system that was certified. If the deployment changes, the seal breaks and re-evaluation is required. Every finding maps to the applicable regulatory frameworks across whichever jurisdictions you operate in.
4 continents
in 2026
state report
Banking & Lending (SR 11-7)
Federal Reserve SR 11-7 and OCC 2011-12 require independent model validation for all material models. AI/ML models in lending, credit scoring, fraud detection, and trading are increasingly in examination scope. AVAAS structural independence exceeds the minimum SR 11-7 requirement.
View full details →California — Employment
California's Civil Rights Council regulations make bias testing evidence admissible in employment discrimination lawsuits. Having an evaluation is evidence of diligence. Not having one is evidence of negligence. Private right of action, class actions, uncapped compensatory and punitive damages.
View full details → EnforcingCalifornia — Healthcare
Four laws creating the most comprehensive healthcare AI regulatory stack in the US. SB 1120 prohibits AI-only coverage denials. AB 2575 would eliminate the vendor's "doctor should have caught it" defense. Criminal penalties for willful violations.
View full details → Jan 1, 2027Colorado SB 26-189
Replaces original Colorado AI Act (SB 26-189, repealed May 2026). Deployers of automated decision-making technology must provide pre-use notice, disclose adverse outcomes within 30 days, honor correction rights, and offer meaningful human review. AG enforcement only. Voids contract clauses shifting ADMT liability.
View full details → EnforcingIllinois
Illinois requires candidate notification and consent before AI analyzes video interviews, with expanded demographic impact reporting under HB 3773. Any employer recruiting Illinois candidates is subject regardless of where they're headquartered.
View full details → EnforcingNew York City
Annual independent bias audits required for any AEDT used for NYC jobs. Most auditors calculate selection rates and stop. AVAAS delivers causal decomposition that identifies why disparities exist. Penalties: $500–$1,500 per violation per person per day.
View full details → EnforcingTexas
The Texas Responsible AI Governance Act requires governance programs, impact assessments, and consumer transparency for high-risk AI. The Texas Attorney General has civil investigative demand authority. Energy, healthcare, financial services, and defense sectors all affected.
View full details →EU AI Act
The most comprehensive AI regulation globally. Annex III high-risk systems require conformity assessment with documented risk management, bias testing, and human oversight. Penalties up to €35 million or 7% of global annual turnover. AVAAS maps directly to Articles 9 through 15.
View full details → EnforcingEU — GDPR Article 22
EU citizens have the right to meaningful information about the logic of automated decisions that affect them. Most AI systems cannot provide this. AVAAS causal attribution generates individual-level causal explanations. Penalties up to €20M or 4% of global turnover.
View full details →United Kingdom
The UK regulates AI through existing sector regulators with real enforcement authority. The FCA governs AI in financial services, the ICO enforces UK GDPR automated decision-making, the MHRA governs AI medical devices. One AVAAS evaluation satisfies requirements across all five regulators.
View full details → EnforcingSouth Korea
South Korea's AI Act applies extraterritorially. Any AI system affecting Korean users is covered regardless of company location. Requirements include transparency, risk assessment, human oversight, and documentation.
View full details → EnforcingChina
China has the most active AI enforcement regime globally with four binding regulations already in effect. Any company selling AI-powered products or services in China faces immediate compliance obligations including consent, content labeling, user rights, and algorithm filing.
View full details → DraftCanada
Canada's proposed AI and Data Act establishes risk-based requirements for high-impact AI in employment, financial services, healthcare, and essential services. With $900 billion in annual US-Canada trade, AIDA will affect every US company selling AI-powered products into Canada.
View full details → DraftBrazil
Brazil's comprehensive AI bill creates a risk-based framework closely aligned with the EU AI Act. Impact assessments, individual rights to contest AI decisions, and mandatory incident reporting for high-risk systems. Latin America's largest economy.
View full details →Not sure which regulation applies to you?
Tell us about your AI system and we'll map it to every applicable regulation — then scope the evaluation accordingly.
Request evaluation