Comply · United States
Colorado AI Act (SB26-189)
US state law on high-risk AI and consequential decisions.
The Colorado AI Act (SB24-205 / SB26-189) regulates developers and deployers of high-risk AI systems that make or substantially factor into consequential decisions — such as in employment, lending, housing, insurance, healthcare, and education. It centers on a duty of reasonable care to protect consumers from algorithmic discrimination.
Who it applies to
Developers and deployers of high-risk AI systems affecting Colorado consumers' consequential decisions.
Key obligations
- Use reasonable care to avoid algorithmic discrimination
- Complete impact assessments for high-risk systems
- Provide consumer notice and an explanation of adverse decisions
- Maintain a risk-management policy and program
- Disclose to the attorney general on discovery of discrimination
How Maetra maps agents to Colorado AI Act
Maetra classifies which agents make consequential decisions, generates impact-assessment evidence in Comply, routes those actions through Govern for human oversight, and preserves the decision record in Audit.
In practice, Maetra:
- Scans and fingerprints each agent. Discover reads the agent’s code — its tools, data access and sensitivity, actions, model, and environment — into an evidence-backed profile tied to the exact file and commit.
- Decides what applies. That profile determines whether Colorado AI Act is in scope for the agent and which of its requirements apply.
- Auto-detects controls and surfaces gaps. Controls your code already satisfies are detected automatically from the scan; the rest become a clear list of gaps, each tied to the requirement and the evidence it still needs.
- Proves it and keeps it current. Close gaps with linked evidence or generated documents — reused across every framework the same control supports — and Maetra re-checks on each rescan and flags evidence that has gone stale.
Related frameworks
Prove Colorado AI Act compliance with Maetra
Classify your AI agents once and Maetra maps them to Colorado AI Act and every other framework it supports — generating the evidence and documentation, tracking gaps and deadlines, and sealing every decision in an immutable audit trail.