Colorado’s new AI law is here: the ADMT Act.
Prove your business is ready.
FAIIR is an independent AI-governance standard — five pillars, 41 controls — aligned to the duties in the Colorado ADMT Act (SB 26-189, formerly the Colorado AI Act), the Chatbot Safety Act, and the Attorney General’s implementing rules. Certification is issued by FAIIR, LLC; Colorado law does not require or recognize any third-party certification.
Free 30-min scoping call · Fixed-fee engagement · Independent standard
The Stakes
Colorado’s 2026 rewrite of its AI law is one of the first comprehensive state ADMT-disclosure regimes in the U.S.
The ADMT Act imposes affirmative duties on the deployers of covered ADMT — not just the developers — and the Attorney General’s implementing rules will add the operational detail. If your business uses AI to decide who gets hired, approved, admitted, insured, or served, the ADMT Act reaches you.
Enforcement starts January 1, 2027
Colorado's Attorney General has exclusive authority to enforce the ADMT Act against developers and deployers of covered ADMT, with penalties up to $20,000 per violation. A 60-day cure period applies only where the AG deems cure possible — never for knowing or repeated violations — and it disappears entirely in 2030.
The law applies broadly
Any business using ADMT to materially influence consequential decisions about education, employment (employer–employee decisions), residential real estate, lending, insurance, healthcare, or essential government services is a deployer under the statute.
Most businesses have no plan
Pre-use notices, 30-day adverse-outcome notices, consumer data access and correction, meaningful human review, and 3-year recordkeeping are all required of deployers. Most Colorado businesses do not yet have any of these in writing.
Running a consumer-facing chatbot? A second law — the Colorado Chatbot Safety Act (HB 26-1263) — adds AI-disclosure, minor-protection, and suicide/self-harm crisis-protocol duties for chatbot operators starting January 1, 2027, with no size threshold. FAIIR’s Informed Use and Risk Management pillars cover those controls too.
Rulemaking is live
The Attorney General’s proposed ADMT & Chatbot Safety Rules (4 CCR 904-6) were filed August 11, 2026. Public comment is open through October 26, 2026 (submit by September 4 to shape the hearing draft), and the final rules take effect January 1, 2027 — carrying most of the operational detail. Comment at comments.coag.gov. FAIIR is submitting a public comment, and membership includes regulatory-update briefings as the rules are finalized.
FAIIR is an independent compliance certification built for Colorado businesses.
FAIIR organizes responsible AI use into five pillars — Fitness for purpose, Accountability, Integrity of data, Informed use, and Risk management — with 41 documented pass/fail controls underneath. A FAIIR-certified business has been assessed against that published standard by FAIIR, LLC, mapped to the specific duties the ADMT Act imposes, and maintains it through ongoing monitoring. The deliverable is documented, evidence-based proof of reasonable care — not a generic audit checklist.
Read the full framework — the five pillars, in plain languageThe Framework
The five pillars of FAIIR.
F-A-I-I-R: every assessment scores your business against the same five pillars, mapped to the specific duties Colorado’s ADMT Act imposes.
Fitness for purpose
“Is this AI actually suited to the task you're using it for?”
A register of every AI system in use, what each is authorized for, and what it must never be used for. Under the ADMT Act, this is where covered-ADMT classification and plain-language system reviews live.
Accountability
“When something goes wrong, who owns it — and was that decided in advance?”
A named AI officer, a decision log, and vendor contracts reviewed against the statute's developer-documentation duties — so you know who indemnifies you before you need them to.
Integrity of data
“What goes into the AI, where does it go, and how long does it live there?”
Written rules on what data may enter which tool, training-data opt-outs configured, and retention terms documented. The pillar most businesses fail first.
Informed use
“Do your employees and customers actually know what's going on?”
An acknowledged AI use policy, documented training, and the disclosures the ADMT Act makes mandatory: pre-use notices and templated 30-day adverse-outcome notices, backed by meaningful human review.
Risk management
“If it goes wrong, will you know, contain it, and be able to prove what you did?”
A risk register, an incident playbook, and a 3-year recordkeeping framework that survives an AG cure notice. This is where carriers and regulators actually look.
Go deeper
Read the full framework.
All five pillars in plain language — the 41 pass/fail controls, what a certification letter does (and doesn’t) mean, and what FAIIR is benchmarked against.
Pricing
One assessment. Ongoing peace of mind.
Start with a one-time, fixed-fee readiness assessment. Stay certified with an ongoing membership. Three sizes of each — pick what fits the AI you actually run.
Step 1 · One-time assessment
Pick the assessment that fits your footprint.
All tiers fixed-fee. Final scope confirmed on a free 30-minute discovery call before any engagement letter is signed.
FAIIR Assessment — Starter
For SMBs with one or two AI systems making consequential decisions.
Fixed fee for 1–2 in-scope ADMT systems, single business unit. Scoped on a free 30-min discovery call.
- ADMT inventory and covered-ADMT classification (up to 2 systems)
- Written system review (1 per covered ADMT)
- Gap analysis mapped to ADMT Act duties
- Draft pre-use notice and 30-day adverse-outcome notice templates
- Vendor contract review (up to 5 agreements)
- Meaningful human-review process documentation
- Final report with prioritized remediation roadmap
- FAIIR certification letter on completion
- Typical delivery: 3 weeks
FAIIR Assessment — Professional
For growing teams running multiple AI-driven workflows.
Fixed fee for 3–5 high-risk systems. Includes bias-audit methodology and a board-ready executive summary.
- Everything in Starter, plus:
- Up to 5 written ADMT system reviews
- Vendor contract review (up to 10 agreements)
- Disparate-impact monitoring methodology + first pass
- Board-ready executive summary + risk register
- Stakeholder workshop (1 hour, virtual)
- Priority delivery: 2–3 weeks
FAIIR Assessment — Enterprise
For multi-BU operators and regulated-industry deployers.
Custom scope for 6+ covered ADMT systems, multiple business units, or regulated industries (healthcare, finance, insurance, education, residential real estate, or essential government services).
- Everything in Professional, plus:
- Unlimited ADMT system reviews and vendor reviews
- Multi-business-unit scoping and notice rollout
- Dedicated engagement lead
- Custom disparate-impact working sessions with your data team
- Expert-witness-quality documentation
- White-glove delivery: three to six weeks
- Quarterly partner debriefs through Year 1
Step 2 · Ongoing membership
Stay certified as the rules — and your AI — keep changing.
FAIIR Membership — Standard
Stay certified. Light-touch monitoring for 1–2 AI systems.
$490/year · save $98 (17% off) vs. monthly
- Coverage for 1–2 covered ADMT systems
- Quarterly notice + process refresh + re-certification review
- Regulatory update briefings as ADMT Act rules and guidance issue
- Email attorney Q&A — 1 business day response
- Recordkeeping templates and decision-log guidance
- 5 vendor contract spot-checks per year
- Ava AI legal assistant access
- Cancel anytime
FAIIR Membership — Plus
For teams running multiple systems who want faster turnarounds.
$1,490/year · save $298 (17% off) vs. monthly
- Coverage for up to 5 covered ADMT systems
- Monthly notice + process refresh, ad-hoc updates when guidance issues
- Email + chat attorney Q&A — same-day response
- 15 vendor contract spot-checks per year
- Consumer complaint / AG inquiry coordination — same-day engagement
- Quarterly virtual business review with your attorney
- Priority Ava queue
- Annual re-certification audit included (a $1,250 value)
- Cancel anytime
FAIIR Membership — Enterprise
Unlimited coverage, dedicated attorney, custom SLA. Talk to us.
Annual contract. Pricing scoped to your AI footprint.
- Unlimited systems covered across all business units
- Continuous monitoring + proactive regulatory briefings
- Dedicated attorney with custom SLA (same-day standard)
- Unlimited vendor contract reviews
- 24/7 incident response hotline
- Quarterly on-site or virtual partner reviews
- Custom board reporting and compliance dashboards
- Annual re-certification audit included
- Annual contract
Annual re-certification
$1,250/year structured review to keep your FAIIR letter current after Year 1. Lighter touch than the full assessment, focused on what changed. Bundled free into Plus and Enterprise membership.
FAIIR certification assessments and memberships are provided by FAIIR, LLC, an independent compliance company. FAIIR, LLC is not a law firm; certification is not legal advice and does not create an attorney-client relationship. Membership benefits described as attorney services — including attorney Q&A, quarterly attorney reviews, and dedicated-attorney support — are legal services provided by Available Law, LLC, a separate Colorado-licensed law firm, under its own engagement agreement.
How it works
From discovery call to certification in three to six weeks.
Free discovery call
30-minute video call to identify the AI systems your business deploys, confirm which qualify as covered ADMT under the ADMT Act, and scope the assessment. No obligation.
Fixed-fee engagement
You receive a written engagement letter with a fixed fee within one business day. Payment via Stripe or wire. Work begins once the engagement is signed.
Document review & interviews
Share existing vendor contracts, privacy policies, ADMT inventories, and any prior consumer-notice language. Short interviews with your team leads covering how AI is used and overseen day-to-day.
Gap analysis & remediation
Structured gap analysis against every ADMT Act deployer duty. Prioritized remediation roadmap. Draft pre-use notice, adverse-outcome notice template, and meaningful human-review workflow.
Certification & ongoing monitoring
Written FAIIR certification letter and final report. Optional ongoing membership keeps policies current, tracks regulatory changes, and includes attorney Q&A delivered by Available Law, LLC under a separate engagement.
Not sure if you’re ready?
Start with the free 2-minute readiness check.
Ten questions mapped to the Colorado ADMT Act (SB 26-189). Get a personalized score and gap analysis before deciding whether a full assessment is the right fit.
Take the free readiness checkFrequently asked
Questions Colorado businesses ask before booking.
Your AI is already deployed.
Your compliance shouldn’t be optional.
Book a free 30-minute discovery call. We’ll identify your covered ADMT systems, walk through the ADMT Act duties that apply, and scope a fixed-fee FAIIR assessment for your business.