Colorado’s new AI Act is here.
Prove your business is ready.
FAIIR is the independent compliance certification for businesses deploying covered ADMT in Colorado. One assessment, one written report, ongoing monitoring — built around the disclosure and human-review duties in Senate Bill 26-189.
Free 30-min scoping call · Fixed-fee engagement · Independent standard
The Stakes
Colorado’s 2026 rewrite of its AI law is the most far-reaching state AI law in the U.S.
It imposes affirmative duties on the deployers of covered ADMT — not just the developers. If your business uses AI to decide who gets hired, approved, admitted, insured, or served, SB 26-189 reaches you.
Enforcement starts January 1, 2027
Colorado's Attorney General has exclusive authority to enforce SB 26-189 against developers and deployers of covered ADMT. A 60-day cure period applies until 2030 — and disappears after that.
The law applies broadly
Any business using ADMT to materially influence consequential decisions about education, employment, residential real estate, lending, insurance, healthcare, or government services is a deployer under the statute.
Most businesses have no plan
Pre-use notices, 30-day adverse-outcome notices, meaningful human review, developer documentation, and 3-year recordkeeping are all required. Most Colorado businesses do not yet have any of these in writing.
FAIIR is an independent compliance certification built for Colorado businesses.
FAIIR organizes responsible AI use into five pillars — Fitness for purpose, Accountability, Integrity of data, Informed use, and Risk management — with 41 documented pass/fail controls underneath. A FAIIR-certified business has been assessed against that published standard by FAIIR, LLC, mapped to the specific duties SB 26-189 imposes, and maintains it through ongoing monitoring. The deliverable is documented, evidence-based proof of reasonable care — not a generic audit checklist.
Read the full framework — the five pillars, in plain languageThe Framework
The five pillars of FAIIR.
F-A-I-I-R: every assessment scores your business against the same five pillars, mapped to the specific duties Colorado’s AI Act imposes.
Fitness for purpose
“Is this AI actually suited to the task you're using it for?”
A register of every AI system in use, what each is authorized for, and what it must never be used for. Under SB 26-189, this is where covered-ADMT classification and plain-language system reviews live.
Accountability
“When something goes wrong, who owns it — and was that decided in advance?”
A named AI officer, a decision log, and vendor contracts reviewed against the statute's developer-documentation duties — so you know who indemnifies you before you need them to.
Integrity of data
“What goes into the AI, where does it go, and how long does it live there?”
Written rules on what data may enter which tool, training-data opt-outs configured, and retention terms documented. The pillar most businesses fail first.
Informed use
“Do your employees and customers actually know what's going on?”
An acknowledged AI use policy, documented training, and the disclosures SB 26-189 makes mandatory: pre-use notices and templated 30-day adverse-outcome notices, backed by meaningful human review.
Risk management
“If it goes wrong, will you know, contain it, and be able to prove what you did?”
A risk register, an incident playbook, and a 3-year recordkeeping framework that survives an AG cure notice. This is where carriers and regulators actually look.
Go deeper
Read the full framework.
All five pillars in plain language — the 41 pass/fail controls, what a certification letter does (and doesn’t) mean, and what FAIIR is benchmarked against.
Pricing
One assessment. Ongoing peace of mind.
Start with a one-time, fixed-fee readiness assessment. Stay certified with an ongoing membership. Three sizes of each — pick what fits the AI you actually run.
Step 1 · One-time assessment
Pick the assessment that fits your footprint.
All tiers fixed-fee. Final scope confirmed on a free 30-minute discovery call before any engagement letter is signed.
FAIIR Assessment — Starter
For SMBs with one or two AI systems making consequential decisions.
Fixed fee for 1–2 in-scope ADMT systems, single business unit. Scoped on a free 30-min discovery call.
- ADMT inventory and covered-ADMT classification (up to 2 systems)
- Written system review (1 per covered ADMT)
- Gap analysis mapped to SB 26-189 duties
- Draft pre-use notice and 30-day adverse-outcome notice templates
- Vendor contract review (up to 5 agreements)
- Meaningful human-review process documentation
- Final report with prioritized remediation roadmap
- FAIIR certification letter on completion
- Typical delivery: 3 weeks
FAIIR Assessment — Professional
For growing teams running multiple AI-driven workflows.
Fixed fee for 3–5 high-risk systems. Includes bias-audit methodology and a board-ready executive summary.
- Everything in Starter, plus:
- Up to 5 written ADMT system reviews
- Vendor contract review (up to 10 agreements)
- Disparate-impact monitoring methodology + first pass
- Board-ready executive summary + risk register
- Stakeholder workshop (1 hour, virtual)
- Priority delivery: 2–3 weeks
FAIIR Assessment — Enterprise
For multi-BU operators and regulated-industry deployers.
Custom scope for 6+ covered ADMT systems, multiple business units, or regulated industries (healthcare, finance, insurance, education, housing, or essential government services).
- Everything in Professional, plus:
- Unlimited ADMT system reviews and vendor reviews
- Multi-business-unit scoping and notice rollout
- Dedicated engagement lead
- Custom disparate-impact working sessions with your data team
- Expert-witness-quality documentation
- White-glove delivery: 4–6 weeks
- Quarterly partner debriefs through Year 1
Step 2 · Ongoing membership
Stay certified as the rules — and your AI — keep changing.
FAIIR Membership — Standard
Stay certified. Light-touch monitoring for 1–2 AI systems.
$490/year · save $98 (17% off) vs. monthly
- Coverage for 1–2 covered ADMT systems
- Quarterly notice + process refresh + re-certification review
- Regulatory update briefings when SB 26-189 guidance issues
- Email attorney Q&A — 1 business day response
- Recordkeeping templates and decision-log guidance
- 5 vendor contract spot-checks per year
- Ava AI legal assistant access
- Cancel anytime
FAIIR Membership — Plus
For teams running multiple systems who want faster turnarounds.
$1,490/year · save $298 (17% off) vs. monthly
- Coverage for up to 5 covered ADMT systems
- Monthly notice + process refresh, ad-hoc updates when guidance issues
- Email + chat attorney Q&A — same-day response
- 15 vendor contract spot-checks per year
- Consumer complaint / AG inquiry coordination — same-day engagement
- Quarterly virtual business review with your attorney
- Priority Ava queue
- Annual re-certification audit included (a $1,250 value)
- Cancel anytime
FAIIR Membership — Enterprise
Unlimited coverage, dedicated attorney, custom SLA. Talk to us.
Annual contract. Pricing scoped to your AI footprint.
- Unlimited systems covered across all business units
- Continuous monitoring + proactive regulatory briefings
- Dedicated attorney with custom SLA (same-day standard)
- Unlimited vendor contract reviews
- 24/7 incident response hotline
- Quarterly on-site or virtual partner reviews
- Custom board reporting and compliance dashboards
- Annual re-certification audit included
- Annual contract
Annual re-certification
$1,250/year structured review to keep your FAIIR letter current after Year 1. Lighter touch than the full assessment, focused on what changed. Bundled free into Plus and Enterprise membership.
FAIIR certification assessments and memberships are provided by FAIIR, LLC, an independent compliance company. FAIIR, LLC is not a law firm; certification is not legal advice and does not create an attorney-client relationship. Membership benefits described as attorney services — including attorney Q&A, quarterly attorney reviews, and dedicated-attorney support — are legal services provided by Available Law, LLC, a separate Colorado-licensed law firm, under its own engagement agreement.
How it works
From discovery call to certification in three to six weeks.
Free discovery call
30-minute video call to identify the AI systems your business deploys, confirm which qualify as covered ADMT under SB 26-189, and scope the assessment. No obligation.
Fixed-fee engagement
You receive a written engagement letter with a fixed fee within one business day. Payment via Stripe or wire. Work begins once the engagement is signed.
Document review & interviews
Share existing vendor contracts, privacy policies, ADMT inventories, and any prior consumer-notice language. Short interviews with your team leads covering how AI is used and overseen day-to-day.
Gap analysis & remediation
Structured gap analysis against every SB 26-189 duty. Prioritized remediation roadmap. Draft pre-use notice, adverse-outcome notice template, and meaningful human-review workflow.
Certification & ongoing monitoring
Written FAIIR certification letter and final report. Optional ongoing membership keeps policies current, tracks regulatory changes, and includes attorney Q&A delivered by Available Law, LLC under a separate engagement.
Not sure if you’re ready?
Start with the free 2-minute readiness check.
Ten questions mapped to Colorado SB 26-189. Get a personalized score and gap analysis before deciding whether a full assessment is the right fit.
Take the free readiness checkFrequently asked
Questions Colorado businesses ask before booking.
Your AI is already deployed.
Your compliance shouldn’t be optional.
Book a free 30-minute discovery call. We’ll identify your covered ADMT systems, walk through the SB 26-189 duties that apply, and scope a fixed-fee FAIIR assessment for your business.