• Colorado Wants to Regulate Your AI — and You Are the Deployer

    Colorado's AI Act takes effect on June 30, and its deployer obligations apply to anyone who uses AI as a substantial factor in consequential decisions — including law firms. 'Legal services' is one of the statute's eight enumerated categories. Most of the legal profession has not grappled with the fact that it is on the regulated side of this law.

    Read more
  • The API Is Not a Compliance Strategy

    Using an LLM through an API rather than a consumer chatbot improves your data-handling posture — sometimes dramatically. But an API alone does not satisfy FERPA, HIPAA, or any other regulatory framework, and treating it as though it does mistakes a technical control for a legal one.

    Read more