How to Comply with Developer Documentation, Update Notices and Records — Colorado AI Act

SB 26-189 (replaced SB 24-205) · CO · Effective Jan 1, 2027

Upcoming

Summary, not legal advice. Developers of covered ADMT give deployers documentation (intended and harmful uses, training-data categories, limitations, instructions for use and human review), notify them of material updates, and keep records for 3 years (C.R.S. 6-1-1702).

Implementation steps

  1. Prepare the deployer documentation package.
  2. Set up a process to notify deployers of material updates.
  3. Retain records for 3 years.

Evidence needed

  • Documentation package
  • Update notices
  • Retention records

Passing criteria

  • Documentation provided to each deployer
  • Updates notified
Penalties: Penalty not stated. Enforced by Attorney General.

Get your full compliance roadmap

We map this requirement and every other to your AI systems. 14-day trial — card required, $0 until day 15.

Free compliance checkerorSee plans

← Back to Colorado AI Act · All regulations