RTFCT

EXPOSURE

Map your regulatory exposure.

Understand which AI regulations apply to your organization and when they take effect.

EXPOSURE ASSESSMENT

WHICH AI LAWS APPLY TO YOU?

Pick everything that fits. Results update as you click. Your answers never leave this browser.

WHERE YOU OPERATE OR HAVE USERS

Laws follow your users, not just your office.

YOUR INDUSTRY

Sector rules stack on top of AI laws.

WHAT YOUR AI DOES

Use case decides the risk tier.

YOUR ROLE

Builders carry more duties than users.

AI SYSTEMS IN PRODUCTION

TEST A PROMPT AGAINST THE LIVE INTERCEPTOR

Runs the real engine and Heart, judged as blocking mode would (EU rules). Nothing you type is stored or sealed.

0/2000

REGULATORY TIMELINE

When do these regulations take effect?

AI coverage is not a future problem. It is happening now, in waves. Understanding the timeline is critical to understanding your urgency.

WAVE 1

JANUARY 1, 2026

US state transparency laws take effect. California AB 2013 training-data disclosure, Illinois HB 3773, and the CCPA updates become enforceable.

AFFECTED ORGANIZATIONS

Organizations deploying AI that touches California or Illinois residents

URGENCY

IN FORCE

WAVE 2

AUGUST 2, 2026

EU AI Act Article 50 transparency obligations take effect, alongside California SB 942 content provenance. Chatbot identification and AI-generated content disclosure become mandatory.

AFFECTED ORGANIZATIONS

All organizations using AI systems accessible to EU users

URGENCY

IMMEDIATE

WAVE 3

JANUARY 1, 2027

Colorado SB 26-189 (ADMT) takes effect. Notice, disclosure, and opt-out for automated decision-making in consequential domains — the replacement for SB 24-205, repealed on May 14, 2026.

AFFECTED ORGANIZATIONS

Organizations operating in Colorado using AI for automated decisions

URGENCY

HIGH

WAVE 4

DECEMBER 2, 2027

EU AI Act Annex III enforcement. Full high-risk operator obligations for AI systems in education, employment, essential services, and certain other categories.

Deferred by Regulation (EU) 2026/1744 — EUR-Lex

AFFECTED ORGANIZATIONS

Operators of high-risk AI systems in EU and organizations serving EU users

URGENCY

HIGH

WAVE 5

AUGUST 2, 2028

EU AI Act Annex I enforcement. Full enforcement for safety-critical AI systems (medical devices, transportation, etc.).

AFFECTED ORGANIZATIONS

Operators of safety-critical AI systems in EU and organizations serving EU users

URGENCY

CRITICAL

EXPOSURE MATRIX

Your industry + jurisdiction = your exposure.

This matrix shows the coverage exposure for common industry and jurisdiction combinations. Find your cell to understand your likely obligations.

INDUSTRY / JURISDICTIONEUUSGLOBAL
HealthcareHIGH (EU AI Act + GDPR/EHDS)HIGH (HIPAA + State AI laws)CRITICAL
LegalHIGH (EU AI Act + ABA-equivalent)HIGH (ABA Rules + State AI laws)CRITICAL
FinanceHIGH (EU AI Act + DORA)HIGH (SEC/FINRA + State AI laws)CRITICAL
GovernmentHIGH (EU AI Act + Public sector rules)HIGH (FedRAMP + EO 14409)CRITICAL
Enterprise (General)MEDIUM (EU AI Act transparency)MEDIUM (State AI laws)HIGH
EducationMEDIUM (EU AI Act)LOW-MEDIUM (State AI laws)MEDIUM
Retail/E-commerceLOW-MEDIUM (EU AI Act transparency)LOW (State AI laws)MEDIUM
Media/EntertainmentLOW (EU AI Act transparency)LOW (State AI laws)LOW-MEDIUM

Note: This matrix provides general guidance only. Your specific exposure may vary based on your exact use cases, system classifications, and other factors. Consult with legal counsel for a definitive assessment.

UNDERSTAND YOUR EXPOSURE

Knowledge is the first step. Action is the next.

Now that you understand your regulatory exposure, it is time to take action. The Interceptor provides structural coverage for all four waves of enforcement.

BEGIN ONBOARDING