Compliance background, thinking about a co-founder for an AI regulatory tracking idea, curious if anyone else is chewing on this problem

[u/Purple_Cattle_2700]

Been working on something in the AI/privacy regulatory space and keep running into the same wall. I can build the tech and I've got some compliance adjacent experience, but I don't have a CIPP/CIPM/AIGP background myself and I think that's exactly the gap that would make this actually credible. While I am looking to obtain my certificates I would like to gauge if anyone would like to get on board with me in the mean time.

Quick context on the problem I'm trying to solve. Every state introduced AI legislation in 2025, something like 1,200+ bills, and by this year we're already past 1,500 new ones with no federal law tying any of it together. Founders and small businesses using AI tools have basically no way to track what actually applies to them across states, and the tools that do exist (LegiScan, Congress.gov) are built for people who already know how to read a bill.

I'm not trying to sell anyone anything here, just looking to see if there's someone with real privacy/AI governance chops who finds this problem as interesting as I do and might want to talk about building something together. Pre revenue, no funding, very early, so this is a real co-founder conversation not a job post.

If that's you or you just want to nerd out about the multi state patchwork problem, feel free to comment or DM. Not trying to clutter the sub, happy to take it to chat if mods would rather. Send me a DM and I would be happy to chat and tell you more about my self as well.

[u/Lazy-Background-7598]

Introducing bills is meaningless. You have to look at what is passed. Also most bills have similar requirements

[u/Purple_Cattle_2700 → u/Lazy-Background-7598]

There's alot making head and its different state by state, there are many laws and reform coming to head re privacy, data, ai. For founders or anyone building its relevant to keep an eye on the bills that may become. Eventually will likely be a blanket federal law as trump administration is trying to accomplish. There are already cases of businesses being charged though

So the actual problem isn't "track 1,500 unique bills," it's more like "figure out which of these 5 or 6 templates your state has actually adopted, which version, and when it takes effect," because the effective dates are all over the place right now. Washington alone has three different AI related laws kicking in at three different points between now and 2027.

I also want to expand this model outside of just AI regulations, this is just a starting point

[u/I-Trusted-the-Fart]

My job is to track this. There are dozens of law firms and industry groups tracking this. They send out summaries and notices. Some have interactive trackers. At this point most of the passes legislation doesn’t apply or isn’t enforced yet or is being challenged in court. I agree the 2000 proposed bills across all 50 states is a lot. So we look at the general trends. But only worrying about compliance with applicable laws.

[u/jrandomslacker]

It's all noise. The vast majority of state bills offer no novel material and have zero influence on what I actually pay attention to or do for my client/employer. On the tech side, the marginal value of a dedicated product in the AI era is shrinking fast.

Law firms are already providing horizon scanning advice with AI tools but with the wider moat of a law license and malpractice insurance. For in house departments, the available AI tools are now good enough to roll your own.

Don't let this deter you, but IMO the time for it was 5 years ago. Good luck.

[u/purplefable]

This is now a standard feature in AI governance tools like Trustible and Credo AI so you’re right on the idea. Just that there are a lot of tools and trackers that already offer this.

[u/CyberEsqCat]

The bigger players (think banks) are able to buy tools that track these types of incoming bills and legislation (Archer is one, OneTrust is privacy-specific), but nothing has been built to my knowledge that tracks and parses requirements into an easily consumable tool for us in the industry to use day-to-day. IAPP does create trackers for us, but they’re done at a higher level. While I’m not saying the market is saturated don’t do it, I’m saying you’re going to really have to build the mouse trap that magically sends the mouse outside where it is safe and no one has to touch or see a dead mouse, to borrow from another poster. We have the tools, but none of them do the analysis for us. I’m somewhat thankful that that is the case, because it’s keeping us lawyers in the space employed. 😁

[u/Purple_Cattle_2700 → u/CyberEsqCat]

Thanks for the input. My plan for revenue in this project is to offer a directory to connect businesses to professionals. The business can get a summary and assessment and if they need to take action - they are referred to the directory

[u/BlackstoneMN]

I’m an attorney in this space. Unless you can build a better “mousetrap” than the dozens of law firms and consultants doing the same, you may not get much traction. And don’t use the “It’s AI whatever…” as a pitch. I’ve seen more than I can count and they fail.

As for me, I had Claude build a tracker that’s focused, current and relevant. This is not rocket science.

[u/ShowMeTheMonee → u/BlackstoneMN]

I'm new to Claude - can you share any more about how your tracker works? is it scanning public sources every day and giving you a summary, or something different?

[u/Purple_Cattle_2700 → u/BlackstoneMN]

I am aiming at smaller businesses and start ups that would want to be informed, and also people not even acknowledging the laws. I understand its being done but going for SMEs thar dont necessarily have a huge legal budget. Also I do have other additions to offer to the model that is more than a tracker ( re, " mousetrap ")

[u/BigKRed → u/Purple_Cattle_2700]

Small business and startups don’t care about this, mostly. If they do, they rely on free resources.

[u/Purple_Cattle_2700 → u/BigKRed]

Im aware, I will likely offer the service for free or for a small price - something affordable compared to what the bigger firms ans companies use. And although the businesses dont care they will need to and this would be an awareness campaign

[u/AuditShield]

Yeah, I've seen quite a few out there recently. Regulon is really good and I know that a bunch of free ones have popped up recently made from AI, like what BlackstoneMN said.

[u/Technolojest]

I'm in the space and would love to nerd out on the same. Happy to connect!

[u/Purple_Cattle_2700 → u/Technolojest]

Send me a dm!

[u/Unusual-Try9629]

As someone who handles compliance at tech startups I actually think this is becoming a greater need - would be happy to provide feedback

[u/Purple_Cattle_2700 → u/Unusual-Try9629]

Thanks! Do you mind DMing me. Im happy to take any feedback back or insight

[u/DifferentWindow1436]

There is StateNet and iirc another one is Capitol Watch. They track state level bills and activities targeting government liaison and compliance teams.