Software and AI Development for Denver Companies

Colorado's automated decision rules, in plain terms

In May 2026 Colorado repealed its 2024 AI Act and replaced it with SB26-189, which governs automated decision-making technology used to materially influence consequential decisions: education, employment, housing, financial or lending services, insurance, health-care services, and essential government services and public benefits. Its obligations begin on January 1, 2027.

The law splits duties between the company that builds the technology and the company that uses it:

• →Developers give the deployer technical documentation covering intended uses, categories of training data, known limitations and instructions for appropriate use and human review, tell deployers about material changes, and keep compliance records for at least three years.
• →Deployers give consumers a clear notice at the point of interaction, explain the technology's role in plain language within 30 days after an adverse outcome, and keep compliance records for at least three years.
• →Consumers can request their personal data and the correction of personal data that is factually wrong, and request meaningful human review and reconsideration of an adverse decision.

Which of those roles your company holds, and whether a given feature is covered at all, is a question for your counsel. What we can do is make the answer cheap to act on. On regulated builds we scope compliance and privacy requirements in the design phase, so the notice text, the decision record, the reviewer queue and the retention period are features in the plan rather than patches.

Profiling under the Colorado Privacy Act

The state's privacy law, in effect since July 1, 2023, reaches companies that process the personal data of 100,000 or more Colorado consumers a year, or 25,000 or more while earning revenue from selling data. It gives consumers rights to opt out, to access, correct and delete their data, and to a portable copy, and it requires a data protection assessment for processing with a heightened risk of harm, such as targeted advertising, profiling or sensitive data. A product that profiles customers is easier to assess when the data it uses, and the reason it uses it, are written down in the design documents.

Denver industries we can build for

The state's Office of Economic Development and International Trade lists aerospace, financial services, energy and natural resources, technology and information, and transportation and logistics among Colorado's key industries. Our pages on fintech, manufacturing and logistics describe the work we take on in three of them. For financial services specifically, we have built fraud scoring, onboarding document checks, AML alert triage and underwriting with reason codes, and lending is one of the consequential decisions Colorado's rules name.

Working two hours apart

Denver runs on Mountain time and Mt Pleasant on Eastern, a two-hour gap. A Denver stand-up at nine in the morning lands at eleven on our side.