code/+/trust primary logo full color svg

Software Development · New York, NY

Software and AI for New York Teams That Answer to a Regulator

In New York, the question after "does it work?" is often "can you show us?" A hiring tool may need a bias audit with public results, and a New York-licensed lender or insurer answers to the Department of Financial Services. We build custom software and AI for New York companies so that the evidence those reviews ask for can be produced by the system itself, not reconstructed afterwards.

Schedule a call for your New York project →

What should a New York company expect from an outside software team building AI?

A system that can explain itself: what it was given, what it returned, and who approved the result. On regulated builds, Code and Trust scopes that record in the design phase, because New York City's hiring-tool law requires a bias audit with public results and the state's financial cybersecurity rule requires a maintained cybersecurity program.

AI in hiring: Local Law 144

New York City's Local Law 144 of 2021 prohibits employers and employment agencies from using an automated employment decision tool unless the tool has had a bias audit within one year of its use, information about the audit is publicly available, and the required notices have gone to candidates or employees. The Department of Consumer and Worker Protection enforces it.

We do not perform bias audits, and we do not tell a client whether its tool is covered; that is for the client and its counsel. We scope features with your team per engagement to support an audit, such as:

  • →A record of every scored candidate: the inputs the tool used, the score or classification it produced, and the model version that produced it.
  • →Stable versions. A change to the model or the scoring rules is a new, dated version, so an audit can say which version it covered.
  • →The notice step in the workflow, so a candidate cannot be scored before the notice the law requires has gone out.

If you sell recruiting or HR software to New York employers, the same features become part of your product rather than a client's problem.

Financial services under 23 NYCRR Part 500

The Department of Financial Services' cybersecurity regulation applies to anyone operating under a license, registration, charter or similar authorization under New York's Banking Law, Insurance Law or Financial Services Law, and requires those covered entities to implement and maintain risk-informed cybersecurity policies and programs. A New York-licensed bank, insurer, lender or money transmitter hiring a software vendor is likely to ask how the vendor's work fits that program.

On regulated builds we scope compliance and security requirements in the design phase, with your security team and counsel, before code is written. For clients we have built fraud scoring, onboarding and KYC document checks, AML alert triage, and underwriting that returns reason codes, so a reviewer can see why a lending decision was made. Our fintech page has more.

How we keep AI checkable

Every AI build starts with an evaluation set drawn from your own material, and we re-run it on every change, so a model upgrade that makes results worse on that set shows up before release. Agents get an allowlist of actions, a person approves anything irreversible, and every tool call is logged. We build with Anthropic and OpenAI models, through their APIs directly or through your cloud provider, chosen per engagement.

How we handle client systems and data is set out on our security page.

How an engagement works

01

Workflow Audit

We map your existing processes against current AI capabilities in the 90-minute AI workflow audit, identifying exactly where automation creates measurable ROI. The audit is complimentary when it is bundled with a larger build and available as a paid one-off on its own.

02

Build Sprint

A scoped build against a written scope. Prototype, staging, and deployment milestones are agreed in the written scope. Most large builds are fixed-price, with a monthly retainer after launch.

03

Launch + Support

Deployment and handover. Post-launch support and maintenance are scoped per engagement.

Common questions from New York businesses

Can you make our hiring tool compliant with Local Law 144?

We cannot make it compliant on our own: the law requires a bias audit, public results and candidate notices, and whether your tool is covered is a question for your counsel. We scope the records, versioning and notice steps with your team per engagement to support the audit and notices.

We are regulated by DFS. Will you work inside our security program?

Yes. On regulated builds we scope compliance and security requirements in the design phase, with your team, and build to them. We do not claim any certification of our own; our security page describes how we handle client systems and data.

Who owns the source code when the project ends?

You do. Source code and IP transfer to you on final payment.

Do we pay for model usage during the build?

No. Model usage while we build is part of the build price. Once AI is running inside your product, you pay for that model usage.

Ready to start your New York project?

Book the 90-minute AI workflow audit. The audit is complimentary when it is bundled with a larger build and available as a paid one-off on its own.

Schedule a call for your New York project →