🏔️ Colorado AI Act
Colorado’s SB 26-189 / HB 26-1263 take effect January 1, 2027. Every plan below — Starter and up — includes a dedicated Colorado AI Act compliance crosswalk, grounded well ahead of the deadline.
Until 12:00 AM Mountain Time, January 1, 2027 — when SB 26-189 and HB 26-1263 take effect.
The first 10 companies to sign up lock in launch rates on every module — including the three launching next — for as long as they stay subscribed.
Claim founder pricing →Build your plan
Every GOVERNBOX plan includes AI Governance. Pick your depth, switch on the management modules you want, and see exactly what you get — and what it costs — in real time.
Not sure which plan fits?
See every feature side by side below — or jump straight to checkout now.
| Feature | Free | Starter | Pro Most Popular | Agency |
|---|---|---|---|---|
| Core Platform | ||||
| AI Readiness Scorecard | ✓ | ✓ | ✓ | ✓ |
| AI Use Case Log (inventory + named owner per system) | — | Unlimited | Unlimited | Unlimited |
| EU AI Act risk tier classification + Art. 5 prohibited-use screen | — | — | — | ✓ |
| Dashboard — My Workspace | ✓ | ✓ | ✓ | ✓ |
| Notifications center (review countdowns, alerts) | ✓ | ✓ | ✓ | ✓ |
| Append-only audit log | ✓ | ✓ | ✓ | ✓ |
| Multi-tenant security + row-level isolation | ✓ | ✓ | ✓ | ✓ |
| Document Generation | ||||
| AI Use Policy | Preview | ✓ | ✓ | ✓ |
| AI Acceptable Use Standard | — | ✓ | ✓ | ✓ |
| AI Incident Response Plan | — | ✓ | ✓ | ✓ |
| Vendor AI Risk Assessment | — | ✓ | ✓ | ✓ |
| AI Strategic Plan (wizard) | — | — | ✓ | ✓ |
| CAIO Position Statement (wizard) | — | — | ✓ | ✓ |
| AI Committee Charter (wizard) | — | ✓ | ✓ | ✓ |
| Privacy Policy (consumer / data-subject rights) | — | — | CCPA-grounded | GDPR + CCPA |
| OMB AI Compliance Plan (M-25-21 / M-25-22) | — | — | — | ✓ |
| Compliance Crosswalk export | — | NIST + ISO + Colorado | NIST + ISO + Colorado | NIST + ISO + Colorado + EU AI Act |
| Word (.docx) export | — | ✓ | ✓ | ✓ |
| PDF export | — | ✓ | ✓ | ✓ |
| Organization logo on document exports | — | — | ✓ | ✓ |
| White-label exports (no Gradient Descent branding) | — | — | — | ✓ |
| Compliance Frameworks | ||||
| NIST AI RMF | Preview | ✓ | ✓ | ✓ |
| ISO/IEC 42001 | — | ✓ | ✓ | ✓ |
| Colorado AI Act (HB 26-1263 / SB 26-189, eff. Jan 1, 2027) | — | ✓ | ✓ | ✓ |
| EU AI Act | — | — | — | ✓ |
| NIST SP 800-53 Rev. 5 / CSF 2.0 | — | — | ✓ | ✓ |
| CCPA / CPRA (California consumer privacy) | — | — | ✓ | ✓ |
| GDPR (EU data protection) | — | — | — | ✓ |
| HIPAA Security & Privacy Rules | — | — | — | ✓ |
| OMB M-25-21 / M-25-22 (Federal AI) | — | — | — | ✓ |
| Risk & Impact | ||||
| Risk Register (CRUD + likelihood × impact scoring) | — | ✓ | ✓ | ✓ |
| Risk heat map visualization | — | — | ✓ | ✓ |
| AI Impact Assessment (7-section questionnaire) | — | ✓ | ✓ | ✓ |
| Auto-create risk entries from assessments | — | — | ✓ | ✓ |
| AI Project Management Module | ||||
| AI project list & per-project board | — | Up to 2 | Up to 5 | Unlimited |
| 7-phase AI development lifecycle checklist | — | ✓ | ✓ | ✓ |
| 45-item NIST/ISO/EU grounded task checklist | — | ✓ | ✓ | ✓ |
| Kanban board (drag-drop, task detail, Edit mode) | — | ✓ | ✓ | ✓ |
| Cross-links: Use Cases / Projects / Risk Register | — | ✓ | ✓ | ✓ |
| Agentic AI Governance Module | ||||
| AI Agents inventory — basic registration (identity, ownership, data access) | — | ✓ | ✓ | ✓ |
| 12-item zero-trust controls checklist (NIST SP 800-207) | — | — | — | ✓ |
| Zero-trust score + low-score alerts | — | — | — | ✓ |
| Agent registration wizard (3-step) | — | ✓ | ✓ | ✓ |
| Agent metrics in Board Report governance block | — | ✓ | ✓ | ✓ |
| Cross-links: Agents / Use Cases / Risk Register | — | ✓ | ✓ | ✓ |
| Training, Incidents & Operations | ||||
| Training plan + completion tracking | — | ✓ | ✓ | ✓ |
| Acceptable-use acknowledgment sign-off | — | ✓ | ✓ | ✓ |
| Incident log + severity codes | — | ✓ | ✓ | ✓ |
| EU AI Act Art. 73 serious-incident flag | — | — | — | ✓ |
| Reporting & Governance | ||||
| Quarterly Board Report (full — maturity score + quarterly history) | — | ✓ | ✓ | ✓ |
| AI Cost Tracking & Roll-Up (per use case + program office, 60-day renewal alerts, Board Report totals) | — | ✓ | ✓ | ✓ |
| Board Report — AI Agents governance section | — | ✓ | ✓ | ✓ |
| Governance maturity score + stars (dashboard/badge) | Preview | ✓ | ✓ | ✓ |
| Shareable governance badge | — | ✓ | ✓ | ✓ White-labeled |
| Live public Trust Page + embeddable live badge | — | ✓ | ✓ | ✓ White-labeled |
| Employee Attestation Portal (unlimited signers) | — | ✓ | ✓ | ✓ |
| Regulatory horizon feed ("What's Changing") | ✓ | ✓ | ✓ | ✓ |
| Gap report with advisory CTAs | Preview | ✓ | ✓ | ✓ |
| Administration | ||||
| Admin Console (full data inventory & controls) | — | Owner + Admin | Owner + Admin | Owner + Admin |
| User roles (Owner / Admin / Editor / Viewer) | — | ✓ | ✓ | ✓ |
| User invite & role management | — | ✓ | ✓ | ✓ |
| Enterprise SSO (SAML / OIDC) | — | — | — | ✓ |
| Data export (full org snapshot) | — | ✓ | ✓ | ✓ |
| Retention policy + danger zone (Owner only) | — | ✓ | ✓ | ✓ |
| Seats included | 1 | 3 (up to 5) | 5 (up to 10) | 10 (up to 20) |
| White-label client portal | — | — | — | ✓ |
| Support & Advisory | ||||
| Email support | — | ✓ | ✓ | ✓ |
| Onboarding walkthrough | — | — | ✓ | ✓ |
| Priority support | — | — | — | ✓ |
| Advisory session (1:1 with Jim) | — | — | — | ✓ Included |
Ready to get your governance package board-ready?
Pick a plan and generate your first document today — no consultant required.