Screen for TRAIGA's prohibited practices, build your NIST AI RMF safe-harbor defense, document intent — not impact — and stay cure-ready before the Attorney General ever asks. Enforcement is AG-only, with a 60-day cure period and no private right of action.
No credit card required · Built for TRAIGA — audit-ready in under an hour
By deployer type
Your obligations depend on who you are. For state agencies and local governments, SB 1964 and HB 3512 impose real mandates. For private companies, TRAIGA mostly means: don't do the prohibited things, disclose AI use in healthcare, and keep the documentation that gives you a defense. Risk Meridian maps the whole Texas AI stack to your organization type — with deep government and healthcare coverage.
Know exactly what you owe as a private deployer — no invented mandates, just a defensible record.
The real mandates live here. SB 1964, 1 TAC 219, and HB 3512 impose actual obligations on state agencies and local governments — inventory, assessments, and AI-training among them.
A state agency under ch. 2054 — the full SB 1964 and TAC 219 load — yet excluded from TRAIGA’s governmental-entity definition (Bus. & Com. Code § 552.001(3)).
Know exactly what you owe under TRAIGA and SB 1188 as a healthcare provider.
Healthcare AND government — know exactly what you owe across both fronts.
SB 1964 and HB 3512 apply to governmental entities (state agencies and local governments); a hospital district may qualify — confirm applicability with counsel.
Built for alignment with leading AI governance frameworks
The problem
The Texas Responsible AI Governance Act prohibits specific intentional, harmful uses of AI and is enforced by the Texas Attorney General. Because that liability is intent-based, a documented record of your AI systems, testing, and oversight is how you show good faith and qualify for the law's safe harbors. Comparable frameworks are emerging in other states and the EU.
Most organizations have no centralized AI inventory, no structured risk reviews, and no organized documentation. Building this from scratch with spreadsheets and word processors is slow, inconsistent, and fails at audit.
Your legal team is asking which AI systems you're running — and you can't answer.
If your AI is ever linked to a prohibited use, documentation is how you show good faith — and most organizations have none.
Clinical AI tools are proliferating across departments with no governance trail.
Auditors want a complete AI governance package. Building one manually takes months.
Risk Meridian's platform helps you get organized quickly and build a defensible governance record.
Platform capabilities
Screen for prohibited practices, build your NIST AI RMF safe-harbor evidence, document intent — not impact — and stay cure-ready before the Attorney General asks. One platform for the full defense.
Register and document every AI system your organization uses or builds. Capture purpose, ownership, vendor, deployment type, and healthcare-specific fields in one structured registry.
Deterministic risk classification — LOW, MODERATE, HIGH, or CRITICAL — driven by a structured questionnaire. Factors include consequential decisions, biometric data, patient-facing use, and more.
A rules engine maps every risk factor to the applicable compliance controls from a TRAIGA-aligned library. Controls are auto-generated the moment a risk review is completed.
Auto-generate TRAIGA-aligned AI disclosure statements using merge-field templates. Export to PDF, copy to clipboard, or embed in your policy documentation package.
Generate editable AI governance policies exportable to PDF. Templates cover data use, model oversight, human review, and incident response aligned to TRAIGA requirements.
Track AI incidents with severity classification (Critical / High / Medium / Low) and a structured resolution workflow. Full audit trail from detection to closure.
Formal attestation module for organizational leadership. Governance certifications are timestamped, signed, and stored as tamper-evident, append-only records as part of your governance documentation package.
Configurable review cadence — Annual, Semi-Annual, Quarterly, or Monthly — with automated email reminders when AI systems are due for re-assessment.
A normalized 0–100 score measuring overall AI governance program completeness. Track improvements over time and benchmark your organization against best practices.
Per-system readiness indicators across TRAIGA, California AI, EU AI Act, Colorado AI Act, and NIST AI RMF. Know exactly where gaps exist before a regulator asks.
Complete documentation export for regulators, auditors, and executives — one-click generation of a full compliance package including risk reviews, controls, disclosures, and certifications.
A concise, non-technical governance summary designed specifically for hospital and enterprise boards. Meets emerging board-level AI oversight reporting requirements.
Append-only audit log capturing every data change, partitioned by quarter for performance. Full traceability for every risk review, control update, disclosure, and policy change.
Track third-party AI systems and vendor compliance documentation. Know which vendors have governance programs in place and which need follow-up.
See it in action
A live compliance health score, a full inventory of every AI system, and a documented control for every requirement — the evidence trail you need before the Attorney General ever asks. Preview it in light or dark mode.
A real-time compliance health score across prohibited-use clearance, NIST AI RMF alignment, controls completion, and incident posture.
Every control mapped to every system — code, category, owner, and status in one auditable view.
The full AI inventory — owners, risk levels, deployment type, and vendor for every system.
How it works
Add every AI system your organization uses to the registry. Capture system purpose, ownership, vendor, deployment type, and risk indicators in a structured form. Takes less than 2 minutes per system.
Complete the structured risk questionnaire for each system. Risk Meridian's scoring engine automatically classifies risk (LOW / MODERATE / HIGH) based on your answers and applicable regulatory factors.
Controls are auto-created from your risk profile. Track completion progress, generate TRAIGA-aligned disclosures and policies, log incidents, and collect executive certifications.
Generate a complete Governance Report Pack for regulators, auditors, or your board at any time. One click exports your full evidence package as a structured PDF bundle.
Solutions by industry
Healthcare
Clinical AI — decision support, diagnostics, treatment planning, and patient-facing tools — carries the highest governance scrutiny. Risk Meridian's platform includes dedicated healthcare fields, board-ready reports, and controls designed so no PHI is required — only governance metadata about your AI systems — to help hospitals demonstrate responsible AI use to regulators and their boards.
Learn moreHR & Hiring
AI systems that influence hiring, promotion, or termination decisions carry real legal exposure under employment law and emerging AI rules. Document your AI tools, run risk reviews, and generate disclosure statements that support your compliance with Texas and federal requirements for employment AI.
Learn moreFinance
Credit scoring, loan origination, fraud detection, and financial planning AI are consequential by definition. Risk Meridian's platform helps financial organizations maintain a complete governance trail across their AI portfolio — from model inventory to board reporting.
Learn moreEnterprise
Multi-tenant architecture supports large organizations with hundreds of AI systems across business units. Role-based access control, org-level team management, unlimited AI systems on the Enterprise plan, and a Governance Maturity Score to track program progress over time.
Learn moreSmall & Medium Business
Small and medium-sized businesses using AI in customer-facing, HR, or operational decisions face the same TRAIGA obligations as large enterprises — without the dedicated compliance teams. Risk Meridian's platform is designed to be set up and managed by a single person in an afternoon, with affordable plans that grow with your business.
Learn moreMulti-framework coverage
Risk Meridian's platform is purpose-built for the Texas Responsible AI Governance Act, and maps your controls to the NIST AI RMF today. The platform also provides a road map to other overlapping frameworks including the EU AI Act, Colorado AI Act, and ISO 42001 (on the roadmap).
When new frameworks land, your AI system inventory, risk reviews, and governance controls carry over. You don't start over — you extend.
TRAIGA
Supported today
EU AI Act
On roadmap
Colorado AI Act
Monitoring — law in flux
NIST AI RMF
On roadmap
ISO 42001
On roadmap
Pricing
Run your first risk assessment now.
Core AI governance workflow for growing teams.
All plans include: AI system inventory · risk scoring · control tracking · disclosure generator · Audit trail included on Governance and Enterprise plans
FAQ
More questions? Email our team →
Risk Meridian takes the guesswork out of AI governance. Whether you need to address the Texas Responsible AI Governance Act, prepare for the EU AI Act, or simply get your clinical AI under proper governance — Risk Meridian is the fastest way to get organized and build a defensible governance program.
No credit card required.
