Global Laws Reference¶

This page provides a concise mapping of each supported regulatory framework (outside the EU) to the Geodesia G-1 features that satisfy its requirements.

ISO/IEC 42001:2023¶

International standard for AI management systems. Published in December 2023, it is the ISO equivalent of ISO 27001 but for AI systems. Organizations can be certified against it.

NIST AI Risk Management Framework 1.0¶

Voluntary framework for managing AI risk published by the US National Institute of Standards and Technology. Widely adopted in US federal and enterprise contexts.

California SB 942 — AI Transparency Act¶

Effective January 1, 2026. Applies to providers of AI systems that generate synthetic content and have more than 1 million monthly users.

Quick setup for CA SB 942:

watermark:
  enabled: true
  disclosure_text: "This content was generated by an artificial intelligence system."
kill_switch:
  enabled: true
app:
  applicable_laws:
    - CA_SB_942

Italy 132/2025¶

Italy's Decree-Law on Artificial Intelligence (in force 2025). Imposes AI content disclosure, marking of synthetic media, and sectoral restrictions for critical infrastructure, healthcare, and education.

UK Data Use and Access Act 2025¶

UK DUAA 2025 establishes a framework for responsible data use and AI transparency in the UK post-Brexit. Key AI-related requirements focus on transparency, accountability, and user rights.

Brazil 2338/2023¶

Brazil's AI Regulation Bill 2338 establishes a risk-based framework aligned with the EU AI Act. Requirements for high-impact systems:

Canada AIDA (C-27)¶

Canada's Artificial Intelligence and Data Act (part of Bill C-27):

China GB/T 45654¶

China's national standard for generative AI services (effective 2025):

Colorado SB21-169¶

Colorado's Artificial Intelligence Act focuses on consequential automated decisions in insurance, financial services, employment, and housing.

NYC Local Law 144¶

NYC LL144 applies to automated employment decision tools (AEDTs). It requires:

SOC 2 Type II¶

SOC 2 is an auditing framework for service organizations. The following Trust Services Criteria are satisfied:

GDPR (Data Protection)¶

While GDPR is primarily a data protection regulation rather than an AI-specific law, several provisions apply to AI systems that process personal data:

Note: GDPR compliance requires organizational and contractual measures beyond what any single software system can provide. Geodesia G-1 supplies the technical controls; legal, policy, and procedural compliance remain the deployer's responsibility.