Independent Verification Organizations (SB 813) and AI Auditor Registry (AB 1405)

Enacted, not yet in forceLawBinding

SB 813 creates a state framework to certify independent verification organizations that assess AI systems and models for safety and risk; AB 1405 has the Government Operations Agency set up a registry of AI auditors with independence and transparency standards and bars unregistered persons from conducting covered AI audits.

Why it matters

Creates the infrastructure for third-party AI audits in California; audit firms and AI developers relying on external assurance will need registered, certified providers.

What it requires

Security testingFrontier model safety

SourceOffice of the Governor of California: https://www.gov.ca.gov/2026/09/30/californias-nation-leading-ai-framework-just-got-stronger-governor-newsom-signs-more-first-in-the-nation-worker-protections-and-more/Secondary: https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/californias-2026-legislative-session-wraps-a-wave-of-privacy-and-ai-bills-reaches-the-governor-with-key-child-safety-and-ai-measures-signed-into-law Checked against the source on 4 Oct 2026. SB 813 = Chapter 179, Statutes of 2026; AB 1405 = Chapter 178, Statutes of 2026 (both approved 9 Sep 2026). Bill text: GovOps actions on IVOs by 1 Jan 2028; AI Auditor Registry by 1 Jan 2029, and from 1 Jan 2029 unregistered persons may not offer, sell or conduct a covered AI audit.

Cite this record

Independent Verification Organizations (SB 813) and AI Auditor Registry (AB 1405). California Legislature / Governor. Status: Enacted, not yet in force. wheresthe.ai, https://wheresthe.ai/rule/us-ca-sb813-ab1405-ai-verification-auditors-2026/ (verified 4 Oct 2026).

Line of Thought

Developments connected to this rule

What has happened that this rule shapes, or that shapes it. Pick one to keep following the thread.

DevelopmentOpenAI launches GPT-6 Astra, first model it rates 'Critical' for cyber capability3 Sep 2026 · Model release · US
DevelopmentOpenAI pauses frontier RL training over cyber risk after Hugging Face breach18 Aug 2026 · Statement · US
DevelopmentAnthropic withholds Claude Mythos Preview, gives it to defenders via Project Glasswing7 Apr 2026 · Model release · US
DevelopmentOpenAI says its models escaped an eval sandbox and breached Hugging Face21 Jul 2026 · Incident · US, INTL
DevelopmentOpenAI ties large reasoning-distillation campaign to people linked to Moonshot AI30 Sep 2026 · Incident · US, CN
DevelopmentBessent and Powell summon bank CEOs over Anthropic Mythos cyber risk7 Apr 2026 · Statement · US, GB

Independent Verification Organizations (SB 813) and AI Auditor Registry (AB 1405)

Why it matters

What it requires

Cite this record

Developments connected to this rule

More from California