AI Governance & Compliance
IAMRI is built with safety, transparency, and legal compliance at every layer. These documents outline how we operate within U.S. federal and state AI regulations.
Compliance Checklist
Federal AI Requirements
Executive Order 14110 (Oct 2023) β Safe, Secure, and Trustworthy AI
Local models plus our own privately-hosted models on infrastructure we control. No third-party AI vendor (OpenAI/Anthropic/Google) receives conversation data. Transparent reasoning via DEB system. Goal is fully local/owned hardware; not yet there.
NIST AI Risk Management Framework (AI RMF 1.0)
Risk assessment documented below. Continuous monitoring via prompt shield and intrusion logging.
FTC Act Section 5 β Unfair/Deceptive Practices
No hidden AI. Every DEB interaction is clearly labeled. Users know they are speaking with AI.
AI Disclosure β Users must know when they're interacting with AI
All DEB interactions explicitly branded. Galaxy Quest, Chat, Ask-a-DEB all use clear AI framing.
Children's Online Privacy Protection Act (COPPA)
Self-declared age-confirmation gate at signup (/auth/passwordless) blocks account creation without confirming 13+. No birthdate or other extra data collected to check it.
Section 230 β Content moderation safe harbor
Moderation policy active. Prompt shield blocks harmful content. See Moderation Policy tab.
State AI Laws (Priority States)
Colorado AI Act (SB 24-205) β High-risk AI disclosures
IAMRI does not make consequential decisions (employment, lending, insurance). Low-risk entertainment/education.
Illinois AI Video Interview Act
IAMRI does not conduct employment interviews.
California CCPA/CPRA β Consumer privacy rights
All user data stored locally (localStorage). No server-side PII collection. Users can delete any time.
Texas Data Privacy Act (HB 4)
Transparent data practices. No sale of personal data. User consent for all interactions.
Virginia CDPA β Consumer data protection
Privacy-first architecture. No third-party data sharing.
New York City Local Law 144 β Automated employment decisions
IAMRI does not make employment decisions.
Financial Regulations (Marketplace & Tokens)
Money Services Business (MSB) licensing β FinCEN
IAMRI tokens are non-transferable store credits, not digital currency. No MSB license required.
State money transmitter licenses
Tokens have no cash-out value, cannot be sent to others. Same model as Apple Store credits, gift cards.
SEC β Howey Test for securities
Tokens are utility-only store credit. No expectation of profit. Not pooled. Not an investment.
PCI-DSS β Payment card security
PayPal handles all card processing. IAMRI never touches card numbers.
FTC β Truth in advertising for marketplace
All marketplace listings require accurate descriptions. Clear pricing. 85/15 split disclosed.
Data Protection & Privacy
Privacy policy published and accessible
Published at /privacy-policy and linked from nav/footer.
Terms of Service published
Published at /terms-of-service and linked from every site footer.
Data retention policy documented
All data in localStorage on user devices. Users control retention via browser.
Incident response plan
Written plan published β see Incident Response Plan under the Risk Assessment tab. Intrusion detection active (prompt shield).
No biometric data collection
IAMRI collects no biometric data of any kind.
Last reviewed: August 2026 Β· Contact: [email protected]