By State / California
California AI Vendor Governance
AI vendors evaluated against California-specific governance — CA AB 2013 (AI training data transparency), CCPA/CPRA, CA Practical Guidance for Use of Generative AI (CA Bar Nov 2023), CA SB 1001 (bot disclosure), and the CCPA/CPRA Privacy Regulations on Automated Decisionmaking Technology (ADMT).
California — vendors with explicit state engagement, ranked by 5 state-relevant governance axes.
Why this state view
California has the most AI laws of any state. The CCPA/CPRA ADMT rules took effect for businesses processing CA resident data; CA AB 2013 requires AI training data transparency; CA Practical Guidance bound lawyer AI use beginning 2023. Vendors that engage publicly on CA-specific frameworks signal operational maturity that translates to other state regimes.
Primary frameworks anchored
- CA AB 2013 (AI training data transparency)
- CCPA / CPRA + Automated Decisionmaking Technology (ADMT) Regulations
- CA Bar Practical Guidance for Generative AI (Nov 2023)
- CA SB 1001 (bot disclosure)
- California Consumer Financial Protection Law (CCFPL)
State-relevant scoring axes
Columns marked with an accent dot in the scorecard below are the axes most relevant to California's regulatory frame. The state-relevance ranking in this view averages vendor performance across these axes only.
- Training-data opt-out
- Subprocessor list public
- Colorado AI Act readiness
- ABA Formal Op 512 readiness
- NIST AI RMF self-attestation
| # | Vendor | CA Rel. | Score | Grade | BAA | •Opt-out | US Res | SOC 2 | ISO 42001 | •NIST AI | •CO AI | §1557 | SR 11-7 | •ABA 512 | •Subproc | TC |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Thomson Reuters CoCounsel | 80(5/5) | 80 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | N/A | Yes | Yes | 4/5 |
| 2 | Abridge | 75(4/5) | 87 | A | Yes | Yes | Yes | Yes | Partial | Partial | Partial | Yes | N/A | N/A | Yes | 5/5 |
| 3 | FICO Falcon Fraud Manager + FICO Score AI | 75(4/5) | 80 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | Yes | N/A | Yes | 4/5 |
| 4 | Suki AI | 75(4/5) | 72 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | Partial | N/A | N/A | Yes | 4/5 |
| 5 | Lexis+ AI | 70(5/5) | 76 | B | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | Yes | Yes | 4/5 |
| 6 | Westlaw Precision AI | 70(5/5) | 76 | B | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | Yes | Yes | 4/5 |
| 7 | Microsoft 365 Copilot | 70(5/5) | 75 | B | Yes | Yes | Yes | Yes | Partial | Partial | Partial | Partial | Partial | Partial | Yes | 5/5 |
| 8 | Harvey | 70(5/5) | 74 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | N/A | Yes | Partial | 3/5 |
| 9 | Zest AI | 63(4/5) | 74 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | Yes | N/A | Partial | 3/5 |
| 10 | Upstart | 63(4/5) | 74 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | Yes | N/A | Partial | 3/5 |
| 11 | Nuance DAX Copilot (Microsoft) | 63(4/5) | 70 | B | Yes | Yes | Yes | Yes | No | Partial | No | Partial | N/A | N/A | Yes | 5/5 |
| 12 | Salesforce Einstein / Agentforce | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | Partial | Partial | N/A | Yes | 5/5 |
| 13 | Glean | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 14 | Arctic Wolf | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 15 | Huntress | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 16 | eSentire | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 17 | Sophos | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 18 | Unit21 | 63(4/5) | 68 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | Partial | N/A | Yes | 4/5 |
| 19 | Anthropic Claude | 63(4/5) | 58 | C | Partial | Yes | Partial | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 20 | Ironclad AI | 50(5/5) | 63 | C | Yes | Yes | Yes | Yes | No | No | No | N/A | N/A | Partial | Yes | 4/5 |
| 21 | Google Gemini for Workspace | 50(4/5) | 58 | C | Partial | Partial | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 22 | OpenAI ChatGPT & API | 50(4/5) | 53 | D | Partial | Partial | Partial | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 23 | ConnectWise | 50(4/5) | 50 | D | Partial | Yes | Partial | Yes | No | No | No | N/A | N/A | N/A | Yes | 3/5 |
| 24 | Spellbook | 40(5/5) | 45 | D | Yes | Yes | Partial | Partial | No | No | No | N/A | N/A | Partial | Partial | 2/5 |
| 25 | Hummingbird | 38(4/5) | 56 | C | Yes | Yes | Yes | Yes | No | No | No | N/A | Partial | N/A | Partial | 3/5 |
| 26 | Heidi Health | 38(4/5) | 45 | D | Yes | Yes | Partial | Partial | No | No | No | Partial | N/A | N/A | Partial | 2/5 |
| 27 | Notion AI | 38(4/5) | 33 | F | No | Partial | No | Yes | No | No | No | N/A | N/A | N/A | Yes | 3/5 |
| 28 | Meta Llama | 25(4/5) | 25 | F | No | Yes | Yes | No | No | No | No | N/A | N/A | N/A | No | 2/5 |
| 29 | Otter.ai | 25(4/5) | 25 | F | No | Partial | No | Yes | No | No | No | N/A | N/A | N/A | Partial | 2/5 |
| 30 | Perplexity AI | 25(4/5) | 19 | F | No | Partial | No | Partial | No | No | No | N/A | N/A | N/A | Partial | 2/5 |
How vendors score on California's relevant axes
Yes / partial counts across the full 30-vendor pool, restricted to axes relevant to California's regulatory frame. N/A axes are excluded from the applicable denominator.
Opt-out
Training-data opt-out
Subproc
Subprocessor list public
CO AI
Colorado AI Act readiness
ABA 512
ABA Formal Op 512 readiness
NIST AI
NIST AI RMF self-attestation
Top 3 vendors on the California-relevant axis subset
Thomson Reuters CoCounsel
BCA 80/100Composite 80Legal AI assistant from Thomson Reuters (the parent of Westlaw and Practical Law). Acquired Casetext in 2023. Tightly integrated with Westlaw and Practical Law content.
Abridge
ACA 75/100Composite 87Ambient clinical AI documentation. Differentiated on clinician-experience design, citation-grounded notes, and deep EHR integration (notably Epic).
FICO Falcon Fraud Manager + FICO Score AI
BCA 75/100Composite 80Decades-deep machine-learning portfolio across fraud detection (Falcon) and credit decisioning (FICO Score 10 T). The reference SR 11-7 documentation in the industry; most US banks already operate against FICO's validation patterns.
Buyer's guide for California
For California-headquartered organizations or those processing CA-resident data, the highest-leverage axes are training-data opt-out (CA AB 2013), subprocessor transparency (CCPA/CPRA + ADMT), and cross-state AI law engagement (vendors that engage on Colorado AI Act typically engage on CA frameworks).
Operationalize the scoring
Methodology — CA AB 2013 + CCPA/CPRA ADMT scoring
The Index tells you which vendors clear the bar for California engagement. The companion resource tells you how to turn that selection into a deployable governance program with documented evidence.
Methodology — CA AB 2013 + CCPA/CPRA ADMT scoring →Scoring as of 2026-05-13from public information (vendor trust portals, BAAs, SOC report cover pages, model cards, vendor documentation). Posture changes frequently — re-verify with the vendor's trust center before contract. State filter views surface vendors with explicit state engagement on the axes most relevant to that state's regulatory frame; they do not replace deployer-side state compliance work. Methodology: read the full methodology.
Turn the scoring into a deployable program
The Index tells you the posture. These engagements turn the posture into operational evidence for California deployments.