---
title: "California AI Vendor Governance | EFROS"
description: "AI vendors evaluated against California-specific governance frameworks — state-relevant axes highlighted, source-cited per cell, ungated and updated quarterly."
canonical: https://efros.com/research/us-ai-vendor-governance-index/by-state/california/
---

- [Home](https://efros.com/)
- /[Research](https://efros.com/research/)
- /[US AI Vendor Governance Index](https://efros.com/research/us-ai-vendor-governance-index/)
- /California

By State / California

# California AI Vendor Governance

AI vendors evaluated against California-specific governance — CA AB 2013 (AI training data transparency), CCPA/CPRA, CA Practical Guidance for Use of Generative AI (CA Bar Nov 2023), CA SB 1001 (bot disclosure), and the CCPA/CPRA Privacy Regulations on Automated Decisionmaking Technology (ADMT).

California — vendors with explicit state engagement, ranked by 5 state-relevant governance axes.

Edition: 2026-Q2 State: CA Vendors: 30 State-relevant axes: 5

By [Stefan Efros](https://www.linkedin.com/in/stefanefros-cyberdefense/), CEO & Founder, EFROS

Updated · June 17, 2026

## Why this state view

California has the most AI laws of any state. The CCPA/CPRA ADMT rules took effect for businesses processing CA resident data; CA AB 2013 requires AI training data transparency; CA Practical Guidance bound lawyer AI use beginning 2023. Vendors that engage publicly on CA-specific frameworks signal operational maturity that translates to other state regimes.

## Primary frameworks anchored
- →CA AB 2013 (AI training data transparency)
- →CCPA / CPRA + Automated Decisionmaking Technology (ADMT) Regulations
- →CA Bar Practical Guidance for Generative AI (Nov 2023)
- →CA SB 1001 (bot disclosure)
- →California Consumer Financial Protection Law (CCFPL)

State-relevant scoring axes

Columns marked with an accent dot in the scorecard below are the axes most relevant to California's regulatory frame. The state-relevance ranking in this view averages vendor performance across these axes only.
- •Training-data opt-out
- •Subprocessor list public
- •Colorado AI Act readiness
- •ABA Formal Op 512 readiness
- •NIST AI RMF self-attestation

| # | Vendor | CA Rel. | Score | Grade | •BAA | •Opt-out | •US Res | •SOC 2 | •ISO 42001 | •NIST AI | •CO AI | •§1557 | •SR 11-7 | •ABA 512 | •Subproc | TC |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| 1 | Thomson Reuters CoCounsel | 80(5/5) | 80 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | N/A | Yes | Yes | 4/5 |
| 2 | Abridge | 75(4/5) | 87 | A | Yes | Yes | Yes | Yes | Partial | Partial | Partial | Yes | N/A | N/A | Yes | 5/5 |
| 3 | FICO Falcon Fraud Manager + FICO Score AI | 75(4/5) | 80 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | Yes | N/A | Yes | 4/5 |
| 4 | Suki AI | 75(4/5) | 72 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | Partial | N/A | N/A | Yes | 4/5 |
| 5 | Lexis+ AI | 70(5/5) | 76 | B | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | Yes | Yes | 4/5 |
| 6 | Westlaw Precision AI | 70(5/5) | 76 | B | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | Yes | Yes | 4/5 |
| 7 | Microsoft 365 Copilot | 70(5/5) | 75 | B | Yes | Yes | Yes | Yes | Partial | Partial | Partial | Partial | Partial | Partial | Yes | 5/5 |
| 8 | Harvey | 70(5/5) | 74 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | N/A | Yes | Partial | 3/5 |
| 9 | Zest AI | 63(4/5) | 74 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | Yes | N/A | Partial | 3/5 |
| 10 | Upstart | 63(4/5) | 74 | B | Yes | Yes | Yes | Yes | No | Partial | Partial | N/A | Yes | N/A | Partial | 3/5 |
| 11 | Nuance DAX Copilot (Microsoft) | 63(4/5) | 70 | B | Yes | Yes | Yes | Yes | No | Partial | No | Partial | N/A | N/A | Yes | 5/5 |
| 12 | Salesforce Einstein / Agentforce | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | Partial | Partial | N/A | Yes | 5/5 |
| 13 | Glean | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 14 | Arctic Wolf | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 15 | Huntress | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 16 | eSentire | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 17 | Sophos | 63(4/5) | 69 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 18 | Unit21 | 63(4/5) | 68 | C | Yes | Yes | Yes | Yes | No | Partial | No | N/A | Partial | N/A | Yes | 4/5 |
| 19 | Anthropic Claude | 63(4/5) | 58 | C | Partial | Yes | Partial | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 20 | Ironclad AI | 50(5/5) | 63 | C | Yes | Yes | Yes | Yes | No | No | No | N/A | N/A | Partial | Yes | 4/5 |
| 21 | Google Gemini for Workspace | 50(4/5) | 58 | C | Partial | Partial | Yes | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 22 | OpenAI ChatGPT & API | 50(4/5) | 53 | D | Partial | Partial | Partial | Yes | No | Partial | No | N/A | N/A | N/A | Yes | 4/5 |
| 23 | ConnectWise | 50(4/5) | 50 | D | Partial | Yes | Partial | Yes | No | No | No | N/A | N/A | N/A | Yes | 3/5 |
| 24 | Spellbook | 40(5/5) | 45 | D | Yes | Yes | Partial | Partial | No | No | No | N/A | N/A | Partial | Partial | 2/5 |
| 25 | Hummingbird | 38(4/5) | 56 | C | Yes | Yes | Yes | Yes | No | No | No | N/A | Partial | N/A | Partial | 3/5 |
| 26 | Heidi Health | 38(4/5) | 45 | D | Yes | Yes | Partial | Partial | No | No | No | Partial | N/A | N/A | Partial | 2/5 |
| 27 | Notion AI | 38(4/5) | 33 | F | No | Partial | No | Yes | No | No | No | N/A | N/A | N/A | Yes | 3/5 |
| 28 | Meta Llama | 25(4/5) | 25 | F | No | Yes | Yes | No | No | No | No | N/A | N/A | N/A | No | 2/5 |
| 29 | Otter.ai | 25(4/5) | 25 | F | No | Partial | No | Yes | No | No | No | N/A | N/A | N/A | Partial | 2/5 |
| 30 | Perplexity AI | 25(4/5) | 19 | F | No | Partial | No | Partial | No | No | No | N/A | N/A | N/A | Partial | 2/5 |

## How vendors score on California's relevant axes

Yes / partial counts across the full 30-vendor pool, restricted to axes relevant to California's regulatory frame. N/A axes are excluded from the applicable denominator.

Opt-out

Training-data opt-out

CA

Yes 25/30 (83%)

Partial 5/30 (17%)

Subproc

Subprocessor list public

CA

Yes 21/30 (70%)

Partial 8/30 (27%)

CO AI

Colorado AI Act readiness

CA

Yes 0/30 (0%)

Partial 8/30 (27%)

ABA 512

ABA Formal Op 512 readiness

CA

Yes 4/7 (57%)

Partial 3/7 (43%)

NIST AI

NIST AI RMF self-attestation

CA

Yes 0/30 (0%)

Partial 21/30 (70%)

### Top 3 vendors on the California-relevant axis subset

[1 #### Thomson Reuters CoCounsel BCA 80/100Composite 80Legal AI assistant from Thomson Reuters (parent of Westlaw and Practical Law). Acquired Casetext in 2023. Integrated with Westlaw and Practical Law content.](https://efros.com/research/us-ai-vendor-governance-index/thomson-reuters-cocounsel/) [2 #### Abridge ACA 75/100Composite 87Ambient clinical AI documentation. Clinician-experience design, citation-grounded notes, and EHR integration (notably Epic) are the differentiators.](https://efros.com/research/us-ai-vendor-governance-index/abridge/) [3 #### FICO Falcon Fraud Manager + FICO Score AI BCA 75/100Composite 80Decades-deep machine-learning portfolio across fraud detection (Falcon) and credit decisioning (FICO Score 10 T). The reference SR 11-7 documentation in the industry. Most US banks already operate against FICO's validation patterns.](https://efros.com/research/us-ai-vendor-governance-index/fico-falcon-fraud-manager/)

## Buyer's guide for California

For California-headquartered organizations or those processing CA-resident data, the highest-leverage axes are training-data opt-out (CA AB 2013), subprocessor transparency (CCPA/CPRA + ADMT), and cross-state AI law engagement (vendors that engage on Colorado AI Act typically engage on CA frameworks).

Operationalize the scoring

### Methodology — CA AB 2013 + CCPA/CPRA ADMT scoring

The Index tells you which vendors clear the bar for California engagement. The companion resource tells you how to turn that selection into a deployable governance program with documented evidence.

[Methodology — CA AB 2013 + CCPA/CPRA ADMT scoring →](https://efros.com/research/us-ai-vendor-governance-index/methodology/)

## Compare California with other state and sector views

Other state views

[Colorado (CO)](https://efros.com/research/us-ai-vendor-governance-index/by-state/colorado/) [New York (NY)](https://efros.com/research/us-ai-vendor-governance-index/by-state/new-york/) [Illinois (IL)](https://efros.com/research/us-ai-vendor-governance-index/by-state/illinois/) [Texas (TX)](https://efros.com/research/us-ai-vendor-governance-index/by-state/texas/)

Sector views

[foundation →](https://efros.com/research/us-ai-vendor-governance-index/by-sector/foundation/) [productivity →](https://efros.com/research/us-ai-vendor-governance-index/by-sector/productivity/) [legal →](https://efros.com/research/us-ai-vendor-governance-index/by-sector/legal/) [healthcare →](https://efros.com/research/us-ai-vendor-governance-index/by-sector/healthcare/) [banking →](https://efros.com/research/us-ai-vendor-governance-index/by-sector/banking/)

Scoring as of 2026-05-13from public information (vendor trust portals, BAAs, SOC report cover pages, model cards, vendor documentation). Posture changes frequently — re-verify with the vendor's trust center before contract. State filter views surface vendors with explicit state engagement on the axes most relevant to that state's regulatory frame; they do not replace deployer-side state compliance work. Methodology: [read the full methodology](https://efros.com/research/us-ai-vendor-governance-index/methodology/).

## Turn the scoring into a deployable program

The Index tells you the posture. These engagements turn the posture into operational evidence for California deployments.

[Reserve $5K AI Governance Audit](https://efros.com/contact/?source=ai-vendor-index-state-california) [Run AI Risk Score →](https://efros.com/tools/ai-risk-score/?source=ai-vendor-index-state-california) [See full Index →](https://efros.com/research/us-ai-vendor-governance-index/)