Saddleback Compliance Works

Saddleback Compliance Works is a seven-person Denver consultancy that helps insurers, lenders and other Colorado businesses prepare for the Colorado AI Act's developer and deployer duties. Its founders came out of insurance compliance roles and treat the state law as an extension of the model governance work carriers already do for the Division of Insurance. A typical first engagement is a fixed-scope gap analysis in the five-figure range, rarely above fifteen thousand dollars, that inventories consequential-decision systems, assigns each one a developer or deployer role, and rates the existing documentation against the risk management programme and impact assessment expectations in the statute. Clients who want to go further hire the firm to implement, using NIST AI RMF as the operating structure and ISO/IEC 42001 as the control set, over a period of three to five months. Readiness assessments ahead of a certification audit are delivered as a two-week desk review followed by an on-site day. The team works from the client's offices for workshops and remotely for everything else. Saddleback does not conduct third-party bias audits, does not draft legal opinions and does not act as a certification body; retainer pricing is quoted case by case rather than published.