California Just Made AI Auditing a Regulated Profession. What Professional Services Firms Need to Know.

Governor Newsom signed two AI accountability bills today — and neither one is SB 574.

That distinction matters. The September 30 deadline for SB 574 (the attorney AI disclosure bill) is still live and still unresolved. But on September 10, 2026, Newsom separately signed Assembly Bill 1405 and Senate Bill 813, creating California's first state-level AI Auditor Registry and AI Verification Organizations framework in the United States.

If you're a consulting, advisory, or professional services firm doing AI-related work in California — or if you're any professional services firm using AI to deliver client services and wondering how California's regulatory pattern will eventually reach you — here's what changed today and what it requires.

What AB 1405 Creates: California's AI Auditor Registry

AB 1405, authored by Assemblymember Rebecca Bauer-Kahan (D-Orinda), establishes the California AI Auditor Registry — a state certification system for independent AI auditors built on three standards: independence, transparency, and integrity.

This is the first state law in the US to create a formal professional registry for AI auditors. The closest analogy is CPA licensing: the state establishes the credential, sets the standards, and requires practitioners to register before offering services in a regulated capacity.

Who this affects directly:

Consulting and advisory firms that offer any of the following services in California now face a registration requirement once the registry launches and implementing regulations are finalized:

• AI audits or AI risk assessments
• AI compliance reviews (CCPA compliance, EU AI Act readiness, AI governance assessments)
• AI system evaluations on behalf of enterprise or regulated clients
• AI readiness advisory engagements

The three criteria AB 1405 uses are not abstract:

Independence means AI auditors cannot have financial interests in the systems or organizations they evaluate. If your consulting firm both implements AI systems and audits them for the same clients, that arrangement may not satisfy the independence standard.

Transparency means your methodologies and findings must be documented and disclosable. Proprietary black-box assessment processes that cannot be explained to regulators or clients will not qualify.

Integrity means your assessment process is rigorous and not compromised by client pressure. The registry is specifically designed to prevent the kind of assessment-shopping that has emerged in other regulated advisory contexts.

What to do now:

You do not need to register today — the registry has not yet launched, and California must still publish implementing regulations that define application requirements, documentation standards, and what "registered AI auditor" status means in practice.

But you do need to determine now whether your firm's service offerings fall within the bill's scope, and you should begin documenting your independence, transparency, and integrity posture before the application window opens. Firms that already have clean separation between their AI advisory practice and any vendor relationships or system implementation work will find registration relatively straightforward. Firms with blurrier practice boundaries should use the time before regulations are published to sharpen them.

What SB 813 Creates: A Framework for AI Verification Organizations

SB 813, authored by Senator Jerry McNerney (D-Pleasanton), creates a parallel framework for independent AI verification organizations — third-party entities authorized to assess whether AI systems comply with California law.

Where AB 1405 regulates the professionals who conduct AI audits, SB 813 regulates the organizations that certify AI systems themselves. The practical distinction: an AB 1405 registered auditor evaluates whether an organization's AI practices are sound. An SB 813 verification organization certifies whether a specific AI system — a model, a platform, a deployed tool — meets California's legal standards.

The direct operational impact of SB 813 on most small professional services firms is 12 to 24 months out. The framework is signed, but verification organizations must be established, accredited, and integrated into enforcement pathways before they affect day-to-day practice.

The medium-term signal, however, is significant. SB 813 creates the infrastructure through which California can require enterprises — and by extension, their professional services providers — to demonstrate that AI systems handling regulated functions have been independently verified. The industries first to face this requirement will likely be healthcare, financial services, and legal — exactly the sectors where Crossing Report readers operate.

What to do now:

Nothing operationally urgent from SB 813 today. But consider adding one question to your next internal AI governance review: "If a California client asks whether our AI systems have been independently verified, what do we say?" The firms that have a coherent answer in 2027 are the ones asking that question in 2026.

This Is Not the Same as SB 574

Let's be explicit about what changed today and what did not.

AB 1405 and SB 813 are AI governance infrastructure bills. They regulate the audit and verification ecosystem that surrounds AI deployment in California — who can audit AI, and what organizations can verify AI systems for compliance.

SB 574 is the attorney AI conduct bill — the one that would require California attorneys to personally verify AI-generated citations before court filings, prohibit inputting confidential client data into consumer-grade AI, and restrict delegating "the practice of law" to AI. SB 574 is still pending on Newsom's desk. The governor has until September 30, 2026 to sign or veto. Today's signings are separate actions that do not predict his decision on SB 574.

The fact that Newsom signed AB 1405 and SB 813 with industry backing from OpenAI and Anthropic reflects his comfort with AI governance infrastructure bills — a different regulatory posture than conduct mandates for licensed professionals. The SB 574 calculus remains its own question.

If you're a California attorney tracking SB 574, your September 30 deadline is unchanged. See California SB 574 Is on Newsom's Desk for the full breakdown of what each outcome means.

The Bigger Picture: California Is Building the US Template

AB 1405 and SB 813 are backed by OpenAI and Anthropic. That is not a minor footnote — it means the two companies with the largest professional services AI deployment footprints have endorsed the audit and verification framework California just codified.

When AI industry leaders back state-level AI governance infrastructure, the legislative dynamic in every other state shifts. New York, Texas, Illinois, and Florida have been watching California's AI regulatory calendar for two years. A first-in-the-nation AI Auditor Registry gives every other attorney general and legislature a template to work from, and a bipartisan industry coalition to point to.

For professional services firms in those states: your observation window is 12 to 24 months, not three to five years.

One Action This Week

For consulting and advisory firms with AI audit service lines in California: Map your current service descriptions — AI risk assessments, AI compliance reviews, AI readiness engagements — against the three AB 1405 criteria: independence, transparency, integrity. Document where you already meet them and where the gaps are. This is the pre-registration work that separates prepared firms from reactive ones when the California AI Auditor Registry application window opens.

For all other professional services firms: Review your AI tool stack and ask one question: "For each AI tool we use to deliver client services, do we know what it does with our clients' data and could we document that for a regulator or an enterprise client?" That documentation is what verification readiness looks like. The firms building it now will have it when it's requested.

---

Sources: ContraCosta News, "Governor Newsom Signs First-in-the-Nation AI Safeguards to Protect Californians" (September 10, 2026); Benton Institute for Broadband & Society, "Governor Newsom Signs First-in-the-Nation AI Safeguards" (September 10, 2026); Breitbart Tech, "Gavin Newsom Signs California AI Safety Bills Backed by OpenAI, Anthropic" (September 10, 2026); California Legislative Information, AB 1405 and SB 813 bill texts (leginfo.legislature.ca.gov).