California creates first state system for outside audits of AI systems
Two new laws set up registered, independent auditors to check whether AI systems actually meet state safety and transparency rules.
What happened: Governor Gavin Newsom signed two bills, Senate Bill 813 and Assembly Bill 1405, that build California's first system for independent, third-party auditing of AI systems. SB 813, from Senator Jerry McNerney, sets up a framework for outside "verification organizations" to assess whether AI systems and models comply with state law. AB 1405, from Assemblymember Rebecca Bauer-Kahan, creates an official state registry of AI auditors and sets rules for their independence, transparency, and integrity.
Why it matters: Until now, claims that an AI system is safe have mostly come from the companies building it. These laws aim to change that by giving California a way to check those claims through vetted outsiders rather than the developers themselves. Bauer-Kahan put it bluntly: "We cannot expect industry to simply grade its own homework." Newsom used the signing to again press Washington to pass national AI rules, arguing state action alone can't keep pace with a technology moving this fast.
How it works, plainly: AB 1405 sets up the registry: auditors must meet state standards for independence and disclosure before they can officially evaluate AI systems in California. SB 813 gives those evaluations legal footing by defining how verification organizations assess compliance with state AI law. Together, the two create a pipeline: registered, vetted auditors performing recognized assessments that regulators and the public can point to, instead of companies simply asserting their own systems are safe.
The rollout: This builds on years of California AI moves: a 2023 executive order on safe state use of AI, a 2024 package covering deepfakes, watermarking, and protections for children and workers, and 2025's SB 53, which forced frontier AI developers to publish safety frameworks and report serious incidents. This year California also added AI companion chatbot child-safety rules, a Tech Fraud Task Force, and an AI Cyber Defense Program for critical infrastructure. The audit framework is the next layer on top of that stack.
