Blog/TRAIGA Essentials
TRAIGA EssentialsFebruary 6, 2026·4 min read

Does TRAIGA Apply to My Business? A Decision Framework

The most common question we hear: “Does TRAIGA even apply to us?” The answer depends on three variables — what AI you use, where you use it, and what type of organization you are. This framework walks you through the determination in under four minutes.

Question 1: Do You Deploy AI Systems in Texas?

TRAIGA applies to deployers — organizations that use AI systems, not just those that build them. If your organization uses AI to make or assist decisions that affect people in Texas, you are a deployer under TRAIGA. This includes:

  • Internally built AI. Custom machine learning models, NLP systems, computer vision applications.
  • Third-party AI tools. SaaS platforms with AI features (CRM scoring, resume screening, chatbots, diagnostic AI).
  • Embedded AI. AI components within larger software you license (e.g., fraud detection in your payment processor).
  • Generative AI. GPT-based tools, image generators, code assistants used in business operations.

If the answer is yes to any of these, proceed to Question 2. If you genuinely use no AI in any form, TRAIGA does not currently apply — but that's increasingly rare in 2026.

Question 2: Do Those AI Systems Affect People in Texas?

TRAIGA has geographic scope. The AI system must make or assist decisions affecting natural persons in Texas. This includes:

  • Customers, patients, or students physically in Texas
  • Texas residents interacting with your services remotely
  • Employees working in Texas offices
  • Applicants applying for positions based in Texas

If your AI only affects people outside Texas, TRAIGA doesn't apply. But if you have any Texas-based customers, employees, or users — which most national companies do — it applies to those interactions.

Question 3: What Type of Organization Are You?

Your deployer type determines which additional statutes stack on top of TRAIGA's base requirements:

Private Sector Company

Applies: TRAIGA (HB 149) only. You must screen for prohibited practices, build NIST AI RMF alignment, and maintain cure readiness. No mandatory audits. No mandatory disclosures (unless you're also in healthcare).

Texas State Agency or Local Government

Applies: TRAIGA + SB 1964 (AI Ethics Code) + HB 3512 (AI Training). Triple compliance obligation. You must maintain a public AI inventory, adopt a formal ethics code, conduct heightened scrutiny assessments, and ensure employees complete annual DIR-certified AI training. Full government guide here.

Healthcare Provider

Applies: TRAIGA + SB 1188 (Healthcare AI Disclosure). You must provide patient-facing disclosures before or at the time of AI-assisted services. Full healthcare guide here.

School District

Applies: TRAIGA + SB 1964 + HB 3512 (same as government). AI used in student assessments, administrative decisions, or classroom tools all fall under scope.

Question 4: Are You Exempt?

TRAIGA provides partial exemptions for two industries:

  • Insurance companies regulated by the Texas Department of Insurance — exempted from certain TRAIGA provisions where existing TDI regulations already cover AI use in underwriting and claims.
  • Financial institutions subject to federal banking regulations — partially exempted where federal AI oversight already exists.

Important: partial exemption is not full exemption. Both insurance and financial companies are still subject to TRAIGA's prohibited practice restrictions. You cannot use subliminal manipulation or social scoring in insurance underwriting even if you're otherwise partially exempt.

The Uncomfortable Gray Zones

In practice, several common scenarios create confusion:

  • “We only use ChatGPT for internal tasks.” If those tasks involve decisions about employees, applicants, or customers, TRAIGA applies. Internal-only use doesn't equal exempt use.
  • “Our vendor handles AI compliance.” TRAIGA places obligations on deployers, not just developers. Your vendor's compliance doesn't substitute for yours. You need your own governance, screening, and documentation.
  • “We're a small business with only a chatbot.” Size doesn't determine applicability — function does. A customer-facing chatbot that assists purchasing decisions or handles complaints falls under scope regardless of company size.
  • “Our AI doesn't make final decisions — humans do.” TRAIGA covers AI that assists decisions, not just autonomous decisions. Human-in-the-loop doesn't mean exempt.

The Quick Decision Tree

  1. Do you use any AI system? No → Not applicable. Yes → Continue.
  2. Does it affect people in Texas? No → Not applicable. Yes → Continue.
  3. Are you insurance or financial? Yes → Partially exempt (prohibited practices still apply). No → Continue.
  4. Are you government/school? Yes → TRAIGA + SB 1964 + HB 3512. No → Continue.
  5. Are you healthcare? Yes → TRAIGA + SB 1188. No → TRAIGA (HB 149) applies as baseline.

What to Do Once You Know It Applies

If you've reached this point and determined TRAIGA applies, the next step is straightforward: build your compliance baseline. That means running through the full checklist, starting with your AI inventory and prohibited practice screening.

TXAIMS walks you through every step based on your deployer type — private sector, government, or healthcare — with automated screening, NIST alignment scoring, and evidence bundle generation. The determination you just made in this article takes 30 seconds in the platform.

Ready to automate your TRAIGA compliance?

TXAIMS screens your AI systems, builds your NIST defense, and generates evidence bundles in minutes.

Start 14-day free trial