Texas HB 149

Texas TRAIGA, in plain language.

The Texas Responsible Artificial Intelligence Governance Act sets rules for both government and private use of AI in Texas. Here is what it targets, how it is enforced, and where an AI inventory fits in.

Your First Sweep lands within 24 hours All US AI laws
What it is

A governance law built around intent.

Signed in 2025 and taking effect on January 1, 2026, TRAIGA (House Bill 149) applies to government agencies and to companies that develop or deploy AI in Texas. Rather than grade every system by risk tier, it bans a set of intentional harms and adds extra limits on government use.

Prohibited uses

What the law forbids.

Manipulation and harm
Developing or deploying an AI system with the intent to manipulate a person into self-harm, harm to others, or criminal conduct.
Unlawful discrimination
Developing or deploying AI with the intent to unlawfully discriminate against a protected class. The law turns on intent, not on disparate impact alone.
Unlawful content
Using AI intended to produce unlawful material, such as child sexual abuse material or certain non-consensual deepfake content.
Government limits
Public agencies face added constraints, including a ban on AI social scoring and limits on certain biometric identification and surveillance uses.
How it works

Enforcement and a sandbox.

TRAIGA is enforced by the state, with room to fix problems before penalties land, and a program to test new systems under supervision.

  • Enforced exclusively by the Texas Attorney General. No private right of action.
  • A notice-and-cure period gives companies a window to fix a violation first.
  • Civil penalties scale with severity and whether the violation was cured.
A regulatory sandbox
TRAIGA also creates an AI sandbox program and a state AI Council, so companies can test systems under regulatory supervision rather than in the dark.
Where Northbeams fits

Show what you run and how you govern it.

A law built around intent rewards companies that can demonstrate what AI is in use and that policy is actually enforced. Northbeams gives you the inventory and the signed record. It does not determine intent or liability.

  • Inventory: every AI tool across browser, desktop, CLI, and MCP, sorted sanctioned, unknown, or high-risk.
  • Attribution: each use tied to a person and a team, so you know who ran what.
  • Evidence: an immutable, signed log of AI activity and enforced policy you can produce on request.
This is a plain-language overview, not legal advice. Northbeams helps you know what AI you run and prove it, with an AI inventory, per-user attribution, and signed logs. It does not tell you what TRAIGA requires of you, and it does not determine intent or liability. For your obligations, consult qualified counsel.

Know what AI you run in Texas.

Build the inventory first. Your First Sweep lands within 24 hours.

Get your First Sweep by Monday Poke the live demo. No signup.