Cranium’s Guide to Navigating Regulatory Uncertainty While Building a Tech Company

Building in a regulated space is challenging enough. Building in an emerging regulated space, where the rules are still being written, requires a completely different playbook. In a recent episode of Category Visionaries, Cranium CEO Jonathan Dambrot shares how they’re navigating the complex regulatory landscape of AI security while maintaining innovation momentum.

The Regulatory Landscape

AI regulation is evolving rapidly and unevenly across different regions. “The problem in the US is you’re going to see this very similar to the way that GDPR versus some of the stateside privacy regulations work,” Jonathan explains. “If we’re not careful, it can become very bifurcated in terms of how do you solve for these states specific issues, and they’re not aligned.”

Global Regulatory Divergence

The complexity is amplified by varying international approaches. Jonathan points to stark contrasts: “India has already said, they’re not going to regulate AI. They’re hugely regulating privacy. But when it comes to AI, there’s going to be no regulation.” This creates interesting dynamics for companies deciding where to develop and deploy AI technologies.

Proactive Engagement

Rather than waiting for regulations to solidify, Cranium actively engages with regulators. “We have had a number of different discussions with different members within the government, whether that be statewide or federal,” Jonathan shares. This proactive approach helps them anticipate and influence regulatory direction.

Building for Compliance

Cranium’s approach to product development anticipates regulatory requirements. They launched AI Card to help organizations “automate the compliance and transparency of their AI systems against things like the EUAI Act, NIST AI risk management framework.” This forward-thinking approach helps customers stay ahead of regulatory changes.

Balancing Innovation and Regulation

The challenge isn’t just complying with regulations – it’s maintaining innovation momentum while doing so. Jonathan emphasizes that “In most cases, if you build AI and ML systems appropriately and you do it the right way and it’s for good, and you’re solving big problems, we can do things that we could never have imagined in the past.”

Community Approach to Compliance

Cranium takes a collaborative approach to regulatory challenges. Working with organizations like ISAACS and the Global Resilience Federation, they help develop practitioner guides that address both compliance and innovation needs. This community-driven approach helps establish industry standards while sharing the compliance burden.

Anticipating Future Regulation

Looking ahead, Jonathan sees increased regulatory activity: “You’re going to see some additional federal regulation here coming. There will be some additional executive orders around this coming even over the course of the next month.” This forward-looking perspective influences their product roadmap and go-to-market strategy.

The key insight from Cranium’s approach is that regulatory uncertainty doesn’t have to stifle innovation. By engaging proactively with regulators, building compliance into their product DNA, and taking a community approach to standards development, they’ve turned regulatory complexity into a competitive advantage.

For founders building in regulated or soon-to-be-regulated spaces, Cranium’s experience offers valuable lessons. Don’t wait for perfect regulatory clarity – engage early, build with compliance in mind, and help shape the standards that will govern your industry.

The companies that thrive in regulated markets will be those that see regulation not as a burden but as an opportunity to build trust and create competitive advantage. As Jonathan puts it, if we do this right, we can achieve things “we could never have imagined in the past.”