Texas businesses
Since September 1, 2025, Texas businesses that maintain a recognized cybersecurity program have an affirmative defense against certain data-breach claims. But the defense only holds if the program is real and documented. That’s exactly what we build.
SB 2610 scales its expectations by headcount. We build a program — anchored on NIST CSF 2.0 — that matches the tier you fall into.
Fewer than 20 employees
A streamlined set of safeguards sized to a very small team.
20–99 employees
A mid-tier program aligned to recognized frameworks.
100–249 employees
A NIST CSF 2.0–based program for larger small businesses.
SB 2610
Texas’s cybersecurity safe-harbor law — an affirmative defense, in effect since September 1, 2025, for businesses that adopt a recognized security program.
TDPSA
The Texas Data Privacy & Security Act — data-handling and consumer-rights obligations, enforced aggressively by the Texas Attorney General.
TRAIGA
The Texas Responsible AI Governance Act — new AI obligations in effect January 1, 2026.
Start with a baseline assessment. We’ll show you exactly where you stand against a recognized framework — and what it takes to make SB 2610 work for you.
