{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/us/playbook/saas",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/us/playbook/saas)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-12",
    "fingerprint": "ewai:us:264e39",
    "proof": "sha256:ff0dc2ab702e17138e396e58a1fa40045988e3b6dad5723281ab20b070c26a3c",
    "jurisdiction": "us",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "id": "industry_playbook:us:saas",
  "type": "industry_playbook",
  "schema_version": "1",
  "industry": "saas",
  "label": {
    "sv": "SaaS",
    "en": "SaaS"
  },
  "regulations": [
    {
      "reg": "sec",
      "title": "SEC reporting: Exchange Act §13(a) and Form 8-K Item 1.05",
      "note": "Applies to SEC registrants in every industry."
    },
    {
      "reg": "ccpa",
      "title": "California Consumer Privacy Act as amended by CPRA",
      "note": "Fintech: GLBA-covered data partly exempt (§1798.145(e)). Healthcare: HIPAA protected health information exempt (§1798.146)."
    },
    {
      "reg": "ftc",
      "title": "FTC Act §5: unfair or deceptive acts or practices",
      "note": "Banks and common carriers are outside FTC §5 jurisdiction; fintechs that are not banks are covered."
    },
    {
      "reg": "coppa",
      "title": "Children's Online Privacy Protection Rule (16 CFR Part 312)",
      "note": "Applies to services directed to children or with actual knowledge of child users."
    },
    {
      "reg": "copyright",
      "title": "Copyright Act §107 fair use",
      "note": "Relevant where products reproduce or train on third-party works."
    }
  ],
  "counts": {
    "regulations": 5,
    "obligations": 42,
    "risk_chains": 42,
    "actions": 34,
    "sanctions": 7,
    "decisions": 26,
    "answers": 7
  },
  "top_risks": [
    {
      "id": "risk_chain:us:sec:1-05-a",
      "level": "high",
      "score": 79
    },
    {
      "id": "risk_chain:us:sec:13a-2",
      "level": "high",
      "score": 79
    },
    {
      "id": "risk_chain:us:copyright:107-4",
      "level": "high",
      "score": 71
    },
    {
      "id": "risk_chain:us:copyright:107-1",
      "level": "medium",
      "score": 66
    },
    {
      "id": "risk_chain:us:sec:1-05-materiality",
      "level": "medium",
      "score": 64
    }
  ],
  "top_sanctions": [
    {
      "id": "sanction:us:sec:criminal-32a",
      "max_usd": 25000000,
      "summary": "Willful violations: up to USD 5 million and 20 years for individuals, USD 25 million for entities."
    },
    {
      "id": "sanction:us:sec:civil-penalty-21b",
      "max_usd": 500000,
      "summary": "Tier 1 to 3, up to USD 500,000 per act or omission for entities (statutory base)."
    },
    {
      "id": "sanction:us:copyright:statutory-damages-504-c",
      "max_usd": 150000,
      "summary": "USD 750 to 30,000 per work; up to USD 150,000 per work if willful."
    },
    {
      "id": "sanction:us:coppa:coppa-civil-penalty",
      "max_usd": 10000,
      "summary": "Treated as a trade regulation rule violation: civil penalty per violation (USD 10,000 statutory base, inflation adjusted)."
    },
    {
      "id": "sanction:us:ftc:civil-penalty-45-m",
      "max_usd": 10000,
      "summary": "Civil penalty per violation for knowing violations of trade regulation rules or orders; USD 10,000 statutory base, adjusted annually for inflation."
    }
  ],
  "top_actions": [
    {
      "id": "action_kit:us:sec:incident-to-disclosure-link",
      "action": "Security incident escalation to disclosure counsel"
    },
    {
      "id": "action_kit:us:sec:8k-drafting-template",
      "action": "Item 1.05 drafting template and amendment tracker"
    },
    {
      "id": "action_kit:us:sec:filing-calendar",
      "action": "Filing calendar by filer status"
    },
    {
      "id": "action_kit:us:copyright:source-provenance",
      "action": "Lawful acquisition and provenance of source works"
    },
    {
      "id": "action_kit:us:sec:disclosure-committee",
      "action": "Disclosure committee and escalation path"
    }
  ],
  "outcome": {
    "status": "ok",
    "decisions": 26,
    "with_monetary_penalty": 18,
    "share_monetary": 0.69,
    "median_usd": 5750000,
    "max_usd": 5000000000,
    "latest": "2025-09-30"
  },
  "gaps": [],
  "members_hash": "969039eaa6049c7dda1e5ca61fb7bac02f22841fdc00bd2cc9ab445f0f2e77fd",
  "method": "industry mapping editorial_mapping; ranking: risk score, sanction ceiling, risk-weighted action priority",
  "v": 1,
  "sha256": "17902bd52b59f5cc83a1bdf984398eea61e37606dba22498835fc487b4f2e315",
  "proof": {
    "source": [
      "https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2B-sec78m.htm",
      "https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100",
      "https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2-subchapI-sec45.htm",
      "https://www.ecfr.gov/current/title-16/chapter-I/subchapter-C/part-312",
      "https://uscode.house.gov/view.xhtml?req=granuleid:USC-prelim-title17-section107&num=0&edition=prelim"
    ],
    "object": "industry_playbook:us:saas",
    "label": "Source: NovaCopilot"
  },
  "source": "Source: NovaCopilot",
  "hash": "sha256:ff0dc2ab702e17138e396e58a1fa40045988e3b6dad5723281ab20b070c26a3c",
  "version": "legal-2026-10-12",
  "expires": "2026-10-13T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-12+legal-2026-10-12+2026-10-12T10:59:56",
    "content_hash": "sha256:ff0dc2ab702e17138e396e58a1fa40045988e3b6dad5723281ab20b070c26a3c",
    "revalidate_after": "2026-10-12T12:52:56.207Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/us/playbook/saas",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "chain": 6
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "decision",
  "access_view": "public"
}