California Governor's Office of Emergency Services (Cal OES) — Transparency in Frontier AI Act reporting, via the California Cybersecurity Integration Center

Ways to reach them

TFAIA reporting portal (secure) · Web form

https://app.kaseware.us/public/#CALOES/e8921920-9735-4798-b24d-9c28c306f6e8

Verified · 2026-09-22

Submission of critical safety incidents and catastrophic-risk assessments. Cal OES describes it as a 'secure TFAIA Portal', also reachable by QR code from its page.

VERIFIED — this exact URL is published on the Cal OES TFAIA reporting page. It is a third-party (Kaseware) hosted intake, which is why the URL looks unofficial; it is the one Cal OES publishes.

Distinct public reporting channel · Web form

not separately published

Verification expired · 2026-09-22

This route is retained as reference only. Its verification is missing, more than 180 days old, or the contact window is not currently open; do not rely on it until it is re-checked.

n/a

VERIFIED PARTIAL ABSENCE — SB 53 requires a public reporting mechanism, but the Cal OES page presents a single portal without distinguishing a public-facing channel from the developer channel. In practice the portal above is the published route.

Homepage · Homepage

https://www.caloes.ca.gov/office-of-the-director/operations/homeland-security/california-cybersecurity-integration-center/transparency-in-frontier-ai-act-reporting/

Unchecked

What it does

Statutory recipient under SB 53 of critical safety incident reports from frontier AI developers (within 15 days of discovery; 24 hours where there is imminent risk of death or serious physical injury) and of periodic catastrophic-risk assessment summaries. SB 53 ALSO requires Cal OES to establish a mechanism for THE PUBLIC to report critical safety incidents. Cal OES does not fine or investigate developers itself; it receives, aggregates and refers, and reports to the legislature.

Its powers

investigate

Honest assessment

Genuinely novel: a government incident-report inbox for frontier AI catastrophic risk that anyone can reach. It is brand new, thinly staffed, and sits inside the state's cyber-threat integration centre rather than an AI-specific unit, so expect reports to be triaged as security incidents. Its value is that filings here become part of the statutory record that feeds the AG's enforcement and the legislature's review. No email, no phone — the portal is the only published route, and reports are confidential.

Notes