Nexos is a San Diego AI and software developer that designs and builds AI agents, private language models, custom applications and system integrations for Utah businesses, from Salt Lake City to the Silicon Slopes corridor in Lehi and Provo. Every Utah engagement is remote: workshops, reviews and training run over video on a schedule set for Mountain Time, one hour ahead of ours. Scoping covers how the Utah Consumer Privacy Act, the state’s generative-AI disclosure law and its breach-notification rules bear on the build, for your counsel to confirm.
Utah’s economy is young and still compounding. The Census Bureau puts the population at 3,538,904 in its July 2025 estimate, 8.2% above the 2020 base, and counts 95,494 employer establishments whose payroll grew by 3.8% between 2022 and 2023 to just under 1.58 million people. Beside them sit 304,287 nonemployer businesses — contractors, consultants, sellers and side ventures run by their owners alone.
The Governor’s Office of Economic Development names five targeted industries: aerospace and defense, fintech, technology (it lists AI, quantum and blockchain), life sciences and healthcare, and energy and minerals. The Bureau of Labor Statistics shows where the office jobs already are: 260,600 in professional and business services and 102,400 in financial activities in August 2026, against 155,500 in manufacturing and 40,400 in the information sector. The software cluster between Lehi and Provo that the industry calls Silicon Slopes is only one part of that picture; card issuers, lenders, insurers, clinics and defense suppliers along the Wasatch Front employ far more people between them.
That mix matters for the kind of work that pays back. A company in a state with a deep software labor market can often hire engineers for its product, yet still struggles to find anyone with time for internal plumbing — the reconciliations, handoffs and reports that sit between the systems it already bought. Those projects rarely justify a permanent hire, which is exactly where an outside build team is most useful.
We have not delivered a Utah project, so this section shows no past work. It reasons from the industries the state itself targets to the builds most likely to return their cost.
Financial operations spend hours on applications, disputes and compliance checks that follow a written procedure but still arrive as PDFs and email. An agent that gathers the documents, checks them against the procedure and prepares a recommendation — with an analyst approving every outcome — shortens the queue without handing a decision to the model.
Life-sciences companies and care providers hold records that HIPAA and their own contracts keep out of consumer chatbots, and Utah’s 2025 statute on mental-health chatbots goes further for that one use, barring their suppliers from selling or sharing users’ health information. A model running on hardware you control, or a dedicated hosted instance, lets staff summarise and search that material while the data stays inside your boundary.
Fast-growing firms tend to buy a CRM, an ERP and a ticketing tool in quick succession and then run them half-configured. Setting them up properly, migrating the old spreadsheets and training the team is often worth more than anything new.
Machine shops and component makers serving aerospace primes keep inspection results, certificates and lot histories across several systems. Pulling them into one dataset, with dashboards for quality and delivery, makes an audit or a customer request an afternoon’s work rather than a week’s.
Most of the state’s employers are small, and many owners still copy data between their booking, quoting and accounting tools by hand. Automating those handoffs, with alerts when something does not match, gives a five-person company back the hours it would otherwise spend on re-entry.
Utah pairs a business-friendly comprehensive privacy law with one of the earliest state statutes aimed specifically at generative AI. The disclosure rules bind the business using the AI, not just the vendor that made the model, so we decide in discovery how and when your assistant identifies itself.
Covers controllers and processors that do business in Utah or target its residents, have annual revenue of $25 million or more, and either process the personal data of 100,000 or more Utah consumers in a year or earn over half their gross revenue from selling personal data and process that of 25,000 or more; nonprofits, HIPAA covered entities and business associates, higher-education institutions, government bodies and financial institutions governed by the Gramm-Leach-Bliley Act are excluded. Consumers may confirm, access, correct, delete and port the data they provided, and opt out of targeted advertising and the sale of their data. There is no private right of action; the Attorney General must give 30 days to cure and may then recover actual damages and up to $7,500 per violation.
A business using generative AI to deal with consumers must say it is AI when a person clearly and unambiguously asks, and a licensed professional must disclose it up front whenever the interaction is high-risk, such as collecting health, financial or biometric data or giving advice people will rely on. An assistant that clearly identifies itself as AI at the start and throughout falls within a statutory safe harbor. The Division of Consumer Protection enforces it, with fines of up to $2,500 per violation, and using AI is expressly no defense to a consumer-protection violation.
Creates the Office of Artificial Intelligence Policy in the Department of Commerce and a learning laboratory through which a company can seek a regulatory mitigation agreement — for example a cure period or reduced fines — to test an AI product under agreed conditions. It adds no duties for a business that does not apply.
A supplier of a mental health chatbot may not sell or share a Utah user’s individually identifiable health information or their inputs with third parties, except in narrow cases such as a provider request with the user’s consent. Contractors that help run the chatbot may receive that data only under HIPAA-equivalent privacy and security terms.
Any business that operates in Utah and keeps personal information must maintain reasonable procedures to prevent its unlawful use or disclosure and to destroy records it no longer needs, with no revenue threshold. After a breach it must investigate promptly and, if misuse for identity theft or fraud has occurred or is reasonably likely, notify each affected Utah resident without unreasonable delay. When 500 or more residents are affected, the Attorney General and the Utah Cyber Center must also be told, and at 1,000 or more the nationwide consumer reporting agencies.
A business that creates, maintains and reasonably complies with a written cybersecurity program meeting the statute’s requirements, in place when a breach happens, has an affirmative defense to Utah claims that it failed to implement reasonable security controls. The defense extends to claims about responding to or notifying people of the breach when the program had protocols for those steps and they were followed. That is a reason to write down the security controls of any AI system that holds customer data.
General information, not legal advice. Laws, regulations and their effective dates change; confirm how they apply to your business with your own counsel. Last reviewed 2026-09-26.
A Utah project opens with a screen-shared working session: the people who actually do the task show us the systems, the exceptions and the spreadsheets that hold it together. We then send a written scope with a fixed price, and the scope sets a date for the first working version, which your team tests against real cases, with changes agreed on a short weekly call.
All of Utah is on Mountain Time, an hour ahead of our Pacific clock, so a 9 a.m. stand-up in Salt Lake City is 8 a.m. in San Diego and our full working day overlaps yours. We plan launches around the state holidays, including Pioneer Day on July 24, and training sessions can be recorded so shift workers and new hires can watch them later.
Remote: discovery, reviews and training over video, with shared documents and working software in between. Mountain Time statewide — one hour ahead of Pacific.
The free technology audit is a call and a written audit, wherever you are, Southern California included. Outside Southern California, all of it runs over video.
Audit — free: a call and a written technology audit.
Build — from $4,900 per fixed-scope project.
Run — from $890/month for a hosted private model.
The same prices everywhere. See pricing.
Aidan Luchans founded Abrams & Luchanski in San Diego in 2024, and designed and built the Nexos Platform, a multi-tenant AI operations platform: AI agents, multi-step workflows with human approval, connections to roughly 90 business tools, and private knowledge search.
Aidan leads both the firm’s advisory work and Nexos’s engineering, so the person who scopes a project also builds it.
Every Utah engagement runs remotely, so a company in Cache Valley or Washington County is scheduled and priced the same as one in downtown Salt Lake City.
The same as anywhere we work: the free technology audit costs nothing, builds start from $4,900 per project once the scope is written, and a hosted private model starts from $890 a month. An AI agent’s price rises with the number of systems it reads from and writes to, the approval steps a person keeps, and the volume of cases it handles. Being in Utah adds no travel or remote surcharge.
Under Utah Code 13-77, a business must tell someone they are dealing with generative AI when that person clearly asks, and licensed professionals must disclose it up front in high-risk interactions. Most teams have the assistant say it is AI at the start of every conversation and keep that visible throughout, for example with a persistent “AI assistant” label. Doing both is what the statute’s safe harbor (13-77-104) requires. Confirm the details for your situation with counsel.
Only if your annual revenue is at least $25 million and you also process data on 100,000 or more Utah consumers a year, or earn over half your revenue from selling personal data and process that of 25,000 or more. Out-of-state companies whose products or services target Utah residents are covered on the same thresholds, while nonprofits and HIPAA covered entities are not. Many Utah firms fall below that line, but we still build with access, deletion and opt-out requests in mind so the system does not need rework if you grow into it.
Yes. Utah engagements run entirely over video, with shared documents and a working version to test between calls, and the one-hour time difference means our days overlap almost completely. If you want someone on site, that is only available in Southern California.
Start with a task that happens every day, follows written rules and currently means copying data from one system to another — intake forms, invoice matching or weekly reporting are typical. The free audit ranks your candidates by hours saved and risk before anything is built.
A short description is plenty. We reply within one business day.
Nexos works alongside Abrams & Luchanski consultants so technical solutions are designed around the business — not the other way around.