Nexos, the San Diego technology division of Abrams & Luchanski founded in 2024, plans and builds custom software, AI agents, privately run language models and the connections between business systems for Washington companies, with every Washington engagement delivered remotely. Because the whole state shares our Pacific clock, workshops and reviews fit inside a normal working day, and any build that touches health or biometric data is designed around Washington’s consent rules, with your counsel signing off on how they apply.
Washington’s reputation rests on a handful of very large technology and aerospace employers around Puget Sound, and the Bureau of Labor Statistics bears part of that out: about 164,100 people work in the information sector statewide. But the broader numbers describe a different economy. Professional and business services employ roughly 546,600, manufacturing about 276,000, and the Census Bureau counts 202,177 employer establishments alongside 545,903 owner-run businesses that carry no payroll at all.
The Department of Commerce names eleven key sectors, and most of them are physical industries: aerospace, agriculture and food manufacturing built on some 300 crop commodities, forest products, maritime, military and defense, clean technology and tourism. East of the mountains, around Spokane, Yakima and the Tri-Cities, the work is farming, processing, hospitals and distribution rather than code.
Health care is a large industry in its own right, with $75.4 billion in receipts across health care and social assistance in the Census Bureau’s 2022 count. That matters for software here more than in most states, because Washington regulates consumer health data that HIPAA does not cover. A fitness app, a wellness brand or a retailer that infers health from purchases can fall under a health-privacy statute, and even a clinic whose patient records sit under HIPAA can be reached by it through its website, app and marketing data that falls outside those HIPAA-covered records (for example, tracking data on public pages); your counsel confirms where that line falls.
None of this describes past work. Each build below follows from Washington’s industries and its rules, with the reasoning spelled out.
Tier-two and tier-three suppliers answer purchase orders, first-article inspections, certificates of conformance and engineering changes from larger primes, usually by re-typing numbers between an emailed PDF, the ERP and a quality log. Wiring those steps together, with a person confirming every nonconforming part, should shorten turnaround and leave a cleaner traceability record.
The My Health My Data Act requires separate consent before consumer health data is shared. At a clinic, HIPAA governs the patient record, and the Act can reach website, app and marketing data that falls outside its HIPAA-covered patient records (for example, tracking data on public pages), as your counsel confirms; at a wellness brand or app it can reach almost everything. Either way, a public chatbot is a poor place for symptom questions or health guesses drawn from purchases. A model on your own hardware, or a dedicated hosted one, lets staff summarize and draft without that data going to a public AI service; a hosted deployment runs under a processor contract your counsel reviews.
Orchards, packers and food processors reconcile bin counts, lot codes, cold-storage inventory and buyer orders across several systems during a short, intense season. A small data platform that brings those numbers together and flags mismatches daily is usually a better fit than a spreadsheet rebuilt weekly.
Engineering, accounting, architecture and legal practices hold their best answers in past proposals and files. An agent that searches those documents, drafts a first response and cites the source it used saves senior hours while every outgoing word is still approved by a person.
Port-side trucking, marine services and warehouse operators juggle vessel windows, crew availability and customer changes by phone and whiteboard. A purpose-built internal tool that holds the schedule, logs every change and notifies the right people replaces the whiteboard without forcing a large ERP project.
Washington has not passed a general consumer-privacy code like Colorado’s or Texas’s; the privacy chapters of Title 19 RCW are targeted ones — health data, biometrics, breach notice — plus two AI statutes enacted in 2026. The health-data law is the one most likely to reach an ordinary business, and it can be enforced by private lawsuits as well as by the Attorney General.
Consumer health data — including health inferences drawn from purchases or app use — may be collected only with consent for a specified purpose or as needed to provide what the consumer asked for, and sharing needs a second, separate consent; selling it needs a separate valid authorization. Businesses must post a consumer health data privacy policy linked from their homepage, and geofencing around in-person health care providers is banned. A violation is a per se Consumer Protection Act violation, enforceable by the Attorney General and by private action.
A business may not enroll a biometric identifier in a database for a commercial purpose without notice and consent, or a mechanism that prevents later commercial use, and may not sell or disclose it without consent except in listed cases. Data may be kept only as long as reasonably necessary, with reasonable care against unauthorized access; collection for a security purpose is exempt from the notice-and-consent rule. Only the Attorney General enforces it, under the Consumer Protection Act.
Any business that owns or licenses Washington residents’ personal information has no more than 30 calendar days after discovering a breach of unsecured data to tell the people affected. If more than 500 residents are affected, the Attorney General must be notified within the same 30 days — a reason to decide early where an AI system stores what it reads.
Operators of chatbots that sustain a human-like relationship across conversations must disclose that the user is talking to an AI, repeat the notice at least every three hours, add stricter protections for known minors and run a self-harm referral protocol. A bot used only for operations, internal research, technical assistance or customer service is excluded, provided it does not sustain a relationship across interactions and draw emotional responses.
Providers of public generative AI systems with more than a million monthly users must embed tamper-resistant provenance data in images, audio and video their systems create or materially alter. It binds those large providers, enforced by the Attorney General, not a business using their tools.
Created a task force, administered by the Attorney General’s office, to recommend guidelines and limits for AI use by government and the private sector. Its final report, released July 1, 2026, brought its total to eleven recommendations, adding a permanent advisory body on AI and emerging technology and rules for companion AI chatbots. The task force places no duties on businesses itself; its recommendations inform future legislation.
General information, not legal advice. Laws, regulations and their effective dates change; confirm how they apply to your business with your own counsel. Last reviewed 2026-09-26.
A Washington project starts with the free audit: one call, then a written audit ranking what is worth automating first. A proposal with a fixed scope follows, covering what gets built, what is excluded and what it costs. Once the paid build begins, the people who actually do the work share their screens and show us each step, each system and each workaround, and from then on you have check-in calls weekly, a shared board showing progress, and software that works early on.
The federal Mountain/Pacific boundary (49 CFR § 71.9) runs through central Idaho, well east of the state line, so all of Washington — Bellingham to Walla Walla — keeps the same Pacific Time we work in from San Diego. A 9 a.m. review in Tacoma or Spokane is 9 a.m. for us too. Training runs live over video and can be recorded on request for packing sheds, hospitals and shipyards whose staff work shifts.
Remote: discovery, reviews and training over video, with shared documents and working software in between. Pacific Time statewide — identical to our own working hours.
The free technology audit is a call and a written audit, wherever you are, Southern California included. Outside Southern California, all of it runs over video.
Audit — free: a call and a written technology audit.
Build — from $4,900 per fixed-scope project.
Run — from $890/month for a hosted private model.
The same prices everywhere. See pricing.
Aidan Luchans founded Abrams & Luchanski in San Diego in 2024, and designed and built the Nexos Platform, a multi-tenant AI operations platform: AI agents, multi-step workflows with human approval, connections to roughly 90 business tools, and private knowledge search.
Aidan leads both the firm’s advisory work and Nexos’s engineering, so the person who scopes a project also builds it.
Every Washington engagement is remote, so an orchard in the Wenatchee Valley is served exactly as a firm near Seattle’s waterfront is. Seattle, Bellevue, Redmond and the rest of Puget Sound are served remotely from San Diego on the same Pacific Time — Nexos has no Washington office or staff, and every discovery session, review and training runs over video.
No. Nexos is based in San Diego and works in person only in Southern California; every Washington engagement — discovery, reviews and training — runs over video on the same Pacific Time.
It can. Data already covered by HIPAA is exempt; the Act reaches health data outside it, including health conclusions a business draws from purchases or app activity, so wellness brands, retailers and apps can be inside it, and a clinic can be too for website, app and marketing data that falls outside its HIPAA patient records. If an AI system would read or infer anything about a person’s health, we treat consent and data flow as design requirements from day one; your counsel confirms how the Act applies.
The first step costs nothing: the free technology audit is one call followed by a written audit ranking what to automate first; the price comes in the fixed-scope proposal after it. A small Washington business can then have an AI agent built as a fixed-price project starting at $4,900, and, if the agent should run on a privately hosted model rather than a public service, keep it running from $890 a month. All of it is delivered over video on Pacific Time.
Generally not. Chapter 19.440 RCW, effective January 1, 2027, excludes bots used only for customer service, internal research or operations, as long as they do not sustain a relationship across multiple interactions and generate outputs likely to elicit emotional responses. We scope support assistants to stay inside that exclusion and label them as AI; your counsel confirms the fit.
Possibly, but plan it carefully. Washington’s biometric statute requires notice and consent before enrolling a biometric identifier for a commercial purpose and restricts disclosing it, though security uses are treated differently. We keep biometric templates out of any AI pipeline unless there is a clear, documented reason and legal sign-off.
A short description is plenty. We reply within one business day.
Nexos works alongside Abrams & Luchanski consultants so technical solutions are designed around the business — not the other way around.