Most AI companies follow the same playbook: build the product, raise money, get customers, then figure out compliance. Somewhere around Series B, a legal team shows up and starts checking boxes. By then, the codebase is a mess of shortcuts and the governance story is whatever the marketing team can spin. We did the opposite. Before we had a single paying customer, before we had a pitch deck, before we had anything resembling a sales team, we got ourselves registered with the