Incorporator The Journal of U.S. Formation
Start Free Quiz
Editorial 7 MIN READ

AI-drafted filings at Secretary of State offices: the first enforcement signals

Delaware, California, Texas, and New York are pattern-matching on machine-generated submissions, and the signer still owns the attestation

The Editors
Staff, Incorporator.org
7 min read Updated
Contents 8 sections
  1. What Delaware said, and what it actually means
  2. California's bizfile portal is pattern-matching
  3. Texas names the pattern
  4. New York paused, for related reasons
  5. FinCEN is the sharper risk
  6. What the working protocol should look like
  7. The race the portals are running
  8. Sources

our state filing offices have now said, in one register or another, that AI-generated entity filings are a problem they are actively watching. The language is careful, the enforcement is quiet, and the exposure is on the signer, not the drafter.

The question for anyone forming an LLC or corporation in late 2023 is not whether AI-drafted filings are legal. They are. The question is whether the human who signs the certificate has read it.

What Delaware said, and what it actually means

The Delaware Division of Corporations issued informal guidance during the third quarter of 2023 to registered agents and high-volume filers making the obvious point: an AI draft of a Certificate of Formation is fine, and a human signer who has not actually reviewed it is not.

The statute the Division pointed to is 6 Del. C. § 18-204, which governs execution of LLC filings. It requires that any certificate filed with the Division be signed by an authorized person, and the signature is the operative act: it attests that "the facts stated therein are true." The Division's position is that an authorized signer who signs an AI-generated document without reviewing it has not made a reliable attestation, and a false attestation is grounds for rejecting the filing and, in extreme cases, pursuing the signer.

This is not new law. It is a restatement of what § 18-204 has always required, framed for a world where the drafter and the signer are no longer the same cognitive actor. The Division has stopped short of requiring a disclosure of AI assistance. It has not stopped short of saying the signer owns the content.

California's bizfile portal is pattern-matching

California's Secretary of State launched the bizfile Online portal in 2022, moving the bulk of entity filings, from Articles of Organization on Form LLC-1 through statements of information, onto a single submission system. The portal replaced a patchwork of paper and PDF intake at the Sacramento office and made bulk submissions faster. It also made bulk submissions legible.

A filing portal that sees every submission can notice when the same paragraph appears verbatim on fifty unrelated Articles of Organization submitted from adjacent IP addresses over a two-hour window. California's bizfile team has not published a formal rule on AI-generated content, but staff have acknowledged in industry calls that the portal flags bulk-identical language and holds those filings for manual review. The backlog these holds create is measured in days, not minutes, and the review is not visible to the filer until the filing is either accepted or rejected.

If you are forming in California and using an AI-assisted draft, the practical consequence is that a template your agent reused across ten clients looks like the template a spam operator reused across ten fictional entities. The portal cannot tell the difference at intake, and the hold is the cost.

Texas names the pattern

The Texas Secretary of State issued an internal memo in July 2023 on what the office called "pattern filings": Certificates of Formation with typo-identical text, identical registered-agent addresses, and filing origins traceable to the same IP. The memo was not published as a rule. It surfaced in practitioner conversations and at bar CLE panels through the late summer.

Texas filings run through SOSDirect, and the office has used IP-level aggregation to catch shell-company factories before. The 2023 memo extends that approach to linguistically identical drafting, which is the fingerprint that a single AI model with a single prompt leaves across many clients. The office did not say it would reject pattern filings categorically. It said it would review them, and it reserved the right to ask the organizer for documentation of the filing's authenticity.

The filers most exposed to this are the agents and formation services running AI drafting at scale without client-specific customization. A one-off human-reviewed filing, even one drafted with an AI assist, does not leave the fingerprint.

New York's Department of State had been preparing to migrate its entity filings to an expanded e-filing system in 2023. The rollout was pushed back, and among the reasons cited by the Department was the volume of AI-generated content that the existing intake processes were not designed to screen. New York's concern is less about small-operator AI drafts and more about the synthetic filing: a fully generated entity, with a generated registered agent, a generated address, and a generated signer, used for downstream fraud.

The delay is not indefinite, and the Department has not committed to a specific screening mechanism. What the pause signals is that state filing offices now view the modernization roadmap as a two-front problem: the UX side, which is about making filings faster for legitimate applicants, and the security side, which is about making filings harder to generate at scale by adversarial actors. The two objectives pull in opposite directions.

FinCEN is the sharper risk

State filings are one part of the picture. The federal part arrives in January 2024, when FinCEN's beneficial ownership information reporting rule under the Corporate Transparency Act takes effect. The rule is codified at 31 CFR 1010.380, and the certification requirement is in subsection (d): every BOI report must be certified, by a person with authority to act on behalf of the reporting company, as true, correct, and complete. That certification is made under penalty of perjury.

The penalty language is not decorative. The statute authorizing the rule, 31 U.S.C. § 5336(h), provides civil penalties of up to $500 per day for willful failure or false reporting, and criminal penalties of up to two years of imprisonment and a $10,000 fine for knowingly providing false information. The BOI report is a short form. It lists the reporting company, its beneficial owners, and for entities formed on or after January 1, 2024, its company applicants. An AI-generated BOI report that names the wrong beneficial owner, or that omits one, and that is certified by a human who did not actually verify the ownership, is a direct path to the criminal provision.

This is the part of the AI-filings conversation that most founders underweight. A sloppy Certificate of Formation gets rejected. A sloppy BOI report with an untruthful certification is a federal offense.

What the working protocol should look like

The minimum defensible workflow for a filing in the CTA era is three steps: AI draft, attorney or preparer review, human signer who has read the final text. This is not a counsel of perfection. It is what the existing statutes already require if you read them carefully.

For state filings, the review catches the errors that make a filing look synthetic: duplicated boilerplate, addresses that don't exist, registered agents the filer hasn't actually retained. For the BOI report, the review catches the error that actually creates criminal exposure: a beneficial owner list that does not match the real beneficial owners.

The formation guides most founders are reading, including the Delaware LLC formation walkthrough on this site, were written before AI drafting was a meaningful fraction of filings. The mechanics they describe are still correct. What changes in late 2023 is that the cheapest part of the workflow, the drafting, is now trivial, and the most expensive part, the attestation, is now the bottleneck that keeps the filing honest.

The race the portals are running

State filing offices spent the 2010s modernizing away from paper. Most of them finished that migration somewhere between 2018 and 2022. The portals they built are good at volume and mediocre at adversarial screening, because adversarial filing at scale was not a 2015 threat model.

It is now. The arms race for the next few years is between portal operators adding friction (IP-rate-limiting, linguistic deduplication, registered-agent verification, flagged reviews of bulk submissions) and adversarial AI submissions adding variation (paraphrasing, distributed filing origins, synthetic but internally consistent entity data). The states that win this race will be the ones that invest in the screening layer before the fraud arrives, not after.

For the legitimate filer, the near-term cost is modest: a couple of extra days for a held filing, a rejection for a template that looks too much like a thousand other templates, an attorney review billed that might have been skipped in 2019. The filer who treats the signature block as a load-bearing commitment, rather than an afterthought, is the filer who stays on the right side of both 6 Del. C. § 18-204 and 31 CFR 1010.380(d).

The Division of Corporations has been clear that the law has not changed. Only the drafting has.

Sources

Keep reading

More from the journal.