CancelClear — Multi-State Auto-Renewal & Negative-Option Compliance Desk

Executive summary

Final decision: Blueprint (GO). CancelClear is a done-for-you auto-renewal / negative-option compliance certification desk for U.S. subscription-commerce and membership businesses ($2M–$75M revenue) that sell into two or more of the eight-plus states that have enacted or substantially amended automatic-renewal statutes since mid-2025 (California, Arkansas, Colorado, Massachusetts, New York, Maine, Maryland, Connecticut), against a backdrop of a record $2.5 billion FTC settlement and an active, still-expanding 2026 FTC/state-AG enforcement wave targeting exactly this failure mode.

The customer does not operate an AI tool. They submit their signup URL, cancellation-flow URL or screen recording, and sample renewal-reminder emails through a secure portal. The desk returns an attorney-designed, compliance-analyst-released State Compliance Certification Binder: a per-state pass/fail scorecard mapped to exact statutory citations, an evidence pack of timestamped screenshots and click-path recordings, a prioritized fix list in plain language, and (optional) ongoing monthly re-certification as the law patchwork keeps changing.

Manifest cross-check: zero hits across 777 prior runs for "auto-renewal," "negative option," "click-to-cancel," or "subscription cancellation" — this is genuinely open terrain, not a re-tread of chargeback, medspa, or consent-management blueprints already on file.

Thesis

Subscription commerce is one of the fastest-growing go-to-market models in the U.S. economy, and the legal ground under it just shifted hard: a $2.5 billion federal settlement, an FTC rulemaking that was vacated and is now being revived, and eight states independently rewriting auto-renewal law with materially different mechanics (a one-click cancellation link in Colorado is not the same requirement as "cancel the same way you signed up" in New York, which is not the same as Connecticut's one-business-day voicemail-processing rule). Small and mid-size subscription brands cannot afford $500–$1,500/hour law-firm review of every state every time a statute changes, and they cannot self-certify off a self-serve template tool with no expert sign-off. CancelClear sells the certified, audit-ready outcome — not a checklist the client has to interpret themselves, and not a SaaS dashboard they have to operate. AI does the expensive part (crawling every flow, extracting every disclosure and timing element, cross-referencing eight-plus divergent statutes in minutes); a compliance analyst under attorney-designed protocol signs the release; regulation itself is the moat that keeps this from collapsing into a free browser extension.

Discovery rationale

This run inherited a manifest of 777 prior entries overwhelmingly dominated (roughly 200+ direct hits) by a single recurring pattern: a narrow regulatory "completeness desk" or "audit/recovery desk" for one vertical after another — healthcare billing/RCM (15+ hits), freight/logistics (dozens), construction, HOA/condo resale (17 combined), self-storage, elevator compliance, tenant/employment screening, bail bonds, wineries, cannabis, and more. Per the standing steering instruction, this run actively avoided extending that saturated cluster and instead scanned nine candidate niches against the manifest before selecting a final direction: childcare/daycare licensing (already covered by a CACFP compliance engine), medical-spa physician oversight (already covered), outpatient physical/occupational therapy Medicare documentation (already covered almost verbatim by "RehabAuth Clear"), payment-card chargeback representment (already covered by a dedicated engine), consumer-side home-warranty claim denial (too close to an existing contractor-side home-warranty authorization desk to be a safe non-duplicate), timeshare exit/resale compliance (rejected — the timeshare-exit industry is itself a live FTC/state-AG enforcement target, an unmitigable reputational and trust risk for a new entrant), vehicle service contracts/extended auto warranty (already covered), and pay-transparency salary-range disclosure (already covered).

Subscription auto-renewal / negative-option compliance returned zero manifest hits on every variant searched, has a fresh, hard, quantifiable catalyst (the $2.5B FTC settlement, September 25, 2025) and a live, still-unfolding eight-state statutory patchwork with two compliance deadlines landing in 2026 itself (Maine, January 1, 2026; Maryland, June 1, 2026; Connecticut, July 1, 2026 — the last of which is three weeks before this run). That combination of total novelty against the manifest and strong, current, primary-source evidence made it the clear winner over the alternative of forcing a marginal variant into an already-crowded vertical.

Candidate comparison

CODE validation

C — Consumer/buyer trend

Subscription commerce keeps growing (global subscription economy market $555.92B in 2025, projected $1.51T by 2033 at a 13.3% CAGR — Grand View Research) even as regulators sharply escalate scrutiny of how subscriptions are sold and cancelled. The FTC's own "click-to-cancel" Negative Option Rule was vacated by the Eighth Circuit in July 2025 days before its compliance deadline, but the agency immediately restarted rulemaking and law firms report an active 2026 FTC/state-AG "enforcement wave" continuing under existing statutes (ROSCA, FTC Act Section 5) regardless of the vacated rule's status.

O — Opportunity

Inside that trend, the underserved problem is not "another consent-management widget" — it is that eight-plus states have each independently rewritten auto-renewal law in the last ~14 months with genuinely different mechanics (one-click cancellation links, same-channel-as-signup cancellation, annual reminder mandates, point-of-sale disclosure timing, offline-cancellation alternatives), and small/mid subscription brands have no affordable way to know, state by state, whether their actual live flow is compliant — let alone prove it if a regulator or plaintiffs' firm comes asking.

D — Demand

At least fifteen law firms (Fenwick, Wilson Sonsini, Davis Wright Tremaine, Perkins Coie, Wiley, Kelley Drye, Gouchev Law, Zwillgen, Goodwin, Arnold & Porter, Sidley, Crowell & Moring, Latham & Watkins, WilmerHale, Steptoe, Gunderson Dettmer, Benesch) have published dedicated paid-client alerts on this exact topic within the past 12 months — direct evidence that subscription businesses are already paying legal-market rates to understand this problem. Subscription-commerce platforms (Loop, Recharge-adjacent help centers) publish their own compliance explainers, evidencing inbound customer questions their own support teams cannot fully answer. The FTC's September 2025 settlement is public, widely reported, and specifically framed around the two failure modes CancelClear is built to catch: no express informed consent, and no simple cancellation mechanism.

E — Economic sizing

Total addressable market anchor: $555.9B global subscription economy (2025), growing to $1.51T by 2033 (Grand View Research; Verified). ICP subset: U.S. DTC/membership subscription businesses with $2M–$75M revenue selling into 2+ of the 8 regulated states — a figure not directly published by any single source; Inferred at a low-tens-of-thousands count given that California and New York alone represent a large share of U.S. e-commerce buying power and most national subscription brands sell into both. At a blended $3,500 initial certification package and $700/month Continuity subscription with 25% attach, even a low-hundreds customer base within 18 months supports a multi-million-dollar ARR business; range is wide and should be validated in the pilot cohort rather than assumed.

Rubric scorecard

Six-gate scores: Gate1 Trust 4 · Gate2 Judgment 4 · Gate3 Intelligence 4 · Gate4 Regulation 5 · Gate5 No physical 5 · Gate6 Sam Altman 4. Anti-commoditization: a generic chatbot answer to "is my cancel flow compliant" has no evidentiary weight in a regulator inquiry; a signed, versioned certification binder does.

Target buyer

Economic buyer: Founder/CEO or COO of a subscription-commerce or membership-model business, $2M–$75M annual revenue, selling into two or more of the eight regulated states, with no in-house general counsel.

Champion: Head of Growth/Ecommerce Operations, or whoever owns the checkout/subscription-billing stack (Shopify+Recharge/Skio/Loop, WooCommerce+Bold, or Chargebee) and currently fields the "are we legal?" question with no good answer.

ICP beachhead: DTC subscription box, beauty/supplement, meal-kit, or gym/wellness membership brand, active in California plus at least one of Colorado/New York/Massachusetts/Arkansas/Maine/Maryland/Connecticut, no dedicated privacy/consumer-protection counsel, founder recently saw the Amazon settlement or a competitor's demand letter.

Jobs-to-be-Done

• When I read about the $2.5B FTC settlement, tell me — in plain terms, with proof — whether my own signup and cancel flow would survive the same scrutiny.
• When a new state's auto-renewal law takes effect, update my compliance status without me having to track eight different statutes myself.
• When a state AG letter, FTC civil investigative demand, or plaintiff's demand letter arrives, hand me a ready evidence binder instead of starting from zero.
• When my dev team ships a checkout redesign, tell me before launch whether it broke compliance in any state I sell into.

Painful problem

On September 25, 2025 the FTC secured a $2.5 billion settlement — a $1 billion civil penalty (the largest ever obtained for a rule violation) plus $1.5 billion in consumer restitution — against a major online retailer for enrolling consumers in a subscription without express informed consent and failing to provide a simple cancellation mechanism, violating ROSCA and the FTC Act. In the fourteen months since, at least eight states (California, Arkansas, Colorado, Massachusetts, New York, Maine, Maryland, Connecticut) have enacted or substantially amended their own auto-renewal statutes, each imposing different mechanics: Colorado requires a one-step online cancellation link; New York requires cancellation "by the same medium" as signup; Connecticut requires phone-cancellation voicemails to be processed within one business day and annual reminders regardless of subscription length; Maryland requires an alternative offline cancellation method for consumers who cannot cancel online; Massachusetts and New York impose specific point-of-sale disclosure-timing rules. Two of these deadlines land inside 2026 itself: Maine (January 1, 2026) and Connecticut (July 1, 2026) — three weeks before this run. California's amended Automatic Renewal Law carries private-right-of-action exposure through the state's Unfair Competition Law, meaning plaintiffs' firms — not only regulators — can and do sue. Most subscription brands selling nationally have no realistic way to know, state by state, whether their live flow is compliant today, and no documentary evidence to show if asked.

The outcome we sell

A signed State Compliance Certification Binder for the client's actual live signup, billing, and cancellation flow across every state they specify: a pass/fail scorecard mapped to exact statutory citations, a timestamped evidence pack (screenshots, click-path recordings, disclosure-text extracts), a prioritized plain-language fix list, and — for retained clients — monthly re-certification as the law patchwork changes. Never a dashboard the client has to interpret themselves. Never legal advice. Never hourly.

First one-feature MVP wedge

Evidence summary

• Verified FTC secured a $2.5B settlement (Sep 25, 2025) — $1B civil penalty + $1.5B consumer restitution — against a major online retailer for ROSCA violations (no express informed consent; no simple cancellation mechanism).
• Verified The Eighth Circuit vacated the FTC's "click-to-cancel" Negative Option Rule in July 2025, days before its compliance deadline; the FTC has since restarted negative-option rulemaking, and ROSCA enforcement continues independent of the vacated rule.
• Verified At least eight states (CA, AR, CO, MA, NY, ME, MD, CT) have enacted or substantially amended auto-renewal statutes since mid-2025, with materially different cancellation-mechanism, reminder, and disclosure-timing requirements and staggered effective dates through July 2026.
• Verified Global subscription economy market sized at $555.92B in 2025, projected to reach $1.51T by 2033 at a 13.3% CAGR (Grand View Research).
• Verified At least 15 law firms published dedicated client alerts on state auto-renewal/negative-option compliance within the past 12 months, evidencing existing paid legal-market demand.
• Inferred A large share of small/mid subscription brands selling nationally are currently out of compliance with at least one recently enacted state requirement, given the pace and divergence of the 2025–2026 statutory changes.
• Unverified Exact count of U.S. subscription businesses meeting the $2M–$75M, 2+-state ICP definition — no single published source segments the market this way; treat as a pilot-stage sizing question.

Claim table

Source-claim matrix

Market and demand evidence

Subscription commerce is large and growing ($555.9B in 2025 en route to $1.51T by 2033 per Grand View Research), which by itself would be a weak signal — plenty of large, growing markets are not attractive service opportunities. What makes this market attractive right now is the collision between that growth and a genuinely fresh, hard regulatory shock: a $2.5B federal settlement decided in September 2025, an FTC rulemaking process that was vacated and is now being actively revived, and eight states independently legislating different auto-renewal mechanics within a fourteen-month window, with two of those deadlines (Maine, Maryland) landing inside 2026 and a third (Connecticut) landing three weeks before this run. That is not a static compliance requirement subscription brands have already adapted to — it is a moving target that keeps generating fresh, billable legal work, which is exactly the kind of trend that supports a recurring, defensible service business rather than a one-time audit product.

Active buyer conversations

• Fifteen-plus law firms publishing dedicated, dated client alerts on state auto-renewal compliance in the past 12 months — direct evidence that clients are asking their counsel about this right now.
• Subscription-commerce platform help centers (e.g., Loop Subscriptions) publishing their own auto-renewal law explainers — evidence of inbound merchant questions the platforms themselves cannot fully resolve without giving legal advice.
• Trade coverage of the FTC's $2.5B settlement functioning as a industry-wide wake-up call cited repeatedly across the law-firm alerts reviewed this run.
• Ongoing FTC negative-option rulemaking comment activity and the FTC/state-AG "continued scrutiny" alerts published as recently as February 2026, indicating this is a live, not historical, concern.

Competitive landscape

Competitor and budget validation

Budget already exists as: (1) law-firm hours currently spent on exactly this analysis, evidenced by 15+ firms publishing paid-client alerts; (2) subscriptions to consent/privacy-management SaaS that only partially covers this problem; (3) internal engineering/product time spent reactively patching checkout flows after a scare; (4) E&O and litigation reserves for brands that have already faced a demand letter. CancelClear redirects a slice of (1) and (3) into a cheaper, flat-priced, recurring outcome, and wins against SaaS-only competitors by delivering an actual signed, audit-ready certification rather than a self-configured tool.

Pricing evidence and proposed pricing

• Free Cancellation Flow Risk Score: automated scan of the client's public checkout/cancel flow against the two highest-risk requirements (express consent, simple cancellation) — lead magnet.
• 48-Hour Compliance Scan: $1,500–$3,500 flat, up to 4 states, one-time.
• State Certification Package: $2,500–$6,000 flat per state bundle, full audit + signed attestation binder + prioritized fix list.
• Continuity Monitoring: $400–$1,200/month across all states sold into, covering quarterly re-scan and re-certification whenever a covered state's law changes.
• Rapid Response Defense Package: $5,000–$15,000 flat if a state AG inquiry, FTC civil investigative demand, or plaintiff demand letter arrives — evidence-binder assembly, not legal representation.

Never hourly. Deliberately never contingency/success-fee on "penalties avoided" — unlike claim-recovery businesses elsewhere in this manifest, compliance certification is preventative, so a contingency fee tied to an unrealized, counterfactual penalty has no clean legal basis; flat per-state and subscription pricing keeps the outcome-pricing principle intact without that risk. Pricing framed against $500–$1,500/hr counsel rates and against the $2.5B settlement as the downside anchor.

Regulatory and compliance considerations

Core frameworks: FTC Act Section 5 (unfairness/deception) and ROSCA (federal, statute-based, independent of the vacated Negative Option Rule); California's Automatic Renewal Law (Bus. & Prof. Code §17600 et seq., as amended by AB 2863, eff. Jul 1 2025); and the auto-renewal statutes of Colorado, New York, Massachusetts, Arkansas, Maine, Maryland, and Connecticut, each with its own citation, mechanics, and effective date. The FTC's own rulemaking is in flux — the original rule was vacated in July 2025 and the agency has since restarted the process — so the requirements matrix must be versioned and dated, and marketing must never claim a specific federal rule is in force when its status is contested. Client PII/billing data handled during flow crawling requires encryption, a data-processing agreement, and retention limits.

Licensing boundary

Every deliverable carries a standing disclaimer: the certification reflects operational review against the client-specified flow and the version-dated requirements matrix on the delivery date; it is not legal advice; the client remains responsible for implementation and for engaging counsel on disputed or novel facts. This mirrors the standard operating pattern of the privacy/consent-compliance consulting industry (e.g., how consent-management vendors and compliance consultancies already position themselves), not a new or untested structure.

AI-native advantage

AI changes the economics by automatically crawling and screenshotting the client's live signup and cancellation flow, extracting exact disclosure text, timing, and click-path structure via DOM/LLM analysis, and cross-referencing that extraction against a structured, continuously updated multi-state requirements matrix — a synthesis task that would otherwise consume a paralegal or associate attorney several billable hours per state. As frontier models improve at multi-document legal synthesis and web-flow extraction, the same pipeline gets faster, cheaper, and able to track more states and more legislative activity (bill-tracking, not just enacted-law tracking) without adding headcount — a direct pass of the Sam Altman test.

Internal AI engine architecture

1. Intake: Secure portal upload of signup URL, cancellation-flow URL/recording, sample renewal emails, and the client's state list.
2. Normalization: Canonical "subscription flow schema" capturing every screen, disclosure, timing element, and click path.
3. Retrieval/knowledge: Versioned, dated multi-state requirements matrix (statute text, agency guidance, FTC/ROSCA status, effective dates) maintained by an AI-assisted legislative-tracking pipeline.
4. AI workbench: Automated flow crawler/screenshotter + LLM extraction of disclosure text and timing + gap analysis against the requirements matrix.
5. Deterministic rules: State-by-state rule engine (e.g., "cancellation channel matches signup channel: Y/N," "annual reminder required: Y/N," "one-step cancellation link present: Y/N").
6. Human chokepoint: Compliance analyst reviews and signs every scorecard/certification; escalates novel or ambiguous fact patterns to a partner attorney.
7. QA: Dual review above defined risk thresholds; spot-check sampling; citation-verification pass on every statutory reference before release.
8. Delivery: PDF certification binder + evidence pack (timestamped screenshots/recordings) + prioritized fix list.
9. Learning loop: Any missed requirement, state-law change, or client-reported gap feeds back into the rules engine and SOPs.
10. Model-portability: Requirements matrix and rule schema stored independent of any single model vendor; extraction prompts swappable across providers.

AI-vs-human operations pipeline

Dynasty translation layer

• Buyer: Founder/COO of a subscription brand pays to avoid becoming the next enforcement headline and to have proof in hand if asked.
• Service: Done-for-you Certification Binder + optional Continuity monitoring — customer receives a signed, executable artifact, not a tool.
• Workflow: Intake → crawl → extract → cross-reference → analyst review → deliver → client remediates → re-scan → renew.
• Tooling: Secure portal, headless-browser crawler, LLM extraction, versioned rules database, PDF templates, CRM — no custom engineering platform required before first revenue.
• Sales: "We show you exactly where your signup and cancel flow would fail the same test that just cost a major retailer $2.5 billion — state by state, with a signed report."
• Delivery: First 3 customers fulfilled manually: spreadsheet requirements matrix + Claude/GPT-assisted extraction + attorney-designed checklist + Word/PDF binder.
• Expansion: Multi-state Continuity, agency/multi-brand tier, Rapid Response Defense binders, eventual co-branded partnership with subscription-billing platforms.

Anti-duplication analysis

Checked the restored, healed manifest (777 runs, restored this run from commit 13cbad03 after the known hourly truncation incident — see project documentation) plus the repo's flat filename inventory for "auto-renewal," "negative option," "click-to-cancel," "subscription cancel," and related terms: zero hits on every variant. Nearest neighbors, checked and confirmed distinct:

• Chargeback Representment & Dispute Recovery Engine — post-transaction card-network dispute defense after a chargeback is filed; CancelClear addresses pre-transaction signup consent and cancellation-mechanism compliance, an entirely different trigger, statute set, and buyer motion.
• Medspa Physician Oversight Compliance Engine, Child Care Licensing CACFP Compliance Engine, RehabAuth Clear — all vertical-specific professional/clinical licensing compliance, unrelated subject matter.
• AuthLift — Home Warranty Contractor Payment & Scope Authorization Desk — different market (home-service contractor payment authorization) with no overlap in statute, buyer, or workflow.

Differentiation: no prior manifest entry addresses state auto-renewal/negative-option law, subscription-commerce checkout/cancellation-flow compliance, or the FTC ROSCA enforcement pattern in any form.

Anti-commoditization analysis

If frontier models make a DIY "ask ChatGPT if my cancel flow is compliant" trivial, the service still wins on: (1) the continuously curated, attorney-designed, versioned multi-state requirements matrix, which requires ongoing legal-quality maintenance a generic model call does not provide on its own; (2) the signed certification and evidence binder, which has actual evidentiary weight in a regulator or plaintiff inquiry in a way an unlogged chatbot answer does not; (3) the partner-attorney referral relationship for genuine legal opinions; (4) ongoing Continuity monitoring across an eight-state-and-growing patchwork that keeps changing; (5) the flow-crawling and timestamped evidence-capture infrastructure itself, which is operational infrastructure, not a one-off question-and-answer.

Service delivery workflow

1. Sales qualification + state scope confirmation.
2. Secure intake of signup/cancellation flow URLs or recordings and sample emails.
3. Automated crawl, screenshot, and disclosure/timing extraction.
4. Rules-engine cross-reference against the versioned requirements matrix; flag exceptions.
5. Compliance analyst review and sign-off; citation-verification pass.
6. Deliver Certification Binder + prioritized fix list.
7. Optional: confirm client-side remediation within 30 days.
8. Continuity: quarterly re-scan + re-certification on any covered-state law change.

Operations as product

SOPs per state; required evidence checklist (flow URLs/recordings, renewal-reminder email samples, state list); automated completeness scoring on intake; exception queues (ambiguous UX pattern, missing renewal-reminder sample, novel fact pattern); reviewer assignment by state cluster; confidence scoring on extraction accuracy; full audit logs of every review and citation; gold-standard certification examples; red-team checks on statutory-citation accuracy; root-cause analysis on any missed requirement or client-reported gap, feeding the learning loop.

No-holes quality engine

• Requirements-matrix version pinned and dated on every certification cover page.
• Citation-verification checksum: every statutory citation in a scorecard must resolve to a primary source before release.
• Random 10% dual review; 100% dual review on any Rapid Response Defense binder.
• State coverage must equal 100% of the client-specified state list before delivery — no partial certifications shipped silently.
• Forbidden: releasing a binder with an unresolved "requirements matrix out of date" flag for any covered state.

What the human expert actually does

Minimum viable offer

California + 1 State Compliance Scan — flat $2,000, delivered within 48 hours. Includes the Risk Score, a two-state scorecard with cited violations, a prioritized fix list, and 15-day email support on implementation questions. Upsell path to full multi-state Certification Package and Continuity.

Fulfillment process

First 3 customers: Manual browser walkthrough + screen recording → spreadsheet requirements matrix (CA + 1 other state) → Claude/GPT-assisted extraction and drafting → attorney-reviewed checklist → PDF scorecard. Tools day one: Loom or browser recorder, Google Sheets, an LLM API, Google Docs/PDF export, Stripe invoicing, Notion SOPs. Automate later: headless-browser crawler, structured requirements database, client portal. Do not automate the final sign-off initially.

Tools and systems

Secure client portal; headless-browser crawler/screenshot pipeline; LLM API for extraction and drafting; versioned requirements database; PDF renderer; CRM (HubSpot/Attio); Stripe; email; legislative bill-tracking feed. No custom engineering platform required before the first 10 paid engagements.

Human-in-the-loop quality control

Every certification requires a named compliance analyst's signature. Dual control on any engagement covering 4+ states or any Rapid Response Defense binder. Attorney escalation required for any fact pattern not clearly resolved by the rules engine. Client must acknowledge the non-legal-advice disclaimer before delivery.

Nonlinear scaling and unit economics

COGS stack: model inference for crawl/extraction, secure hosting, analyst minutes, citation-verification QA, support, payment processing, occasional attorney-referral coordination time. CAC payback target <3 months via free Risk Score → paid Scan. Continuity retention target ≥75% annual. Risk Score→Scan conversion 15–30%; Scan→Continuity 35–55% (Inferred — validate in pilot cohort).

Distribution proof table

Sales and outreach plan

Lead with diagnosis, not demo: "Send us your signup and cancel flow — we'll show you exactly where it would fail against the same statute that just cost a major retailer $2.5B." Convert free Risk Score → paid Scan within 7 days via a direct call reviewing the flagged violations. Continuity pitched as ongoing insurance against the next state law change. Rapid Response Defense offered reactively through the attorney-referral network when a client reports an inquiry.

Founder-led content plan

Teach the mechanics buyers don't know they're missing: what "express informed consent" actually requires, why Colorado's one-click link and New York's same-channel rule are not the same requirement, how the FTC's vacated rule differs from the state laws still in force, and how to read a demand letter. Avoid generic "AI compliance" content; every piece cites a specific statute or the FTC settlement.

First 30 days of content

1. 10 posts: the $2.5B settlement explained in plain English; California AB 2863 checklist; Colorado's one-click cancellation rule; New York's same-channel-cancellation rule; Connecticut's phone-voicemail rule; Maryland's June 2026 deadline; "is the FTC's click-to-cancel rule dead or not?"; how to document express consent; renewal-reminder timing by state; a state-by-state comparison table.
2. 3 diagnostic teardowns: anonymized real flow with violations flagged; a "passing" flow annotated to show why; a flow that looks compliant but fails on disclosure timing.
3. 2 lead-magnet angles: free Cancellation Flow Risk Score; "8-State Auto-Renewal Requirements Cheat Sheet" PDF.
4. 1 webinar: "Would Your Subscription Flow Survive an FTC Investigation?"
5. 1 outbound diagnosis template: brand-specific flow screenshot annotated with the two highest-risk gaps and the relevant statute citation.

Lead magnet and waitlist plan

Lead magnet: Free automated Cancellation Flow Risk Score against the two highest-risk requirements (express consent, simple cancellation). Buyer receives a pass/fail snapshot plus a CTA to the full paid Scan. Waitlist captures multi-state brands for Continuity launch. The Risk Score is not product-market fit by itself — paid Scans and retained Continuity are.

Warm GTM plan

Convert Risk Score users; ad-law boutique firm referral partners; subscription-commerce community relationships; personal network contacts at DTC/subscription brands; billing-platform partner introductions.

Targeted outbound plan

List 150 DTC subscription brands ($2M–$75M revenue, California + 1 other regulated state, Shopify/Recharge or WooCommerce/Bold stack) plus 100 membership/wellness businesses with recurring billing. Personalized notes referencing the specific state deadline most relevant to their footprint. Offer the free Risk Score with 48-hour turnaround. No generic "AI compliance" pitches.

Answer-engine/search visibility plan

Publish citation-backed, dated pages: "2026 state auto-renewal law compliance checklist," "Is the FTC click-to-cancel rule in effect in 2026?," "Connecticut auto-renewal law requirements (effective July 2026)," "How to document express informed consent for subscriptions." Structure FAQs with primary-source citations and Risk Score CTAs so AI answer engines can surface and attribute them accurately.

Pilot design and early-demand-trap mitigation

Pilot cap: 10 subscription brands, California + 1 other state only. Incentive: 40% off the first Certification Package for completing a post-delivery feedback survey and allowing an anonymized case study. Weekly feedback review; one-off custom legal memo requests are out of scope and referred to the partner attorney network. Do not expand the pilot cohort by adding analysts to paper over SOP gaps — harden the rules engine and checklist first.

Early-access feedback flywheel

Every missed requirement, extraction error, or client-reported gap becomes a rules-engine or SOP update. Product feedback = crawler misreads a UX pattern, requirements matrix is stale for a given state, fix-list wording is unclear. Custom work = client wants a bespoke legal opinion — refer to the partner attorney. Corrections feed the gold-standard certification examples used to train new analysts.

Build-before-scale checkpoints

• After 5 pilots: harden the intake checklist, the CA + 1-state requirements database, and the scorecard/fix-list templates.
• After 10 pilots: harden the exception queue, reviewer checklist, and delivery templates; measure COGS and rework rate.
• After 20 pilots: pause new logo acquisition until cycle time, rework rate, escalation rate, and Continuity retention are all measured and within target.

7-day / 30-day / 90-day launch plans

7 days: CA + 1-state requirements database v1; scorecard/fix-list templates; 30 outbound contacts; Risk Score landing page live; first 3 Risk Score deliveries.

30 days: 10 Risk Scores delivered; 4 paid Scans closed; 1 ad-law firm referral conversation started; SOP v1 documented; first webinar scheduled.

90 days: 15 paid Scans/Certifications; 6 Continuity subscribers; Rapid Response Defense binder v1 drafted; New York + Colorado added to the requirements database; COGS dashboard live; decide whether to expand states or harden further.

Metrics and KPIs

• Risk Score → Scan conversion; Scan → Continuity conversion; cycle time; rework rate; exception rate; client remediation completion rate within 30 days; analyst minutes per engagement; gross margin; CAC payback; zero-incident rate among certified clients over 12 months.

Risks and mitigations

State laws keep changing faster than the rules engine can be updated → dedicated legislative-tracking pipeline with quarterly attorney review. Client misreads the certification as a legal guarantee → explicit disclaimers on every deliverable and at point of sale. Crawler blocked by client-side bot detection → fallback to client-submitted screen recordings. Unauthorized-practice-of-law accusations → strict scope limits, attorney-designed rubric, referral network, marketing review of every claim.

Exhaustive risk register

What could kill this

A single federal standard emerges (a finalized, upheld FTC rule with clear preemption) that is simple enough for any brand to self-certify against for free, eliminating the multi-state complexity that is the core moat; or subscription-billing platforms build comprehensive, jurisdiction-aware compliant-by-default flows that the large majority of merchants adopt by default; or a high-profile certification error leads to an E&O claim that destroys trust before the operational track record is established.

Go/no-go reasoning

GO. Clears the evidence threshold: clearly identified buyer, painful and specific problem with a hard-dollar anchor ($2.5B settlement), active and still-unfolding multi-state regulatory demand with 2026 deadlines, existing proven legal-market budget (15+ firms billing for this exact analysis today), a narrow and fast MVP wedge, a done-for-you certified outcome rather than a customer-operated tool, a credible 50%+ gross-margin path, a manageable licensing boundary with an established referral pattern, and — critically — zero overlap with any of the 777 prior manifest entries on every variant of the core concept tested.

Final recommendation

Launch CancelClear with the California + 1 State Compliance Scan as the flagship offer, the free Cancellation Flow Risk Score as the lead magnet, and a 10-brand pilot cohort capped to California-plus-one-state engagements. Expand the requirements matrix to New York and Colorado next, then the remaining five states. Do not position as a law firm or offer legal opinions directly — route those through the partner-attorney referral relationship. Measure Risk Score→Scan conversion and 30-day remediation completion before scaling outbound volume.

Source list

1. Hudson Cook — FTC $2.5 Billion Settlement Enforcement Alert
2. Sidley Austin — U.S. FTC Click-to-Cancel Rule Struck Down
3. Latham & Watkins — Eighth Circuit Vacates FTC Click-to-Cancel Rule
4. Crowell & Moring — Eighth Circuit Cancels Click-to-Cancel
5. Gibson Dunn — FTC Restarts Negative Option Rulemaking
6. Goodwin — FTC's Click-to-Cancel Rule Gets New Life
7. Arnold & Porter — FTC and State AGs Continue to Scrutinize Subscription Practices
8. Fenwick — California Tightens Requirements for Auto-Renewing Subscriptions
9. California Legislature — AB 2863 Bill Text
10. Wilson Sonsini — California Amends Automatic Renewal Law (Again)
11. Gouchev Law — California's Automatic Renewal Law for Subscription Businesses
12. Davis Wright Tremaine — AB 2863 Updates California Automatic Renewal Law
13. Ardina Law — CA Automatic Subscription Renewals Law: AB 2863
14. Zwillgen — Automatic Renewal Mid-Year Update
15. Perkins Coie — New York and Colorado Update Auto-Renewing Subscription Requirements
16. KO Law — Patchwork of State Automatic Renewal Requirements Expands
17. Kelley Drye — Auto-Renewal Laws: 2025 Round Up
18. Wiley Law — Automatic Renewals and Risks: State Negative Option Legislation Trending
19. Grand View Research — Subscription Economy Market Size Report
20. Loop Subscriptions Help Center — United States Automatic Renewal Laws