MAIA supports 14 industry profiles, each with its own dedicated compliance rule set. When a rehearsal begins, MAIA auto-detects the industry from the Navigator's decision description and loads the corresponding rules. The Navigator never selects an industry manually.
What Each Industry Gets
Every industry profile includes:
- DIAA detection patterns — industry-specific data patterns that trigger input flags
- LAA prohibited language rules — phrases and their compliant rewrites
- Scope boundaries — what MAIA is authorized to analyze in that industry
- Governing bodies — the regulatory entities relevant to that industry
- ZDR requirements — whether Zero Data Retention is mandatory (6 industries require it)
The 14 Governed Industries
- Financial Services — SEC, FINRA, OCC · 5 DIAA patterns
- Healthcare Delivery — HIPAA, HITECH, CMS · 4 DIAA patterns
- Life Sciences & Pharma — FDA, EMA, ICH · 4 DIAA patterns
- Energy & Utilities — FERC, NERC, NRC · 3 DIAA patterns
- Manufacturing — OSHA, EPA, ISO · 3 DIAA patterns
- Supply Chain & Logistics — CBP, BIS, IATA · 3 DIAA patterns
- Enterprise SaaS / Cloud — SOC 2, GDPR, FedRAMP · 3 DIAA patterns
- Telecommunications — FCC, CPNI, CALEA · 3 DIAA patterns
- Media & Information — FTC, COPPA, Section 230 · 2 DIAA patterns
- Retail & Consumer — PCI DSS, CCPA, FTC · 3 DIAA patterns
- Public Sector / Government — FAR, OMB, FISMA · 4 DIAA patterns
- Defense & Aerospace — ITAR, EAR, DFARS · 5 DIAA patterns
- Transportation & Mobility — DOT, FAA, FMCSA · 3 DIAA patterns
- Education & Research — FERPA, NSF, IRB · 3 DIAA patterns
- Nonprofit / NGO — IRS, state AG, GAAP · 2 DIAA patterns
- Generic / Cross-Industry — Universal rules only, maximum-caution mode
ZDR-Required Industries
Six industries require mandatory Zero Data Retention due to the sensitivity of data typically involved in their decisions:
- Financial Services
- Healthcare Delivery
- Life Sciences & Pharma
- Energy & Utilities
- Manufacturing
- Defense & Aerospace
For these industries, all session data — including uploaded documents, connected source data, and rehearsal artifacts — is processed in memory only and purged on session close, with a 24-hour hard TTL cap.
Generic / Cross-Industry Fallback
When MAIA cannot confirm a specific industry from the session context, it activates the Generic profile — maximum-caution mode with all universal detection patterns active. The Navigator is notified that industry-specific rules could not be confirmed and universal data protection rules apply.