AI Immigration Form Assistants 2026: The Notario Statutes Were Written For You

Two Regimes, Stacked

The federal layer answers who may represent someone before the immigration agencies and the immigration courts. The permitted set is small and named: attorneys in good standing, and representatives accredited through organisations recognised for that purpose, with a partial tier for law students, reputable individuals in limited circumstances and accredited officials of a foreign government. Nothing in the list is a company, a website or a model. Recognition and accreditation attach to an organisation and a person respectively, and neither status can be purchased, licensed or resold.

The state layer answers a different question: who may take money from an immigrant for help with a filing. These statutes travel under different names — immigration assistance services acts, immigration consultant acts, notario-fraud provisions — and they share a core. Charge a fee, do more than clerical work, and you must contract in writing in the client's language, display a notice that you are not an attorney, avoid any title implying legal authority, and in several states register or bond. Violations tend to be styled as unfair or deceptive practices, which is how they acquire statutory damages, fee-shifting and an attorney-general enforcement route that does not require a bar association to act.

A product can satisfy one regime and fail the other. An accredited representative using internal tooling is fine federally and irrelevant to a consumer statute. A consumer product that scrupulously posts its not-an-attorney notice still fails the federal analysis the moment it advises. Compliance work that treats these as one question produces a plan that covers half the exposure.

Seven Product Surfaces, Graded

The unit of analysis is the individual output, not the product. Most immigration AI tools contain several surfaces at different risk levels, and the dangerous ones are usually the features that make the product feel valuable.

Publishing procedural facts and form instructions

Outside the line

Explaining what a form is for, what a published filing fee is, or where an office is located is publishing. It is available to everyone, personalised to no one, and has never required a licence.

Typing the applicant's own answers into the right boxes

Preparation, with duties attached

The narrow non-lawyer activity the rules contemplate. It stays narrow only if the product does not improve, reframe or complete the answers, and it triggers preparer identification on the form.

Recommending which benefit or category to apply for

Advice

Selecting the path is the core professional judgement in immigration work. It is where the value is, which is why every product drifts toward it, and it is restricted to attorneys and accredited representatives.

Assessing whether the user qualifies

Advice, and the highest-harm surface

Eligibility turns on facts the user often reports imprecisely — dates of entry, status gaps, prior filings, arrests. A confident wrong answer here does not produce a bad form; it produces a bar.

Drafting narrative content — hardship letters, personal statements

Advice in substance

The value of a narrative is which facts are emphasised and which legal standard they are shaped toward. Generating it is legal work, and a generated statement that overstates facts becomes a misrepresentation problem.

Deadline and receipt tracking

Defensible, with a duty of accuracy

Calendaring is clerical. The exposure is reliance: a tool that tells someone a date and gets it wrong causes the loss directly, so the fallback should be to show the source document rather than a computed date.

Translation of the user's own statements

Depends on what is translated

Translating a document is a service; translating the product's own legal explanations spreads the advice into another language and often into a notario statute's contract-in-the-client's-language requirement.

The Signature Block Is the Test No One Runs

Immigration forms ask who prepared them. A preparer signs, gives an address, and certifies that the answers came from the applicant. Attorneys and accredited representatives instead file a notice of appearance — a different form for each status — which puts them on the record as responsible for the case.

Run your own product against that block. If the model selected the form, produced several of the answers and drafted the personal statement, who signs? Leaving it blank asserts that the applicant did all of it unaided, which is not what happened. Naming a company employee who never read the file makes a certification that person cannot support. Naming a supervising attorney puts a real lawyer on the record for every filing, at volume, which is the honest version and also the one that caps how fast the product can grow. There is no fourth answer, and a product that has not chosen one has chosen the first by default.

Where the Model Fails Specifically

Generic model limitations matter less here than three category-specific ones.

It does not know what the user left out. Immigration eligibility turns on the disqualifying fact the applicant did not mention — a dismissed charge, a prior visa refusal, a period of work without authorisation, an entry they believe does not count. A human practitioner interrogates for these because experience taught them which omissions are common. A model answers the question it was asked.
Confidence is inversely correlated with the value of the answer. The genuinely hard questions in this field are hard because the law is unsettled, discretionary or officer-dependent. Those are exactly the prompts where a model produces its cleanest, most authoritative-sounding paragraph.
Procedural facts rot fast and silently. Fee amounts, filing addresses, edition dates, bulletin movement and processing categories change on a schedule that no training cut-off tracks. A wrong filing address or a superseded form edition gets a package rejected, and the rejection consumes the deadline that mattered.

A Defensible Configuration

None of this makes the category unbuildable. It makes the boundary a product decision rather than a legal footnote.

Pick a lane and enforce it in the system prompt and the UI. Either the product is document assembly of the user's own answers with a named human preparer, or it operates behind a real attorney or accredited representative. Products that stay ambiguous drift toward advice under user pressure, because users ask directly.
Refuse eligibility questions explicitly rather than hedging them. A hedged eligibility answer is still an eligibility answer. The behaviour that holds up in a transcript is a refusal plus a route to a licensed person.
Post the notario notice, contract in the user's language, and check whether registration or bonding applies where your users are. These are mechanical requirements with mechanical fixes, and they are the ones an attorney general checks first because they are visible from outside.
Never imply legal authority in naming or copy. Titles, badges and phrases suggesting official status are separately actionable under most of these statutes, independent of what the product actually does.
Sample transcripts weekly. The advice is generated at runtime in response to a frightened user asking a direct question. It does not appear in the specification, the marketing site or the demo. Sampling is the only place it surfaces.
Decide deliberately what leaves your infrastructure. Case narratives contain status histories, arrests and family details. If the product operates behind a lawyer or accredited organisation, confidentiality obligations attach to that data and the vendor contract has to match what the client was told.

Frequently Asked Questions

Is helping someone fill out an immigration form the practice of law?

Federal immigration regulation draws a line that most product teams have never read. Practice before the agencies — representing someone, appearing on their behalf, advising them on their case — is restricted to attorneys and to representatives accredited through a recognised organisation. Separately, preparation of a document is treated as a narrower activity: a non-lawyer may prepare a form at the applicant's request, but only if the preparation is limited to the applicant's own answers and does not extend to advice about which benefit to seek, whether the applicant qualifies, or how to characterise facts. The distinction is not about who types. It is about whether judgement is being supplied. A product that selects the form, evaluates eligibility, or tells the user what an answer should say has crossed from preparation into practice regardless of how it is marketed.

Do notario-fraud statutes reach software?

They were written for storefronts, and they are drafted broadly enough that a software product providing the same function is a plausible target. The typical statute prohibits a non-attorney from offering immigration assistance services for compensation beyond clerical acts, requires written contracts in the client's language, mandates a conspicuous notice that the provider is not an attorney and cannot give legal advice, forbids the use of titles that imply legal authority, and often requires bonding or registration. Several statutes also make a violation an unfair or deceptive act, which imports statutory damages and attorney-fee shifting. Nothing in that structure has an exemption for a website. A product that takes a fee, is available to residents of a state with such a statute, and answers substantive questions is squarely inside the conduct the statute describes.

Does having a licensed attorney review the output fix it?

It fixes the practice question only if the attorney relationship is real, and that is a higher bar than a review queue. A genuine engagement means an identified lawyer, admitted somewhere and not disbarred, who has a client relationship with this person, who takes responsibility for the advice, who is conflicted-checked, and who is reachable when the case moves. If the reviewer is a contractor glancing at a screen for eleven seconds with no engagement letter and no ability to be contacted, the practice is happening in the software and the attorney is decoration. The reviewed model also imports duties that most software companies have not designed for: confidentiality, fee-sharing restrictions between lawyers and non-lawyers, and the requirement that the lawyer, not the platform, exercises independent professional judgement about the case.

What has to be disclosed on the form itself?

Immigration forms carry a preparer certification block, and it is not decorative. Someone who prepares an application at the applicant's request signs it, identifies themselves, and certifies that the answers are based on information the applicant provided. Attorneys and accredited representatives file a separate notice of appearance instead, with a distinct form for accredited representatives. This creates an immediate design problem for an AI product: the certification contemplates a person. Leaving it blank when the product materially prepared the filing misstates the provenance of the document, and misstatements on immigration filings carry consequences for the applicant that are far worse than a fine for the vendor. The honest resolutions are to have a named human preparer sign, or to constrain the product to a level of assistance that is genuinely not preparation.

What is the worst realistic outcome for a user?

A misfiled immigration application is not a refundable error. Consequences that recur include a missed deadline that terminates eligibility, an accrual of unlawful presence during a gap the user did not know existed, an application for a benefit the person never qualified for that surfaces facts they were not obliged to volunteer, and — the severe end — a filing that is treated as containing a wilful misrepresentation, which can carry a permanent bar. A model that answers a question about a prior arrest, a prior removal or a period of unauthorised work with confident generic guidance is generating one of these outcomes rather than a customer-service problem. This is why the category deserves harder product limits than a general legal-help tool: the downside is borne entirely by the least-resourced party and is frequently irreversible.

Can the product just say it is not legal advice?

A notice is required by many notario statutes, so it should be there — but requiring it and being satisfied by it are different things. The disclaimer is evidence about what the provider claimed, not about what the provider did. When a state attorney general reads a transcript in which the product recommended a visa category, characterised a marriage as bona fide, or advised on how to describe a gap in status, a footer saying no legal advice is provided contradicts the record rather than explaining it. Disclaimers also fail on the consumer side: an applicant who paid for a product that produced a filing reasonably believes the filing was checked. The defensible posture is to make the disclaimer true — restrict the output to the applicant's own words and to publicly-stated procedural facts — rather than to rely on the disclaimer to excuse output that goes further.

Is a non-profit accredited-representative organisation a safe harbour for AI tooling?

It is the most defensible home for this technology, and it is the one most often overlooked because it does not scale like a consumer product. Recognised organisations with accredited representatives can lawfully represent people, and internal tooling that helps an accredited representative work faster is analogous to any other professional productivity tool: the accountable human is in place, the file is theirs, and the tool assists rather than replaces judgement. Two constraints matter. Accreditation is granted to a person at a recognised organisation and does not travel to a vendor, so the tool cannot itself hold the status or hold out its own capability. And confidentiality obligations attach to the file, which makes routine transmission of case narratives to third-party model providers a decision to be made deliberately, with contract terms and data-retention settings that match what the organisation has told its clients.

The Signature Test

Take fifty completed filings your product helped produce. For each one, write down the name of the human being who would sign the preparer certification, and the state they are admitted or accredited in.

If you cannot fill in fifty names, the product is not assisting with preparation — it is doing the preparation, unsigned. That gap is the whole exposure, and it does not close by adding a disclaimer to the footer.

Every State Already Wrote a Statute About Your Immigration Product