locations · cheyenne

The capitol, a crypto-bank regulator and an NSF-sponsored supercomputer share one small city.

Close to three in ten Cheyenne jobs are government jobs, and the agency that supervises Wyoming's digital-asset banks has its offices on Capitol Avenue. Add an atmospheric research supercomputer run by NSF NCAR, and the questions get unusual: who may approve a custody key, a payroll change or a research allocation?

in short·20-second read

In Cheyenne the work tends to fall into three groups.

State agencies need workforce identity, privileged access and audit trails that hold up to legislative and federal review. Special purpose depository institutions and fintechs need key-custody controls and access governance their examiners can test. Data-center and research computing operators need tight machine and operator access. We serve Cheyenne remotely from Frisco, Texas and travel in for workshops and launches.

There is no Cohash office in Wyoming. We work with Cheyenne organizations from our Frisco, Texas base, remotely day to day, and come up for discovery, design workshops, legislative-session cutovers and go-live.

Ask an engineer facts checked 2026-10-21 · 6 sources
rules
Wyoming breach notification, Wyo. Stat. §40-12-502Wyoming SPDI Act, Wyo. Stat. §13-12-101 et seq.
who and what

Who we work with in Cheyenne, and the rules they work under

industries
  1. State agencies and the capitol complex

    Agencies in Cheyenne often share a central IT provider while keeping their own line-of-business apps and local admin accounts. Seasonal staff, legislative session hires and contractors come and go on fixed calendars. We tie account creation and removal to those calendars, put admin rights behind just-in-time elevation, and keep access logs in one place for auditors.

  2. Digital-asset banks and fintech

    An SPDI holds customer assets that move by private key, so the critical identity is often a signing key or an approval quorum instead of a person's password. We design who can propose, approve and execute a transfer, store keys in HSM or MPC custody, separate duties across teams, and produce the evidence an examiner needs to replay any approval.

  3. Research computing and data centers

    Large compute sites mix facility staff, vendor engineers and remote scientists who never set foot on site. Each group needs different reach into building systems, cluster management and storage. We separate those planes, move scheduler and storage service accounts to short-lived credentials, and record every privileged session on management networks.

regulations
  1. Wyoming breach notification, Wyo. Stat. §40-12-502 ↗

    After a prompt good-faith investigation finds misuse has occurred or is reasonably likely, businesses must notify affected Wyoming residents in the most expedient time possible and without unreasonable delay. The notice must include a toll-free number, the types of data involved, a description of the incident and its approximate date.

  2. Wyoming SPDI Act, Wyo. Stat. §13-12-101 et seq. ↗

    Created by House Bill 74 in 2019 and amended in 2020, with Division of Banking regulations in effect from 2020. Wyoming's digital asset custody law, Wyo. Stat. §34-29-101 et seq., and the custody regulations sit alongside it and were amended in 2021.

01Does Wyoming have a consumer privacy law like Colorado's?

Not a comprehensive one. Wyoming relies on its breach statute in Title 40 and sector rules, so a business in Cheyenne that also serves Coloradans may still owe Colorado Privacy Act duties for those customers. Map where your customers live before deciding which rules apply.

02What has to go in a Wyoming breach notice?

Section 40-12-502(e) lists a minimum. That includes a toll-free contact number, the kinds of data involved, a general description of the incident, the approximate date, what you did to protect the system and whether law enforcement delayed the notice. We keep a pre-approved template so legal is editing facts, not drafting from scratch.

03We are applying for an SPDI charter. What identity work should be done before the exam?

Have the custody approval model written and working. Examiners will want to see who can initiate, approve and broadcast a transaction, how keys are generated and backed up, and how access is removed when someone leaves. We also set up logging so every approval can be traced to a named person and device.

04Can state agency contractors use their own company logins?

Often yes, through federation, as long as the agency still controls authorization and can cut access on its own. We set guest or B2B access with expiry dates tied to the contract, plus MFA rules the agency enforces instead of trusting the contractor's settings.

sources 6 sources linked last checked 2026-10-21 content fingerprint 7ff1f490
  1. 01BLS, Cheyenne economy at a glancebls.gov ↗
  2. 02Wyoming Division of Bankingwyomingbankingdivision.wyo.gov ↗
  3. 03Wyoming Division of Banking, Special Purpose Depository Institutionswyomingbankingdivision.wyo.gov ↗
  4. 04NCAR CISL, NCAR-Wyoming Supercomputing Centercisl.ucar.edu ↗
  5. 05Cheyenne LEADScheyenneleads.org ↗
  6. 06Wyoming Statutes Title 40 (Wyoming Legislature)wyoleg.gov ↗
Reviewed by the Cohash team Product names are trademarks of their owners. how we handle facts and data →
next step

Tell us what you're running. We'll tell you what we'd do first.

A 30-minute working session with a senior engineer. No slides.

useful to bring
  • The platform and the version you're on
  • Where you need to get to, and by when
  • What's custom: rules, plugins, integrations
  • Any audit finding or deadline driving it