And why it isn’t regulated — yet.