How the checks are checked
Each number below was measured on September 23, 2026, on that day’s copy of the official lists, and carries that date. Where something has not been measured, the page says so.
Results come from fixed rules, not from AI
- Every verdict is computed by ordinary code from what the list searches returned. The same supplier and the same lists give the same answer every time.
- AI writes one thing: the plain-language paragraph explaining a finding. The code that sets a verdict takes only the check results as its input, so nothing the AI writes can move a verdict.
- On a customs notice, AI only reads the words on the page. The hold type and the response deadline are then worked out by code, from the fields read.
- Every finding cites its source and names the lists searched, so it can be checked by hand.
Where the data comes from, and how fresh it is
Each check matches against a local copy of the official list, refreshed daily from the government source (the UFLPA Entity List via OpenSanctions’ structured copy of the DHS publication). Every result records which copy it used. If a copy grows older than its cutoff, the check stops and says so, rather than answering from stale data. The dates below are read live:
How the name matching is measured
Matching a typed name to a listed company is the step most likely to go wrong in either direction: flagging a clean company, or missing a listed one under a slightly different spelling. Both are measured together, because a matcher can look perfect on one by giving up the other.
Forced-labor lists (the UFLPA Entity List and CBP Withhold Release Orders), measured September 23, 2026:
- 0 of 900 invented company names, clean by construction and spread across 64 legal forms from around the world, were wrongly flagged.
- 62 of 62 listed companies were caught when their exact listed name was typed.
- Listed companies typed in a changed form were still caught:
| How the name was changed | Caught | Rate |
|---|---|---|
| Letters swapped (a typo) | 59 of 60 | 98% |
| Legal form written differently | 59 of 59 | 100% |
| Legal form left off | 58 of 58 | 100% |
| Punctuation removed | 60 of 60 | 100% |
| Chinese place name split (Ningbo → Ning bo) | 19 of 20 | 95% |
Sanctions lists (OFAC and the U.S. Consolidated Screening List) are being re-measured on a larger sample of listed names, and the figures will be posted here once that review is complete. Every sanctions result names each list it searched.
A name resemblance is never presented as proof. The government lists publish a name, aliases and a country, so the report says how close the match is and what it would take to confirm it.
How the CPSC certificate mapping is audited
The certificate check turns an HS code into the safety rules that may apply and the citation codes CPSC accepts. That chain was walked end to end on September 23, 2026, for every code on CPSC’s current flagged list, not a sample:
- All 589 flagged HS codes, across 23 product categories, map to a category and a suggested safety rule, except 11 imitation-jewelry codes, which are left without a suggestion on purpose (overlapping lead-content rules with no single clean citation) and are shown that way.
- 0 citation codes that CPSC does not publish can be produced.
- All 39 safety rules offered had their scope read in the regulation itself (the Code of Federal Regulations), not only in CPSC’s summaries.
CPSC states its flagged list is neither exhaustive nor definitive. A product can need a certificate without a flagged code, and a flagged code does not guarantee a product is regulated. The results say so.
What is tested on every change
- More than 2,000 automated tests run on every proposed change, including the verdict logic, the certificate questionnaire walked from an empty form, and the customs-notice routing.
- The CPSC Registry file is checked against CPSC’s published column schema, and that check is itself tested by planting known errors and confirming each one is caught.
What the checks cannot do
- They search the official lists named on each result, not every list in the world.
- They cannot confirm a company’s identity beyond public registries. A company that cannot be corroborated is reported as “could not corroborate”, never as fake.
- They are research and screening tools, not legal or customs advice, and not a licensed customs broker. A broker or a customs attorney makes the filing and the final call.
Checking a report is genuine
Anyone who receives a report can confirm it was issued by this service, and see its date and outcome line, at /verify, using the reference ID and the six-character code printed on it (reports issued since September 21, 2026). How information is handled in each tool is set out on How client data is handled.