Coverage
Exactly what we cover for physical commodity compliance.
Every number on this page is queried live from the OilFlow data infrastructure. We split first-party verified from aggregated public sources from roadmap. No vanity stats.
Generated 2026-11-02 08:40:46 UTC.
Sanctions lists
First-party verified8 live, each from its publisher
8 sanctions lists, each built from its publisher's own file (OFAC SDN, OFAC Consolidated, UN, EU, UK, Canadian SEMA, Australian DFAT, Swiss SECO) and served from OilFlow's own index. Rebuilt daily at 02:00 UTC; a list that shrinks past its floor is refused, never served.
Regulatory matrix jurisdictions
First-party verified79 verified · 156 skeleton · 235 total covered
79 jurisdictions with first-party reviewed product-tradability rules across crude, refined, LPG, LNG, and bitumen. 156 additional jurisdictions ship skeleton coverage (marked draft / community-verifiable). Target of 200+ UN members.
Corporate registries
Aggregated from public140+ jurisdictions via OpenCorporates
OpenCorporates aggregates 140+ jurisdictional corporate registries into a single lookup interface. Used at KYC Step 2 (company registration check) for any counterparty registered in a covered jurisdiction.
Adverse media
RoadmapUnmeasured
No adverse-media source has returned a finding yet: the findings corpus has held zero rows for its whole lifetime. The monitoring list and the webhook wiring exist and accept registrations. A pre-deal check reports adverse media as unmeasured, never as clear.
HS commodity codes
First-party verified3 chapters in depth · 99 chapters total roadmap
HS chapters 27, 28, 29 (mineral fuels, inorganic chemistry, organic chemistry) are first-party rule-covered today. Risk-band classification for all 99 chapters ships in the universal-coverage expansion.
Verified fraud clusters
First-party verified0 live in blocklist · 0 confirmed
Confirmed: 0. Likely: 0. Suspected: 0. Continuously expanded via OilFlow first-party investigation + contributor channel (banks, insurers, inspectors, Big 4).
Methodology, per dimension
Where the data comes from, how we verify it
For each coverage dimension, the data source and verification process. Written so a compliance officer can satisfy their own vendor-risk questionnaire on OilFlow's data lineage in one read.
sanctionsSanctions listsFirst-party verified›
Source
The eight publishers' own files (OFAC, UN, EU, UK FCDO, Global Affairs Canada, DFAT, SECO), converted and indexed by OilFlow since 2026-09-05. No PEP dataset is indexed; PEP screening is not offered.
Verification process
Daily delta ingestion at 02:00 UTC, weekly full refresh. Every screen is written to the compliance_checks audit log with the lists consulted and the screen outcome. Continuous re-screen runs on every list-delta event via the verification agent.
jurisdictionsRegulatory matrix jurisdictionsFirst-party verified›
Source
shared/regulatory.py: the Python source-of-truth that gates KYC step 3 (regulatory licence check). Mirrored in platform/src/lib/regulatory.ts for API-layer pre-check.
Verification process
Verified jurisdictions are authored by reading the source regulator's public-domain rule set (OGRA, EPRA, EWURA, BPH Migas, etc.) and cross-checking against three independent published commodity-trade case histories. Skeleton coverage carries explicit 'draft / community-verifiable' confidence band until first-party reviewed.
registriesCorporate registriesAggregated from public›
Source
OpenCorporates (https://opencorporates.com): public-data aggregator across UK Companies House, US Secretary of State filings, SECP Pakistan, DED UAE, and 136+ others.
Verification process
On every KYC screen, OpenCorporates' lookup is called with the counterparty's stated registered name + country. Results are stored in kyc_async_jobs.results with data_source='live_api' and the OpenCorporates company ID for re-verification.
adverse_mediaAdverse mediaRoadmap›
Source
adverse_media_findings, which has held zero rows for its whole lifetime, plus the /api/v1/adverse-media monitoring-list and webhook routes. No news or watchlist source has returned a finding, so there is nothing indexed to serve.
Verification process
The daemon schedules a daily sweep (adverse_media_monitor, 06:00 UTC) and it has never persisted a finding: zero rows for its whole lifetime. An entity can be registered on the monitoring list and paused again, and a webhook subscription for adverse-media events can be created. Nothing is classified today because no source has returned a finding. platform/src/lib/adverse_media_status.ts makes a check over an empty corpus report unmeasured rather than clear.
hs_codesHS commodity codesFirst-party verified›
Source
shared/regulatory.py PRODUCT_RULES: sectioned by HS chapter with per-country rule overlay.
Verification process
Each HS chapter is mapped to a commodity category (crude, refined, LPG, LNG, bitumen, petrochemicals). The /api/v1/regulatory/check endpoint accepts HS code OR category and returns rule + risk band per jurisdiction.
clustersVerified fraud clustersFirst-party verified›
Source
broker_scam_blocklist table (migration 117 seeded the Simar Chahal cluster). Surfaced at /api/v1/clusters + /clusters public view (7-day delay).
Verification process
Every cluster reaches 'confirmed' severity only after three independent evidence vectors: traceable false-identity claim, payment-instruction or mandate-chain artifact in our possession, and cross-reference to a public or first-party prior pattern. 'Likely' and 'suspected' ship with documented evidence gaps. Full methodology lives at /intelligence.
Coverage roadmap
Where we are honest about the gap
What we are building toward, with target dates. We will update this page when each lands, and remove the item when shipped.
More publisher lists
Q4 2026Additional national lists added one publisher at a time, each with its own converter, shrink floor and recall probes before it is served.
UN-member jurisdiction expansion
Q3 2026Skeleton coverage for all 193 UN member states, marked 'draft' until first-party reviewed.
Adverse-media source, then languages
Q4 2026No adverse-media source has returned a row yet and no language baseline exists. Once a source returns rows, extend to CJK (Mandarin, Japanese, Korean), RTL (Hebrew, Farsi), Romance, Germanic, Hindi, Bengali, Turkish, Vietnamese, Thai, Indonesian.
All HS chapters
Q3 2026Risk-band classification for all 99 HS chapters with first-party reviewed petroleum + chemical depth retained.
Vessel + cargo intelligence
Q4 2026MarineTraffic / Equasis IMO lookup + dark-fleet detection patterns.
GLEIF LEI lookup + reverse lookup
Q3 2026Any LEI → issuer + legal entity; reverse lookup of company name → LEI candidates.
Expand coverage
Invite: regulators, standards bodies, sector contributors.
Regulators with cleared-for-public typology material, standards bodies (GAFTA, FOSFA, FIATA, BIMCO) authoring physical commodity compliance standards, and sector contributors (insurers, inspectors, Big 4 forensics) can extend OilFlow coverage faster than we can build it alone. The contributor channel is at /intelligence, and we publish every contributor cluster with attribution control.