OFAC · UN · EU · UK sanctions screenedZero-retention AIGDPR · CCPA program

World-standard coverage for physical commodity compliance.

Every number on this page is queried live from the OilFlow data infrastructure. We split first-party verified from aggregated public sources from roadmap. No vanity stats.

Generated 2026-06-04 04:00:07 UTC.

First-party verified

7 lists live (legacy direct integrations) · universal sync in initial build

7 sanctions sources via direct legacy integrations (OFAC SDN, OFAC Consolidated, UN, EU, UK HMT, Canadian SEMA, Australian DFAT, Swiss SECO + PEP via OpenSanctions). Universal sync to 250+ lists schedules at 02:00 UTC daily — first full run pending in the universal-coverage build-out.

First-party verified

79 verified · 156 skeleton · 235 total covered

79 jurisdictions with first-party reviewed product-tradability rules across crude, refined, LPG, LNG, and bitumen. 156 additional jurisdictions ship skeleton coverage (marked draft / community-verifiable). Target of 200+ UN members.

Aggregated from public

140+ jurisdictions via OpenCorporates

OpenCorporates aggregates 140+ jurisdictional corporate registries into a single lookup interface. Used at KYC Step 2 (company registration check) for any counterparty registered in a covered jurisdiction.

First-party verified

5 live · 20+ target Q3 2026

Multilingual adverse media monitor sweeps news and watchlist sources in 5 languages today: English, Arabic, Urdu, Mandarin, Russian. Roadmap expands to CJK, RTL, Cyrillic, Romance, Germanic, and South + South-East Asian languages.

First-party verified

3 chapters in depth · 99 chapters total roadmap

HS chapters 27, 28, 29 (mineral fuels, inorganic chemistry, organic chemistry) are first-party rule-covered today. Risk-band classification for all 99 chapters ships in the universal-coverage expansion.

First-party verified

213 live in blocklist · 2 confirmed

Confirmed: 2. Likely: 7. Suspected: 204. Continuously expanded via OilFlow first-party investigation + contributor channel (banks, insurers, inspectors, Big 4).

Where the data comes from, how we verify it

For each coverage dimension, the data source and verification process. Written so a compliance officer can satisfy their own vendor-risk questionnaire on OilFlow's data lineage in one read.

sanctionsSanctions listsFirst-party verified

OpenSanctions universal feed (250+ sanctions + PEP lists) plus direct OFAC SDN/Consolidated XML for redundancy.

Daily delta ingestion at 02:00 UTC, weekly full refresh. Every screen is logged to sanctions_screening_log with the source list and match score. Continuous re-screen runs on every list-delta event via the verification agent.

jurisdictionsRegulatory matrix jurisdictionsFirst-party verified

shared/regulatory.py — the Python source-of-truth that gates KYC step 3 (regulatory licence check). Mirrored in platform/src/lib/regulatory.ts for API-layer pre-check.

Verified jurisdictions are authored by reading the source regulator's public-domain rule set (OGRA, EPRA, EWURA, BPH Migas, etc.) and cross-checking against three independent published commodity-trade case histories. Skeleton coverage carries explicit 'draft / community-verifiable' confidence band until first-party reviewed.

registriesCorporate registriesAggregated from public

OpenCorporates (https://opencorporates.com) — public-data aggregator across UK Companies House, US Secretary of State filings, SECP Pakistan, DED UAE, and 136+ others.

On every KYC screen, OpenCorporates' lookup is called with the counterparty's stated registered name + country. Results are stored in kyc_async_jobs.results with data_source='live_api' and the OpenCorporates company ID for re-verification.

languagesAdverse media languagesFirst-party verified

agents/adverse_media_monitor — daily 06:00 UTC sweep of source-language news + watchlist feeds, classification + dedupe + fan-out via adverse_media.match_detected events.

Each source-language hit is classified via claude-haiku-4-5 against an OilFlow-curated adverse-media taxonomy (sanctions, fraud, corruption, AML, terror-finance). Confidence-banded matches surface to webhooks; lower-confidence land in the case-management dashboard for analyst review.

hs_codesHS commodity codesFirst-party verified

shared/regulatory.py PRODUCT_RULES — sectioned by HS chapter with per-country rule overlay.

Each HS chapter is mapped to a commodity category (crude, refined, LPG, LNG, bitumen, petrochemicals). The /api/v1/regulatory/check endpoint accepts HS code OR category and returns rule + risk band per jurisdiction.

clustersVerified fraud clustersFirst-party verified

broker_scam_blocklist table (migration 117 seeded the Simar Chahal cluster). Surfaced at /api/v1/clusters + /clusters public view (7-day delay).

Every cluster reaches 'confirmed' severity only after three independent evidence vectors: traceable false-identity claim, payment-instruction or mandate-chain artifact in our possession, and cross-reference to a public or first-party prior pattern. 'Likely' and 'suspected' ship with documented evidence gaps. Full methodology lives at /intelligence.

Where we are honest about the gap

What we are building toward, with target dates. We will update this page when each lands, and remove the item when shipped.

Universal sanctions feed

Q3 2026

OpenSanctions full-feed integration → 250+ lists worldwide, daily delta sync.

UN-member jurisdiction expansion

Q3 2026

Skeleton coverage for all 193 UN member states, marked 'draft' until first-party reviewed.

Language expansion to 20+

Q4 2026

Add CJK (Mandarin, Japanese, Korean), RTL (Hebrew, Farsi), Romance, Germanic, Hindi, Bengali, Turkish, Vietnamese, Thai, Indonesian.

All HS chapters

Q3 2026

Risk-band classification for all 99 HS chapters with first-party reviewed petroleum + chemical depth retained.

Vessel + cargo intelligence

Q4 2026

MarineTraffic / Equasis IMO lookup + dark-fleet detection patterns.

GLEIF LEI lookup + reverse lookup

Q3 2026

Any LEI → issuer + legal entity; reverse lookup of company name → LEI candidates.

Invite: regulators, standards bodies, sector contributors.

Regulators with cleared-for-public typology material, standards bodies (GAFTA, FOSFA, FIATA, BIMCO) authoring physical commodity compliance standards, and sector contributors (insurers, inspectors, Big 4 forensics) can extend OilFlow coverage faster than we can build it alone. The contributor channel is at /intelligence — and we publish every contributor cluster with attribution control.