INTEL
Status: blockedCLUSTERNovorossiysk-Turkish-Med Dark Fleet Cluster added — confirmedStatus: blockedCLUSTERPinnacle Petrol LLC added — likelyStatus: blockedCLUSTERSimar Chahal added — confirmedStatus: blockedCLUSTERArrakis Development added — likelyStatus: blockedCLUSTERExxon Global Distributor added — likelyStatus: pendingCORPUS427 entities · 63 countries

The full machine, nothing hidden.

OilFlow is the compliance infrastructure for emerging-market commodity trade. Five products built on one trust stack: Regulatory Matrix API (235 jurisdictions), Counterparty KYC-as-API (7-step pipeline, 8-list sanctions + PEP screening), Scam Cluster Intelligence Feed (first-party-investigated fraud clusters), Trade-Compliance Workflow Suite (white-label bank workflow), and the Pre-Deal Compliance Copilot (clearance verdict in under 30 seconds).

From proposed deal to audit file

Five product surfaces, in the order a desk actually uses them. Front office clears the structure first; compliance screens the counterparty; the feed keeps watching after the screen clears.

  1. 01

    Clear the deal

    POST /api/v1/predeal/check

    Front office pastes the proposed deal. Clearance probability, blockers, and a restructure suggestion come back in under 30 seconds.

  2. 02

    Check the route

    GET /api/v1/regulatory/check

    Product tradability, payment-term constraints, and licence requirements for origin and destination, across 235 jurisdictions.

  3. 03

    Screen the counterparty

    POST /api/v1/kyc/screen

    The full 7-step pipeline below. Sanctions screening runs first and is a hard stop.

  4. 04

    Keep watching

    GET /api/v1/clusters/check

    Cluster checks plus webhook alerts when a screened counterparty later matches a confirmed fraud cluster or a sanctions-list delta.

Coverage, measured

Jurisdictions covered235
Deep country-KYC profiles79
Sanctions lists screened7 + PEP
KYC pipeline steps7 · sanctions first, hard stop
Pre-deal verdict< 30 s
Continuous re-screenweekly + within 24h of a list update

The 7-step KYC pipeline

Every counterparty an API customer screens runs through all seven steps. Sanctions screening is a hard stop — no manual override, no exception process. Continuous re-screening runs weekly, and within 24 hours of any sanctions-list update.

  1. 01

    Sanctions screening

    8 lists — OFAC SDN, OFAC Consolidated, UN, EU, UK, Canadian SEMA, Australian DFAT, Swiss SECO — plus PEP screening. Hard stop on any match. Zero override.

  2. 02

    Company registration

    OpenCorporates + country-specific registries as fallback.

  3. 03

    Regulatory licence

    Petroleum-specific licence per regulator: METI (JP), MOTIE (KR), NDRC/MOFCOM (CN), EPDK (TR), CER (CA), NOPTA (AU), OGRA (PK), EPRA (KE), and 227 others — see the regulatory map.

  4. 04

    Asset confirmation

    News, port records, satellite APIs — confirm physical operations.

  5. 05

    Trade references

    Two independent references, automated outreach + AI review.

  6. 06

    Digital footprint

    Website, LinkedIn, news presence scored and aggregated.

  7. 07

    Scam pattern screen

    LOI / ICPO / DLC MT700 pattern detection to flag known fraud signatures.

FROM RAFAE

The cluster feed is not scraped data. I investigate every entry before it ships. The first one, a Chevron-CEO impersonation behind a $50M cargo lift, took 30 minutes to break, and the full evidence chain is published at /case-studies/simar. That investigation engine is what every product on this page is built on.

— Rafae, Karachi

6 stages, 1 audit log

The white-label stage rail bank trade-finance compliance desks embed. Every stage writes to the same append-only audit log; counsel reviews every AI-drafted document before signing.

  1. 01

    Intake

    Counterparty intake through the bank's white-labelled form. The audit log opens with the first field.

  2. 02

    KYC screen

    The 7-step pipeline runs inline. A sanctions match blocks the case. No override path exists.

  3. 03

    NCNDA

    Master NCNDA dispatched via DocuSign before confidential terms flow. Stale envelopes chased after 3 days.

  4. 04

    SPA draft

    Drafted from accepted terms, marked DRAFT for review by independent legal counsel on every template.

  5. 05

    DocuSign

    Signature capture via DocuSign JWT. Envelope status tracked to completion.

  6. 06

    Audit log

    Every decision, document version, and signature timestamped. Exportable for examiner review.

The white-label desk banks run counterparty intake through — spin up the demo tenant with fixture data, no signup.

IntakeKYCNCNDASPAAudit log

Demo tenant · fixture data

Controls in production today

Every control below is live. Full documentation, processor table, and the signed compliance commitment at /trust.

Sanctions coverage8 lists + PEP
EncryptionAES-256 at rest · TLS 1.3 in transit
SOC 2aligned controls · audit in progress
Breach notification72h · GDPR Art. 33
AI processingzero retention
Audit trailappend-only · every decision logged

Full processor table · /trust

Five compliance products, sequenced.

Five B2B SaaS products built on the same trust stack — sold to bank, insurer, and trading-house compliance teams, and to the front-office RMs those teams clear deals for. SKU #1 and #5 sell self-serve via Stripe. SKU #2 and #3 are in alpha and beta. SKU #4 ships per-customer as enterprise deals close.

Full pricing · /pricing

  1. 01

    SKU #1 — Regulatory Matrix API

    $99/mo developer · $999/mo prod · $25-100K/yr enterprise

    Live · 235-jurisdiction tradability + payment-term matrix

    GET /api/v1/regulatory/{countries,check,products}. Authoritative product-by-country trade legality for compliance pre-checks. Replaces Refinitiv World-Check on EM commodity depth.

  2. 02

    SKU #2 — Counterparty KYC-as-API

    $25-50/screen PAYG · $25-100K/yr seat-based

    Alpha · 7-step pipeline live, billing wires next

    POST /api/v1/kyc/screen. Single call runs 8-list sanctions screening (OFAC SDN + OFAC Consolidated + UN + EU + UK + Canada + Australia + Switzerland) plus PEP, company registration, regulatory license, asset confirmation, trade references, scam-cluster match across 235 jurisdictions.

  3. 03

    SKU #3 — Scam Cluster Intelligence Feed

    $10-25K/yr read-only · $50-100K/yr API + alerts

    Beta · Simar / Ahmad / Russia-Türkiye clusters live

    GET /api/v1/clusters/{check,list}. Real-time feed of verified-fraudulent counterparty clusters, cross-referenced to LinkedIn IDs, company aliases, broker chains. Continuously updated by the circumvention monitor.

  4. 04

    SKU #4 — Trade-Compliance Workflow Suite

    $200K-$1M/yr per enterprise customer

    Custom · 8-12 weeks per integration

    White-label workflow for bank trade-finance desks: counterparty intake → KYC screen → NCNDA dispatch → SPA draft → DocuSign → audit log. Embedded in the bank's existing systems.

  5. 05

    SKU #5 — Pre-Deal Compliance Copilot

    $99/mo solo · $999/mo desk · $50-150K/yr bank enterprise

    Live · clearance verdict in under 30 seconds

    POST /api/v1/predeal/check. An RM pastes the proposed deal and gets clearance probability, blockers, and a restructure suggestion before investing weeks of structuring effort. Sold to front office, not compliance.

Ready to plug it into your stack?

Sandbox key in 60 seconds. No sales call for the SKU #1 and #5 self-serve tiers.