Generated 2026-10-25 15:58:25 UTC from the live public facts. A vendor-diligence packet assembled on request from the public facts this site already serves. Self-reported by the operator; not an independent audit. Each section names the URL it was read from. Print this page or save it as PDF; JSON at /api/public/diligence-packet.
| Legal name | Alpha Covenant Holdings LLC |
|---|---|
| Form | Pennsylvania limited liability company, Department of State entity 0016032097, formed 2026-10-18 |
| Registered office | 501 Cambria Avenue Suite #240, Bensalem, PA 19020-7213 |
| Registered agent | Entity Protect Registered Agent Services LLC |
| Check the filing | https://file.dos.pa.gov/search/business |
| SAM.gov | The LLC was formed 2026-10-18. SAM.gov registration follows EIN issuance; a UEI will print here the day it is assigned. Until then we are not a SAM-registered entity and no proposal says otherwise. |
| Ownership | One operator; no outside investors; no data brokers, resellers or advertising vendors. Partners and revenue sources are listed at /partners and /conflicts. |
| W-9 | On request, to a published procurement desk. |
| History | Receipts dated before 2026-10-18 were issued under a predecessor trade-name registration of the same name and stand as issued — bodies, hashes and keys verify unchanged. The contracting party for all services is Alpha Covenant Holdings LLC (PA 0016032097). The predecessor registration and the receipts issued under it are printed, not scrubbed, at Exhibit 0: https://alphacovenantholdings.com/api/public/exhibit-0.html |
| Exhibit 0 | Case Study 0 — our own paper trail: the predecessor registration and the receipts issued under it, printed under the same rule as everyone else’s record. |
Record format: Plain JSON, canonicalised; SHA-256; detached signatures; public registry row with id, time and hash; optional W3C Verifiable Credential export; HTML rendering is a view, not the record. Any receipt, cover or daily digest can be copied into a records system as JSON with its proofs; no proprietary reader is needed to verify it.
A plain control narrative for security and vendor questionnaires. Facts, with the public page that evidences each. Not a certification. No claim is made to: SOC 2, ISO 27001, HITRUST, FedRAMP, independent audit.
| What we hold about your people | Receipts are built from public files and the names or keys you submit. We store the submitted names/keys, the receipt, and (for a watch or roster) the contact email. We do not collect SSNs, dates of birth or consumer-report data, and we never read restricted files (Death Master File, CMS Preclusion, DEA registrants, FinCEN BOI, Treasury Do Not Pay). https://alphacovenantholdings.com/api/public-record/known-limits |
|---|---|
| Person-level rows | This platform is built for organizations: prebuilt and public receipts are organizations only, there is no person search, no person profile and no index of individuals across receipts. An individual's row appears on a receipt only when the publishing agency prints it under the exact name that was queried (OIG LEIE and state Medicaid exclusion files list people by design), and it is printed as the agency printed it — never enriched, never joined to another person-level source, and shown as a same-printed-name row, not as the subject, whenever the subject is an organization. Whether such a row is the person in front of you is the reader's question; we do not answer it. https://alphacovenantholdings.com/api/public-record/known-limits |
| Written policies | Information security, access control, incident response and change management policies are published as documents describing the controls actually in place, with the gaps named (one operator, no second responder, hosting provider controls not attested by us). A software bill of materials with declared licenses and a full-registry freshness distribution are published beside them. https://alphacovenantholdings.com/api/trust/policies |
| Direct sources only | Every line on a receipt is read from the publishing agency's own file or endpoint. We do not buy scraped or aggregated proxy data, do not bypass CAPTCHAs or bot walls, and do not use a browser disguise to reach a page that answers programs with HTTP 403. When an official source is unreadable it is printed as not read, with the official page, and nothing stands in for it — today that includes the FCC Covered List, FERC civil penalties, CBP EAPA notices and the OSHA SVEP log. A receipt prints what the file printed; the ERP, credentialing or TPRM rule that acts on it is the customer's. https://alphacovenantholdings.com/api/public-record/known-limits |
| Integrity of the record | Every receipt carries a SHA-256 over its canonical JSON; anyone can recompute it from the receipt and re-run the read from the id. Each day's receipt hashes, the Daily Replay and source-change events are chained into a daily archive digest submitted to OpenTimestamps; proofs are published when Bitcoin attests them and are described as pending until then. https://alphacovenantholdings.com/audit |
| Change control and corrections | Source parsers and receipt fields are versioned in the method string on every receipt. Errors are corrected in public: the receipt is annotated withdrawn (body and hash kept), a ticket is logged with cause and fix, and affected rows are rebuilt. The log is append-only. https://alphacovenantholdings.com/corrections |
| Availability and monitoring | A self-check (Sentinel) runs continuously against the live site: source reachability, held-file freshness, job health, archive chain continuity, disk. Findings and actions are public. The Daily Replay re-reads a sample of yesterday's receipts every day and prints the misses. https://alphacovenantholdings.com/audit |
| Access and keys | Partner keys are stored as SHA-256 hashes; plaintext is shown once at issue. Operator actions require an authenticated session. Webhooks are HTTPS-only and signed with a body-hash header. Payment card data is handled by Stripe; we never see card numbers. https://alphacovenantholdings.com/api/batch/spec |
| Data residency and retention | Hosted in the United States. Receipts are retained indefinitely because they are evidence; a requester may withhold the name from the public registry at issue (id, time and hash still recorded). Held copies of public files are kept for the version history and may be deleted on disk pressure, with the hash and date retained. https://alphacovenantholdings.com/api/public-record/file-history |
| Subprocessors | Emergent (hosting), MongoDB (database), Stripe (payments), Resend (transactional and outreach email), Google Places API (locating an organisation's own website for outreach routing only — never a source of record), api.data.gov / GovInfo / FAC / SAM.gov (official APIs read with our keys), Google/YouTube and LinkedIn (publishing our own content only), OpenTimestamps calendars (hash submission). No analytics or advertising vendors; visits are counted by us, cookieless, in aggregate. https://alphacovenantholdings.com/api/visits |
| Signing keys and custody | Every new receipt's registry row carries a HYBRID signature set — ML-DSA-65 / FIPS 204 and Ed25519, both over the receipt hash, valid only if both verify — and Verifiable Credential exports carry the same proof set (ML-DSA-65 by reference implementation; no eIDAS, FIPS-validation or certification claim). Archive checkpoints carry SLH-DSA / FIPS 205. The full signing-path inventory and dated plan against EO 14412 / OMB M-26-15 is public at /api/public/cryptography.html. Both private keys are held in the application database and are readable only by the application process; there is no HSM and no key-escrow vendor. Public keys and key ids are published in the DID document; a rotation adds a new key id and keeps the old one resolvable so earlier receipts still verify. Custody and rotation are SOP-11. https://alphacovenantholdings.com/api/vc/did.json |
| Encryption | All traffic is TLS 1.2+; partner API keys are stored as SHA-256 hashes; sensitive personal fields we must hold (phone numbers, contact notes, signed-agreement identities) are Fernet-encrypted at rest. Encryption of the database volume at rest is a control of the hosting provider that we rely on and do not attest ourselves. Receipts themselves are public-record text and are not secret; their integrity, not their confidentiality, is what the hash and signatures protect. https://alphacovenantholdings.com/trust |
| Vulnerability disclosure | Report a security issue to the reference desk mailbox printed in the footer with 'security' in the subject. We acknowledge within two business days, fix or mitigate before any public note, and record the fix in the corrections log with its date. We do not pay bounties and do not pursue good-faith researchers. https://alphacovenantholdings.com/corrections |
| Continuity and exit | One operator is a single point of failure and we say so. The mitigation is portability: every receipt exports as a W3C Verifiable Credential that verifies against the published DID document without this site; the daily hash digests are anchored to OpenTimestamps; customers may download every receipt at any time. If the service closed, the DID document and verification page would remain published for twelve months. https://alphacovenantholdings.com/api/vc/did.json |
| Outreach conduct | Letters go only to a general office inbox the organisation itself publishes on its own website, never to an address built from a person's name, never to fraud, hotline, complaint, integrity or ethics inboxes, at most five new organisations a day, with the follow-up terms stated in the letter and a stop on any reply. Every letter passes a written gate that is published; the gate's checks are listed in SOP-13. https://alphacovenantholdings.com/api/trust/sops/changes |
| Legal entity | Alpha Covenant Holdings LLC, a Pennsylvania limited liability company (Department of State entity 0016032097, formed October 18, 2026); registered office 501 Cambria Avenue Suite #240, Bensalem, PA 19020-7213. Receipts dated before 2026-10-18 were issued under a predecessor trade-name registration; their bodies, hashes and keys stand as issued and verify unchanged. The contracting party for every service is Alpha Covenant Holdings LLC (PA 0016032097). The filing can be checked at the Pennsylvania Department of State. https://alphacovenantholdings.com/api/public/entity |
| Independent assurance | No SOC 2, ISO 27001 or audit report yet; the daily self-check is ours and is labelled as such. Third parties who verify an individual receipt at /verify may log that they did — the entry is theirs, confirmed from their own mailbox, and we only record it. We intend to seek an agreed-upon-procedures engagement (AICPA AT-C 215) on a sample of receipts before SOC 2; when either exists it will be linked here with its date and scope, not before. https://alphacovenantholdings.com/verify |
| Hash | SHA-256 over canonical JSON (RFC 8785 / JCS) Quantum computers do not break SHA-256 as a record of integrity (Grover halves the margin to 128 bits, which remains out of reach). Every receipt hash issued today stays verifiable without change. |
|---|---|
| Ed25519 (FIPS 186-5 EdDSA) | signature of record on every receipt, audit-log entry, correction and certification classical; FIPS 186-5 approved; scheduled for replacement as signature of record (see plan) · did:web key-1 |
| ML-DSA-65 (FIPS 204, lattice) | post-quantum signature in the HYBRID set on every new receipt at registration, and the parallel proof on every Verifiable Credential export in use since 2026; on every new receipt since 2026-10-25; verifies offline against the key in the DID document; reference implementation, not FIPS-validated · did:web key-pq-1 |
| SLH-DSA-SHA2-192s (FIPS 205, hash-based) | archive-grade post-quantum signature on registry tree-head checkpoints and the daily archive digest in use since 2026; different mathematics from ML-DSA so a break in one does not take the other · did:web key-slh-1 |
| OpenTimestamps (SHA-256 Merkle proof anchored in Bitcoin) | independent timestamp on each daily digest hash-based; not affected by the signature transition · none — public calendars |
| Off-site copies | No off-site retention-locked copy is configured on this deployment yet; daily manifest hashes are published regardless, and every tree head is witnessed by OpenTimestamps (Bitcoin) and signed with SLH-DSA. /api/public/offsite-copies |
| Keys | https://alphacovenantholdings.com/api/vc/did.json |
| done 2026-10 | Phase 0–3: signing-path inventory published; algorithm/standard/key id named on every signature; HYBRID set (ML-DSA-65 + Ed25519) on every new receipt at registration; SLH-DSA on archive checkpoints; OpenTimestamps on the daily digest. |
|---|---|
| 2027-06-30 | Audit-log entries and decision-record countersignatures move from Ed25519-only to the HYBRID set. An external party verifies at least 1,000 hybrid sets from the public keys alone; we publish the first such report. |
| 2030-12-31 | Phase 4: ML-DSA-65 becomes the signature of record; Ed25519 retained as a compatibility proof; a FIPS-validated implementation replaces the reference one if available. Key ids change; the DID document keeps every historical key so nothing issued earlier stops verifying. |
| 2031-12-31 | Phase 5: Ed25519 no longer issued (state PQC_ONLY) — earlier if a break is published. Historical receipts remain verifiable by their SHA-256, their OpenTimestamps anchor, their SLH-DSA archive signature and the retired Ed25519 key published in the DID document. |
Nothing already issued is re-signed, re-hashed or edited. Durability comes from keeping every key and every proof public, not from changing the record.
Every figure on a record is copied from a named official source. Money buys placement, alerts or tooling next to a record. It cannot add, remove, reorder, reword or delay any line of the record, the Covenant Index, the Correction Ledger, or the Directory ranking.
| Record sponsorship | Buyer: Companies, law firms, trade groups Gets: A labelled 'Sponsor' slot beside a record or state page, with the sponsor's own message. Cannot: Change or hide any line of the record it sits beside; sponsors are shown on the record whether the record is favourable or not. |
|---|---|
| Record Monitor | Buyer: Shippers, brokers, procurement teams Gets: Daily change alerts on public lines (FMCSA, SAM, courts, DOL, state registries, CFPB) for up to 300 carriers or vendors, prepaid 30 days. Cannot: Alter the watched records; the monitor only re-reads the same public sources and reports old → new. |
| Carrier recruiting page | Buyer: Motor carriers Gets: Openings, pay and equipment shown beside the carrier's live FMCSA report card, prepaid 30 days. Cannot: Edit the report card — it is pulled from FMCSA and is never editable by the carrier or by us. |
| Record Diagnosis (written, cited analysis) | Buyer: Companies named in records Gets: A one-time written analysis of what a company's own public record shows — complaint drivers by issue, product and state; response timing versus the market — assembled from the same public lines anyone can pull. The $19 cited PDF and the Covenant Score it carried were retired in 2026 — see closed_streams. Cannot: Change any record, or produce a score, grade or verdict; the analysis cites public lines and the recipient decides what to do about them. |
| Marketing, affiliate-commission, creator and agent-growth services | Buyer: Small businesses, creators, insurance agents (formerly) Gets: REMOVED FROM THIS DOMAIN. These services and the 30%-commission partner program are no longer sold on alphacovenantholdings.com; they are being moved to a separate business and website. Their pages now show a notice. Cannot: Reach any record data: no code path into record, score, ledger or directory collections; no record page links to them; no longer offered under the records platform's name. |
Runtime billing firewall: Billing endpoints accept payment for placement, alerts, pages and reports only. Any billing request that names a score, rank, record, ledger, or expedite field is refused before it reaches a handler, and the attempt is logged. Scoring↔billing import separation check on this request: pass.
Tickets to date: 32 total · 5 resolved · 27 open · median days to resolve: 0.0. Chain head: b75ff1a295edf5251aba1bb3852f6c60ff9313e16812c12f5bdda1e8e8c0f2cb.
The record is produced by deterministic code; no language model reads a source, selects a row, computes a hash or signs. Model use is confined to labelled explanation, reading and drafting surfaces that the platform never acts on. Every model call passes through one ledger function which refuses, and logs the refusal, if reached inside a receipt build.
| Zero-call metric | 0 model calls ever attempted inside a receipt build (append-only ledger; 2 labelled explanation/draft calls across all surfaces in the last 30 days) — live at /api/public/ai-calls. A refusal count of zero means no code path has ever attempted a model call while a receipt was being built; the count is public and append-only. |
|---|---|
| Per-receipt statement | Every receipt body carries ai_statement.model_calls_during_build = 0 inside its hashed, signed body; per-receipt check at /api/public/ai-calls?receipt_id=. |
| Where a model is used |
|
| AI-off mode | Any account can switch every AI surface off; the receipt product is unchanged because it never involved a model. |
| Regulatory position | The full position — surfaces, inventory, NIST AI RMF controls, OMB M-25-21 topics, EU AI Act / Colorado / Texas / California / Utah rows with what each turns on and what we do not claim, and the proposals we declined — is published at https://alphacovenantholdings.com/api/public/ai-position.html. We make no claim that this satisfies OMB M-25-21 or any agency's AI governance plan; those bind agencies. Any account can switch AI off entirely (AI-off mode) and take the product as plain software. The regulatory position — EU AI Act, Colorado, Texas, California, Utah, OMB, GDPR Art. 22, NIST AI RMF — with what each turns on and what we do not claim is published at /api/public/ai-position.html. |
| Self-audit | Latest self-audit sir_270c975e0058 at 2026-10-25 15:55:57 UTC (trigger: startup): 17/18 assertions pass. |
| Named customers | No customer has agreed to be named. We do not print a customer's name, logo or quote without written consent, and none has been given. |
|---|---|
| Named auditors | No auditor, inspector general or compliance officer has agreed to be named as a reference. |
| Case studies | No case study describes a paying customer. Worked examples on this site are built on public records of organizations that are not customers and are labeled as such. |
| Independent audit | No third party has audited this platform, its code or its controls. Every control we publish is self-attested and carries its own evidence URL. |
Receipt count in our registry: 3,581. A count of our own registry. It is a system metric, not a customer reference, and most of it is our own builds.
| Partner API — screening receipts inside your product | Nonprofit / Research — $0 (no charge · 501(c)(3) in IRS Pub 78); Basic — $99 (monthly on invoice); Monitor — $499 (monthly on invoice); White-label partner — $5,000 (monthly on invoice) https://alphacovenantholdings.com/partners |
|---|---|
| Record Monitor | 7-day trial — up to 5 carriers or vendors, free, no card — $0 (7 days, free, ends by itself); Up to 25 records — $49 (30 days prepaid); Up to 100 records — $149 (30 days prepaid); Up to 300 records — $349 (30 days prepaid); More than 300 records — inquiry (annual, by agreement) https://alphacovenantholdings.com/watch |
| Family Cabinet | Family cabinet — 3 medicines, products, vehicles or foods, free — $0 (365 days, free) https://alphacovenantholdings.com/watch |
| Carrier recruiting page | One carrier page — $49 (30 days prepaid) https://alphacovenantholdings.com/carrier-check |
| Record Diagnosis | One-time report — $497 (one-time) https://alphacovenantholdings.com/record-recovery |
| Litigation Report | One report, one name or key — $495 (one-time); Legal aid · public defenders — $0 (confirmed by the custodian before release) https://alphacovenantholdings.com/litigation-report |
| Roster — counties, districts and authorities: the vendor master, re-read monthly, with the diff | Up to 150 vendors — $3,600 (12 months, invoice or PO); Up to 500 vendors — $9,999 (12 months, invoice or PO); More than 500 vendors — inquiry (annual pool on invoice) https://alphacovenantholdings.com/government |
| Roster receipt — one-time: up to 500 names, receipts and the cover within 48 hours | Up to 500 names, one-time — $497 (one-time, card or invoice) https://alphacovenantholdings.com/roster-receipt |
| Subrecipient roster — pass-through agencies: the 2 CFR 200.332 record for every subrecipient, re-read monthly | Up to 50 subrecipients — $1,800 (12 months, invoice or PO); Up to 150 subrecipients — $3,600 (12 months, invoice or PO); Up to 500 subrecipients — $9,999 (12 months, invoice or PO); More than 500 subrecipients — inquiry (annual pool on invoice) https://alphacovenantholdings.com/for-grant-recipients |
| Audit Calendar + Forms Desk — the year by the rule, and a desk that answers from the rule | One customer, both audiences, unlimited desk questions — $999 (12 months, invoice or PO); Included with any roster, Audit Desk or enterprise roster — $0 (with the parent order) https://alphacovenantholdings.com/audit-calendar |
| Audit Handover — licensed inside your product (resellers, GovTech platforms, CPA-firm software) | Per customer read, per month — $36 (monthly on invoice; $720 minimum in any month with reads); Revenue share — your price, our 20% — inquiry (12-month agreement; floor $36 per customer-month) https://alphacovenantholdings.com/partners |
| Audit Desk — workpaper receipts and the client board for single-audit firms | Firm desk — up to 50 single-audit clients — $4,999 (12 months, invoice); Firm desk — up to 200 clients — $9,999 (12 months, invoice); Firm desk — more than 200 clients — $14,999 (12 months, invoice); Workpaper bundle — one engagement, up to 25 sample vendors — $249 (one-time, per engagement); Workpaper bundle — one engagement, up to 100 sample vendors — $499 (one-time, per engagement); Auditor-change weekly list — the firm's states, by email — $999 (12 months, invoice; first 1 weekly issues free) https://alphacovenantholdings.com/for-auditors |
| Enterprise roster — Medicaid managed-care plans, MA/Part D sponsors and their FDRs | Enterprise roster — to 1,000 names, re-read monthly, with the diff — $9,999 (12 months, invoice); Enterprise roster — to 5,000 names, re-read monthly, with the diff — $29,999 (12 months, invoice); Enterprise roster — above 5,000 names, by agreement — inquiry (12 months, invoice) https://alphacovenantholdings.com/for-health-plans |
| Receipt Watch — scheduled full receipts, exact diffs, duty ledger | 7-day trial — up to 5 names, free, no card — $0 (7 days, no card); Up to 25 names, monthly receipts — $149 (30 days prepaid); Up to 100 names, monthly receipts — $499 (30 days prepaid); Up to 300 names, daily receipts, partner endpoint — $999 (30 days prepaid) https://alphacovenantholdings.com/receipt-watch |
| Credits — prepaid units of service | 100 credits — $50 (12-month expiry); 500 credits (10% more per dollar) — $225 (12-month expiry); 2,500 credits (20% more per dollar) — $1,000 (12-month expiry); Annual credit pool on invoice — inquiry (12-month agreement, invoice) https://alphacovenantholdings.com/credits |
| Source-of-record data access | Newsrooms · legal aid · research — $0 (attribution required) https://alphacovenantholdings.com/source-of-record |
Prices are prepaid for the stated term. Prepaid is the default: nothing renews by itself. Record Monitor and the Seal offer automatic renewal as a separate choice that takes two confirmations, cancels in one click at /manage-renewal, and never changes the price. Nothing anyone pays changes what is shown on a record. Payment buys monitoring capacity, a page, exports or a dated document — never a figure, rank, alert or correction outcome. No paid name appears on any page that shows a record.
Decision records: a customer's officer may bind a typed decision and a PO, award or voucher reference to any receipt; the platform countersigns the hash and the time, not the decision — verify guide. Plain-text reviewer packet (trust, conflicts, accuracy, formula): /api/record/reviewer-packet.