For utilities, pipeline operators, nuclear licensees and heavy-industry supply chains

Critical-Infrastructure Supplier Public-Record Receipt

NERC CIP-013 wants a documented supply chain risk plan and the evidence it was followed; 49 CFR 192/195 operators, 10 CFR licensees and OSHA-covered plants all answer to regulators who publish their enforcement record. This receipt reads those public files for the exact printed supplier or operator name on a date. It says nothing about a site's safety or security — it says what the agencies printed, and names what could not be read.

For bulk electric system owners and operators, gas and liquid pipeline operators, nuclear licensees, steel and heavy-manufacturing primes, and the procurement teams that onboard their suppliers. Keys accepted: UEI · CAGE · EIN · CIK · LEI. Matching is exact key or exact printed name; nothing is inferred, scored or labelled.

What is on the receipt

SAM.gov exclusions, OFAC SDN and the trade.gov Consolidated Screening List with file dates and SHA-256; DoD Section 1260H and UFLPA Entity List rows for the Section 889 and forced-labor flow-downs
PHMSA pipeline enforcement cases — every case since 2002 from PHMSA's raw data file, by exact printed operator name, with case type, status and penalties as proposed, assessed and collected
NRC escalated enforcement actions — reactor, materials, fuel-cycle and non-licensee collections as the NRC's pages print them, by heading; descriptions that mention the exact name listed as mentions, not counted
OSHA inspections opened in the last five years where the establishment name equals the exact printed name (DOL Enforcement API); containing names listed as candidates
EPA ECHO facility and Clean Water Act rows; SEC EDGAR by CIK; FAC single audits; USAspending awards
Not read, named on the receipt: FERC civil penalties and NERC Notices of Penalty (ferc.gov 403), the OSHA SVEP log (offline), CBP EAPA notices (cbp.gov 403), FOCI or CMMC status (not public records)

Priced per proof event

Roster 150: $3,600 a year, up to 150 names re-read monthly — $2.00 per receipt at a full list; Roster 500: $9,999 a year. Net 30 on invoice or purchase order, W-9 on request.

Partner API: Basic $99/month for 5,000 single receipts (2¢ each beyond), Monitor $499/month for 50,000 with pasted lists and watchlists (1¢ beyond). Terms on /partners.

No seats, no per-user licences. A single free receipt is always available at /screening.

See one

A live sample receipt for this sector, re-run against today's files:

Open the sample receipt

Every receipt conforms to Receipt Format v1 and is issued under the Verification Integrity Standard. Start a pilot at /pilot.

Citing a receipt as audit evidence

Request the receipt with your award, PIID or invoice reference (ref=); the reference is bound into the SHA-256 and printed, never interpreted.
File the JSON and the print page. The citation line on the receipt names the registry id, read time and hash.
An auditor re-runs the same name and keys at /screening or checks the held copy at /r/<id>; the registry confirms the hash without any login.
Where a source is listed as not read, the receipt says so; the auditor's workpaper should treat that source as unchecked, not as clear.