Onboarding & Credentials Setup
Time to Complete: < 3 Minutes // FIPS 140-2 Key GenerationSetting up your enterprise instance establishes a dedicated tenant partition with isolated database schemas, custom ERP webhook signing secrets, and rate-limit allocation:
Your corporate domain is registered with an encrypted isolated workspace partition. Multi-tenant database rows are separated by tenant UUIDs.
Generate 256-bit cryptographically secure API keys. Keys are hashed with SHA-256 at rest and only shown once during initial generation.
Configure your HMAC-SHA256 signing secret for outbound ERP notifications. Ensures your ERP only accepts verified NexTrace gating signals.
Executing Your First Audit Search
Single Entity Traversal // NetworkX Directed Graph AlgorithmScreening can be initiated either interactively via the Web Dashboard or programmatically via the FastAPI HTTP endpoint.
curl -X POST "http://localhost:8000/api/v1/screen" \
-H "Content-Type: application/json" \
-H "X-API-Key: YOUR_ENTERPRISE_KEY" \
-d '{
"target_name": "Al-Mirage Aerospace Spare Parts FZE",
"country_iso": "AE",
"max_depth": 3,
"eccn_code": "3A090.a"
}'
Understanding the 4 Statutory Risk Tiers
0.0% attributable blocked equity. No matches on sovereign watchlists (OFAC, BIS, DDTC). Authorized for processing under No License Required criteria.
10.0% to 49.9% minority blocked stake, address co-location, or transshipment diversion risk. Requires affirmative compliance officer signoff.
≥ 50.0% aggregate ownership held by sanctioned parties across 1, 2, or 3 tiers (OFAC FAQ 401). Strictly prohibited by operation of law.
Target entity is directly designated on the OFAC SDN List, BIS Entity List, or DDTC Debarred List. Immediate freeze and license denial.
High-Concurrency Bulk Batch Screening
Celery Distributed Queue // 50,000+ Counterparty FilesFor enterprise vendor master audits, customer onboarding sweeps, and annual ERP database scrubbing, NexTrace provides an asynchronous batch worker pipeline powered by Celery and Redis:
- Upload Catalog: Submit a standard CSV or JSON array containing
entity_name,country_iso, and optionaltax_id / registration_number. - Trigram Name Normalization: Suffixes (LLC, Corp, FZE, GmbH, S.A., JSC) are normalized; unicode accents and punctuation are cleaned via Levenshtein preprocessing.
- Distributed Worker Execution: Celery workers chunk the batch into parallel tasks, query the local CSL database, traverse OpenCorporates shareholder trees, and execute NetworkX calculations.
- Consolidated Master Report: Download a comprehensive batch report with individual audit IDs, risk tiers, and downloadable EAR § 762 PDF certificates for each counterparty.
Audit Parameters & Fine-Grained Options
Custom Traversal Depth // Board Control Overrides| Parameter | Type | Default | Description & Regulatory Impact |
|---|---|---|---|
| target_name | string | Required | Full legal entity or trade name. Automatically undergoes multi-pass legal suffix stripping. |
| country_iso | string (2) | null (Global) | ISO 3166-1 alpha-2 code (e.g. "AE", "CY", "DE"). Constrains corporate registry lookup scope. |
| max_depth | integer (1-5) | 3 | Traversal depth upstream. Level 3 resolves Target → Holding Shell → Parent → Beneficial Owner. |
| eccn_code | string | null | Export Control Classification Number (e.g. "3A090.a", "9A515", "EAR99"). Triggers Part 738 country chart lookup. |
| has_board_control | boolean | false | When true, treats ownership edge as controlling regardless of equity stake, triggering constructive block under OFAC governance rules. |
Core Architectural Features
Deterministic Algorithms // Continuous Delta Drift MonitoringDeterministic NetworkX Traversal
Eliminates LLM hallucination risk. All network walks, cycle detection (circular ownership), and percentage aggregations run strictly in Python using NetworkX directed graphs (`nx.DiGraph`).
4-Hour CSL Drift Monitoring
Celery beat issues HTTP `HEAD` requests to the trade.gov CSL mirror every 4 hours. When the `ETag` changes, it computes `SDIFF` deltas and fires reverse lookups against active customer trees.
EAR § 762 Safe Harbor PDF Engine
Generates immutable PDF audit certificates sealed with SHA-256 cryptographic signatures. Contains ASCII tree topology, list ingest version, and timestamp to establish affirmative legal defense.
Sub-100ms ERP Pre-Check Webhook
Optimized binary order-gating endpoint for sales quote generation in SAP, NetSuite, and Epicor. Returns ALLOW_ORDER or BLOCK_ORDER_COMPLIANCE_HOLD in milliseconds.
Statutory Glossary & Regulatory Definitions
CFR Legal Citations // Definitive Trade TerminologyAny entity owned in the aggregate, directly or indirectly, 50 percent or more by one or more blocked persons is itself considered a blocked person. Unlike multiplicative beneficial ownership, the 50% rule operates as a fixed-point cascade: if an intermediary is ≥ 50% blocked, its downstream equity transmits at 100% face value.
The legal mechanism combining stakes from multiple sanctioned parties. For example, if Sanctioned Party A holds 25% of Target X and Sanctioned Party B holds 25% of Target X, Target X is constructively blocked (Σ = 50.0%) even though neither party alone holds majority ownership.
A five-character alphanumeric designation (e.g., 3A090, 2B001, 9A610) used on the Commerce Control List ("CCL") to categorize dual-use items based on their technical parameters, precision tolerances, and military utility.
Federal regulation mandating the retention of pre-export screening records, shipping authorizations, and due diligence archives for five (5) years. NexTrace generates cryptographically signed SHA-256 PDF packages to establish affirmative defense during BIS Office of Export Enforcement ("OEE") audits.
Sovereign entities, armed forces, national police, government intelligence services, or commercial enterprises whose actions support or contribute to the operation, installation, maintenance, or development of military items in designated foreign countries (e.g. Russia, China, Venezuela).
Establishes U.S. regulatory jurisdiction over foreign-made items produced outside the United States if the item is the direct product of U.S.-origin technology or software (e.g., semiconductor EDA software or DUV/EUV lithography tools).
The technical pipeline standard that strips raw filings, annual report scans, HTML debris, and administrative noise before returning corporate tree results to the context window or persisting to database records.