Regulator procurement pack
Draft. Counted on 2026-10-18 (input stamp a2785546a2e8)
Correction, 8 October 2026. The list of sub-processors in section 2 now includes Google Workspace, which hosts our own mailbox and the site feedback form. It was an existing recipient that the list had left out.
This pack gathers what a procurement or compliance reviewer usually asks for. It states what we have measured, and says where we have not.
1. Accessibility conformance report
Measured on 2026-10-01 with axe-core 4.13.0 and Playwright 1.63.0 (Chromium), on 9 pages:
/accessibility/compound/hq-c-org-000001/how-this-data-is-made/regulator-agency-directory/regulator-bill-of-rights/regulator-engagement-registry/regulator-intake/regulator-procurement/regulator-verify-manifest
Of the 50 Level A and AA success criteria of WCAG 2.1: 5 supports (automated checks only), 1 partially supports, 0 does not support, 44 not yet checked. We do not claim conformance. A manual screen-reader and keyboard pass by the operator has not been recorded, so every criterion that needs one reads "not yet checked" or says so in its evidence.
| Criterion | Name | Result | Evidence |
|---|---|---|---|
| 1.1.1 | Non-text Content | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.2.1 | Audio-only and Video-only (Prerecorded) | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.2.2 | Captions (Prerecorded) | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.2.3 | Audio Description or Media Alternative (Prerecorded) | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.2.4 | Captions (Live) | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.2.5 | Audio Description (Prerecorded) | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.3.1 | Info and Relationships | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.3.2 | Meaningful Sequence | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.3.3 | Sensory Characteristics | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.3.4 | Orientation | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.3.5 | Identify Input Purpose | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.4.1 | Use of Color | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.4.2 | Audio Control | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.4.3 | Contrast (Minimum) | Partially supports | axe rule(s) color-contrast report violations on 2 of 9 pages tested (automated test) |
| 1.4.4 | Resize Text | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.4.5 | Images of Text | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.4.10 | Reflow | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.4.11 | Non-text Contrast | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 1.4.12 | Text Spacing | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 1.4.13 | Content on Hover or Focus | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.1.1 | Keyboard | Supports (automated checks only) | scripted keyboard pass: all reached on 9 of 9 pages; the operator's manual keyboard pass is not yet recorded |
| 2.1.2 | No Keyboard Trap | Supports (automated checks only) | scripted keyboard pass: no trap on 9 of 9 pages; the operator's manual keyboard pass is not yet recorded |
| 2.1.4 | Character Key Shortcuts | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.2.1 | Timing Adjustable | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 2.2.2 | Pause, Stop, Hide | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 2.3.1 | Three Flashes or Below Threshold | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.4.1 | Bypass Blocks | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 2.4.2 | Page Titled | Supports (automated checks only) | axe rule(s) document-title: no violation on 9 of 9 pages tested (the whole test for this criterion is automatable) |
| 2.4.3 | Focus Order | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.4.4 | Link Purpose (In Context) | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 2.4.5 | Multiple Ways | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.4.6 | Headings and Labels | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.4.7 | Focus Visible | Supports (automated checks only) | scripted keyboard pass: focus visible on 9 of 9 pages; the operator's manual keyboard pass is not yet recorded |
| 2.5.1 | Pointer Gestures | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.5.2 | Pointer Cancellation | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.5.3 | Label in Name | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 2.5.4 | Motion Actuation | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 3.1.1 | Language of Page | Supports (automated checks only) | axe rule(s) html-has-lang, html-lang-valid: no violation on 9 of 9 pages tested (the whole test for this criterion is automatable) |
| 3.1.2 | Language of Parts | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 3.2.1 | On Focus | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 3.2.2 | On Input | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 3.2.3 | Consistent Navigation | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 3.2.4 | Consistent Identification | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 3.3.1 | Error Identification | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 3.3.2 | Labels or Instructions | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 3.3.3 | Error Suggestion | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 3.3.4 | Error Prevention (Legal, Financial, Data) | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 4.1.1 | Parsing | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
| 4.1.2 | Name, Role, Value | Not yet checked | axe rules that touch this criterion found no violation on 9 pages, which does not establish support; a manual check is needed |
| 4.1.3 | Status Messages | Not yet checked | no automated rule covers this criterion and the scripted pass does not test it |
2. Security summary
This section makes no claim beyond what these pages already say. Our security contact and policy are in security.txt and on the security page. The sub-processors we use (Cloudflare, Google Workspace, Resend, Stripe, Upstash, Vercel) and their data-processing status are on the API compliance page.
3. Data-handling statement
We collect published documents from public sites. The 7,326 source documents we have archived were fetched from 158 hosts, parsed from their web addresses and listed here: accessdata.fda.gov, afcec.af.mil, ams.usda.gov, animaldrugsatfda.fda.gov, api.crossref.org, api.govinfo.gov, api.regulations.gov, apps.who.int, apublica.org, aqmd.gov, archive.cdc.gov, archive.epa.gov, archives.federalregister.gov, aspca.org, aspcapro.org, assessments.epa.gov, assets.publishing.service.gov.uk, atsdr.cdc.gov, avma.org, baua.de, bifma.org, canada.ca, carpet-rug.org, cdc.gov, cdn.who.int, cdph.ca.gov, cdsco.gov.in, cfpub.epa.gov, chem.echa.europa.eu, chm.pops.int, cir-safety.org, cloud.google.com, clowder.edap-cluster.com, commission.europa.eu, commonchemistry.cas.org, comptox.epa.gov, cpsc.gov, d3t14p1xronwr0.cloudfront.net, dailymed.nlm.nih.gov, database.ich.org, dec.vermont.gov, digital.library.unt.edu, dir.ca.gov, docs.legis.wisconsin.gov, doi.org, dosh.gov.my, downloads.regulations.gov, dra4.nihs.go.jp, ebi.ac.uk, ec.europa.eu, ecfr.gov, echa.europa.eu, ecocenter.org, efsa.europa.eu, efsa.onlinelibrary.wiley.com, ema.europa.eu, emhub1.energy.gov, endocrinedisruption.org, energy.gov, english.nmpa.gov.cn, epa.gov, epi.dph.ncdhhs.gov, eur-lex.europa.eu, eutils.ncbi.nlm.nih.gov, ewg.org, fao.org, fda.gov, federalregister.gov, fedlex.admin.ch, food.ec.europa.eu, gaftp.epa.gov, ghdx.healthdata.org, gob.mx, gov.uk, govinfo.gov, gpo.gov, hawc.epa.gov, hawcprd.epa.gov, hawcproject.org, health.ec.europa.eu, health.ny.gov, hfpappexternal.fda.gov, hse.gov.uk, iaea.org, iarc.who.int, icmr.gov.in, icrp.org, ifrafragrance.org, imo.org, inchem.org, info.cmog.org, investors.3m.com, iris.epa.gov, iris.who.int, law.cornell.edu, law.resource.org, laws-lois.justice.gc.ca, leginfo.legislature.ca.gov, marinedebris.noaa.gov, mass.gov, merckvetmanual.com, methanol.org, mhlw.go.jp, monographs.iarc.who.int, nationalacademies.org, nature.com, ncbi.nlm.nih.gov, nepis.epa.gov, niehs.nih.gov, nihs.go.jp, nite.go.jp, npic.orst.edu, npr.org, ntp.niehs.nih.gov, oehha.ca.gov, oeko-tex.com, ordspub.epa.gov, osha.europa.eu, osha.gov, pmc.ncbi.nlm.nih.gov, pmda.go.jp, pops.int, portals.iucn.org, pubchem.ncbi.nlm.nih.gov, publications.europa.eu, publications.gc.ca, publications.iarc.fr, publications.iarc.who.int, pubmed.ncbi.nlm.nih.gov, rais.ornl.gov, regulations.gov, researchrepository.ilo.org, resend.com, sae.org, search.epa.gov, semspub.epa.gov, single-market-economy.ec.europa.eu, stacks.cdc.gov, standard.wellcertified.com, standards.cencenelec.eu, std.samr.gov.cn, stripe.com, unep.org, unscear.org, upstash.com, uscode.house.gov, v2.wellcertified.com, vercel.com, waterboards.ca.gov, web.archive.org, webapi.iarc.who.int, who.int, whole-dog-journal.com, workspace.google.com, ww2.arb.ca.gov, www-pub.iaea.org, www3.epa.gov, wwwn.cdc.gov. 56 of the 7,326 entries carry no web address in their url field (it holds a note rather than an address), so they are counted in the 7,326 and in no host. A census of our source records for markers of confidential submissions (confidential business information, trade secret, "claimed as confidential", FIFRA section 10(g)) found markers in 0 of those 7,326 entries, in 0 of 1,876 compound records' source lists and in 0 of their classification rows (input stamp a2785546a2e8). This is a census of markers in our records. It does not prove that no such document was ever read.
When an API key is used, our servers record, for that key, for each API key used, the last network address (shortened by setting its last part to zero) and the time of last use, kept for 90 days. This is read from the key-handling code at build time.
4. Service levels (draft, not an agreement)
No service-level agreement text exists today and this section is not one. What is measured today: the status page shows the current health, version and last deployment of the API, and your browser re-checks it every 60 seconds. We publish no uptime percentage, response-time figure or support hours. Any service levels for a particular customer would be set in a written contract.