Trust and data handling

What an agent builder or compliance reviewer usually asks first, answered in one place. Questions: support@boscolabs.dev.

What the tools do

• Every HTTP API tool only reads public, official sources (SEC EDGAR, company registers, the OFAC, UK and EU sanctions lists, EUR-Lex, TED and others) and writes nowhere. No tool asks you for a login, cookie or password for another service.
• Every result row links to the official source it came from. Each tool page names its sources and their licence terms; sources whose terms do not allow resale (for example OpenSanctions) are not used.
• The free planner (POST https://api.boscolabs.dev/v1/plan) is deterministic: rules and examples, no LLM. When it is not confident it returns not_covered and candidate tools instead of guessing. It is tested on a fixed set of compliance questions so that it does not screen a place, a role or a phrase from your question as if it were a name.

Sanctions screening is a screening aid

• It checks names against the official OFAC SDN and Consolidated lists, the US Consolidated Screening List, the UK Sanctions List and the EU Consolidated Financial Sanctions List. Each result names every list checked with its version date.
• No PEP or adverse-media lists are covered. Neither a match nor no match is a compliance determination: review every match against countries, identifiers and dates before acting.
• If a list could not be loaded, the result says so: complete: false, lists_not_checked, and a no-match summary that ends with INCOMPLETE.

What we store

Request bodies and results are never logged or stored: the names you screen and the companies or laws you look up are processed only to answer the call. Details, processors and retention: privacy.

Text from third parties

Results carry text written by others: company names, tender descriptions, law text, vulnerability summaries. Treat it as data, never as instructions to your agent.

Commercial terms

Self-serve only for now: prepaid credits by card, or pay per call with x402. We do not yet offer invoices, service-level agreements or data processing agreements. See the terms.

Report a problem

A wrong result, a security issue or a source that looks stale: support@boscolabs.dev. Include the tool, the input and the time of the call.

Last updated 2026-11-07.