How EntryProof scores a product page — and what it does not do

1. What EntryProof is

Most “compliance tools” sell a broker workflow, a lab marketplace, or a promise that someone else will file. EntryProof sells a narrower job: tell you whether a public product page shows the obvious CPSC eFiling readiness signals under the Product Registry rule that went mandatory Jul 8, 2026 (16 CFR Part 1110), then offer Solo if you want that check across your catalog, plus one recurring job: once a day we read CPSC's SaferProducts recall feed and flag the enrolled products that look like they could be involved, ranked by how strong the match is.

We are not a customs broker, not a CPSC-accepted laboratory, and not counsel. We do not publish fake filing counts. Support is support@enforceintel.com only — the live EntryProof host inbox, not a retired brand mailbox.

Two message sets carry certificate data into ACE, and we transmit neither. The Full PGA Message Set carries seven certificate data elements at entry: product ID, citation codes, manufacture date, manufacture place, product test date, testing laboratory, and point of contact. The Reference PGA Message Set carries three certificate identifiers — certifier ID, product ID, version ID — pointing at data you pre-entered in the CPSC Product Registry, which importers can self-register for without a broker license. Either way the entry is transmitted through ACE under a filer code: your broker's, or your own if you self-file. EntryProof holds no ABI filer code, so we could not file for you even if you asked. If you have read that CPSC eFiling requires “16 elements”, that number is wrong — it confuses the element count with “16 CFR”, the title of the regulations, which is not a count of anything.

2. What the free readiness check looks at

You paste a product page URL (not a store homepage) and, when you have it, an HTS code. Our server fetches that URL's public HTML and runs a deterministic ruleset against it. Same HTML in, same findings out. No LLM is called. The current detectors look for:

• Age-grading — “Ages 3+”, “for children under 12”, ASTM F963 references, schema.org targetAge.
• CPSC-accepted testing lab names — SGS, Bureau Veritas, Intertek, TÜV, UL / Underwriters Laboratories, Eurofins, ETL, CSA, plus generic “CPSC-accepted lab” phrases.
• Manufacturer / country of origin / address — “Made in …”, “Manufactured by …”, schema.org Organization address blocks, “Imported by”, “Distributed by”.
• Certificate or CFR / ASTM citation — CPC, GCC, 16 CFR § references, ASTM F standards, CPSIA, tracking labels, batch/lot numbers. Fabricated CFR part numbers (parts CPSC has never occupied) do not count as a hit.
• California Proposition 65 warning — not a CPSC signal, but a compliance-awareness marker we record separately.

If you supply a valid 4/6/8/10-digit HTS, we run it against 20 cited CPSIA rules (Section 5). If you leave HTS blank, we may guess a coarse keyword match from the URL — labeled as an estimate, not a classification. The HTS-specific rule grid needs a real code.

Score = base 40 + up to 25 for HTML signals + up to 30 for applicable v0.7 rules + 8 for a well-formed HTS (or −5 if malformed) − 5 per critical missing signal on children's-product HTS profiles. Clamped 0–100. Same canonical URL + same HTS + same detected signals ⇒ same score. A higher number means fewer of those public signals were missing. It is a gap index, not a clearance percentage.

3. What the free check does not cover

• Does not authenticate to the CPSC Product Registry, ACE, or a broker account.
• Does not file, transmit a PGA message set, or certify a filing as compliant.
• Does not generate a GCC or CPC, replace counsel, or replace third-party lab testing.
• Does not prove a cited lab is currently CPSC-accepted for that specific test.
• Does not prove the cited standard is the correct one for the SKU (false-negative mode we disclose).
• Does not cover FDA, USDA, EPA, or ATF PGA message sets.
• Does not cover country-of-origin duty, USMCA, or Section 232/301 — see TariffWatch.
• One requested URL, one HTML body, 8-second timeout, 2 MB cap. Private / loopback / link-local / cloud-metadata hosts are rejected (SSRF hardening).

A green-looking score means the public signals we know how to see look present on that page. Only your broker, the Registry, and a real test report confirm a filing will pass. We say that on the checker UI too — not only here.

4. How a check actually runs

1. Canonicalize. Force https, lowercase host, strip www., drop tracking params. allbirds.com and www.allbirds.com/?utm_source=emailshare one cache row and one score.
2. Fetch. Server-side safeFetch (never from shoppers' browsers). Failures return a real error — we never invent a score for an unreachable URL. Successful fetches cache 24 hours in cpsc_efile.scan_signal_cache.
3. Detect + score. Five HTML detectors, then the v0.7 rule engine when HTS matches. Gaps shown in the result are derived from signals actually present or missing on that page, plus HTS-input facts. Separate advisories (e.g. “CPC status unknown”) are general checklist items, not claims we saw a missing PDF in your broker packet.

The same fetch + score pair is what the landing checker and /cpsc-efile/checker use. Paid Solo does not secretly switch to a different, deeper crawler that reads ACE.

5. Rules the scanner applies

v0.7 real-rule engine (20 rules): each cites a CFR we verified against eCFR. Badge reads v0.5-partial (1–4 matches) or v0.7-substantial (5+). When nothing matches, Foxtrot7's EP-H01–H07 heuristic checklist still runs as a sanity pass (malformed HTS, unregulated chapter, missing age-grade / citation / manufacturer / lab / tracking-label language).

• R1 Total-lead limits — 16 CFR § 1303
• R2 Small parts (under-3 choking) — 16 CFR § 1501
• R3 Drawstrings in children's upper outerwear — 16 CFR § 1120
• R4 Magnet ingestion — 16 CFR § 1262
• R5 Phthalate limits (CPSIA § 108) — 16 CFR § 1307
• R6 Cadmium in children's jewelry (ASTM F2923) — via 16 CFR § 1250
• R7 Children's sleepwear flammability — 16 CFR §§ 1615 / 1616
• R8 Bicycle helmets — 16 CFR § 1203
• R9 Toy safety (ASTM F963) — 16 CFR § 1250
• R10 Full-size baby cribs — 16 CFR § 1219
• R11 Art & craft materials labeling (LHAMA) — 16 CFR § 1500.14(b)(8)
• R12 Toy chest lid supports (ASTM F963 §4.30, provisional) — via 16 CFR § 1250
• R13 Poison Prevention Packaging — 16 CFR § 1700
• R14 Full-size play yards — 16 CFR § 1221
• R15 Bunk beds — 16 CFR §§ 1513 / 1213
• R16 VGB pool & spa drain covers — 16 CFR § 1450
• R17 Infant walker safety (ASTM F977) — 16 CFR § 1216
• R18 Decorative attachments on children's socks (provisional) — 16 CFR § 1120
• R19 Children's jewelry small parts / use-and-abuse — 16 CFR §§ 1500.50–.53
• R20 Youth ATV safety (ANSI/SVIA-1) — 16 CFR § 1420

Primary sources for the engine: 16 CFR Part 1110, the CPSC Business Guidance library, USITC HTS, and CBP ACE PGA documentation. The M1 target on the roadmap is ~30 real rules. We are not claiming M1 from a v0.7 scanner.

6. Soft paywall and fail-open

Free checks are budgeted in this browser's localStorage (3 checks, +2 if you leave an email, then a ~24h cooldown). When the budget is used, we ask you to start Solo or come back later. We do not hard-lock the product, invent a countdown of remaining seats, or call the next check “premium locked.” If storage is missing (private mode), the gate fails open so you can still check. That is a soft limit — not a hard lock.

EntryProof Solo -- $79/mo: $79/mo, 14-day trial, readiness checks for your catalog plus daily CPSC recall matching on up to 25 enrolled products. Larger catalogs are Growth ($199/mo, no trial), never Solo at the Solo price. Solo bills monthly only: there is no annual Solo price and no prepaid Solo year, so no door on this site can turn $79/mo into a yearly charge. The soft-paywall CTA deep-links Solo checkout at /cpsc-efile?checkout=solo. Not a fake flash sale.

7. What we will not claim on this page

• Not legal advice.
• Does not file for you. No ABI filer code, no Full or Reference PGA transmission.
• Does not issue or certify anything — no GCC, no CPC, no lab accreditation.
• Does not replace counsel, lab testing, or a GCC/CPC you actually maintain.
• No CPSC or CBP clearance guarantee.
• No customs-broker license and no invented partner badge.

The dedicated liability list — not a scan how-to — lives on what we don't do.

EntryProof is a data preparation and readiness-assessment tool for the CPSC Product Registry. EntryProof is NOT a customs broker, NOT a testing laboratory, and NOT a legal-advice service. Compliance decisions remain the responsibility of the importer. EntryProof does not guarantee that any classification, packet, or filing will be accepted by CPSC or CBP.

Privacy basics: we store the URL and HTS you scanned and the signal findings; a hashed IP for abuse control; email if you give it; Stripe if you subscribe. Scan rows are kept 30 days. Privacy · Cookies · FAQ · What we don't do · Terms.

EntryProof home · FAQ · Solo · What we don't do · Docs · Glossary · Portfolio methodology