Business Risk Score

POST/v1/risk/business$1.50 per entity

AI-powered composite risk score (0–1000) for a business entity. Aggregates data from sanctions lists, SAM.gov, OIG LEIE, SEC EDGAR, adverse media, and 35+ risk factors with industry-adjusted weights. Includes entity disambiguation — each match is scored for confidence (HIGH/MEDIUM/LOW) and low-confidence matches are suppressed to reduce false positives.

Send an Idempotency-Key header to retry safely.

Request body

Field	Type	Description
namerequired	string	Legal business name max length 500
countryoptional	string	ISO-2 country code (e.g. US, GB). Improves entity disambiguation accuracy. max length 3
einoptional	string	Employer Identification Number. Strong identifier for U.S. businesses. max length 20
dunsoptional	string	D&B DUNS number. Unique 9-digit business identifier. max length 20
ueioptional	string	Unique Entity Identifier from SAM.gov. max length 20
industryoptional	string	Declared industry (e.g. 'Government Contracting'). Activates industry-specific weight profiles. max length 100
industryCodeoptional	string	SIC or NAICS code. max length 20
websiteoptional	string	Company website URL. max length 500
officersoptional	array of string	Known officers/directors — each is individually screened. max 20 items
aiModeoptional	string	Send "off" to forbid all LLM processing for this request. An account-level setting can also turn AI off; a request can never turn it back on. one of "on", "off" · default "on"
cageCodeoptional	string	CAGE code. With uei, it lets the SAM.gov federal exclusions list be matched exactly instead of by name. max length 10

Response fields

Field	Type	Description
success	boolean
data	object
data.id	string	Unique assessment ID
data.entityType	string
data.entityName	string
data.score	integer	Composite risk score
data.band	string	Risk band
data.categoryScores	array of object
data.categoryScores[].category	string
data.categoryScores[].score	integer
data.categoryScores[].factorCount	integer
data.factors	array of object
data.factors[].factorCode	string	Unique factor identifier (e.g. BIZ_SAM_DEBARMENT)
data.factors[].factorName	string
data.factors[].category	string
data.factors[].points	integer	Points contributed to score (after confidence adjustment)
data.factors[].maxPoints	integer
data.factors[].severity	string
data.factors[].description	string
data.factors[].source	string
data.factors[].sourceUrl	string
data.factors[].accusationOnly	boolean	True if this is an allegation, not a confirmed finding
data.factors[].matchConfidence	string	Entity disambiguation confidence for this match
data.factors[].confidenceScore	integer	Numeric confidence score (0–100)
data.factors[].confidenceReasons	array of string	Reasons for the confidence level
data.summary	object
data.summary.executiveSummary	string
data.summary.keyFindings	array of string
data.summary.riskNarrative	string
data.summary.mitigatingFactors	array of string
data.summary.recommendedActions	array of string
data.summary.confidence	number
data.summary.model	string
data.entityResolution	object	Entity disambiguation metadata showing how confidently the API resolved the input to real-world entities.
data.entityResolution.confidence	string	Overall entity resolution confidence based on identifiers provided
data.entityResolution.identifierCount	integer	Number of identifying fields provided
data.entityResolution.identifiersProvided	array of string	Which identifiers were supplied (e.g. country, ein, dateOfBirth)
data.entityResolution.identifiersMissing	array of string	Which recommended identifiers were not supplied
data.entityResolution.warnings	array of string	Warnings when input is too thin for reliable resolution
data.meta	object
data.meta.dataSourcesUsed	array of string
data.meta.processingTimeMs	integer
data.meta.scoredAt	string
data.meta.disclaimer	string

Fields are read from a real response captured 2026-11-04, shortened. Optional fields may be absent in other responses.

Errors

400 invalid request
401 missing or bad key
403 not in your plan
429 rate limited, see Retry-After
402 payment required
5xx retry with backoff

Error bodies and codes are described in Error codes and troubleshooting.

curl -X POST "https://api.compliancegrid.ai/v1/risk/business" \
  -H "Authorization: Bearer $CG_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Acme Widgets Ltd",
    "country": "GB",
    "aiMode": "off"
  }'

Try it in the sandbox

Runs against sandbox.api.compliancegrid.ai with your own sandbox key, which stays in this browser. Sandbox responses are mock data. Get a free key.

Sandbox key

Remember for this tab

Request body (JSON)

Example response · captured from production 2026-11-04 · shortened

{
  "success": true,
  "data": {
    "id": "risk_155017f9033d0533",
    "entityType": "BUSINESS",
    "entityName": "Acme Widgets Ltd",
    "score": 0,
    "band": "LOW",
    "version": "1.0",
    "categoryScores": [],
    "factors": [],
    "summary": {
      "executiveSummary": "No significant risk factors identified for \"Acme Widgets Ltd\" based on available government data sources.",
      "keyFindings": [],
      "riskNarrative": "Rule-based risk assessment completed using 12 data sources. No risk factors triggered. WARNING: Entity resolution confidence is LOW.",
      "mitigatingFactors": [
        "No adverse findings in searched databases"
      ],
      "recommendedActions": [
        "Standard due diligence sufficient based on current findings",
        "Provide additional identifying information to improve entity resolution confidence"
      ],
      "confidence": 0.5,
      "model": "compliance-grid-risk-scoring-model"
    },
    "bandExplanation": {
      "band": "LOW",
      "label": "Low Risk (0–200)",
      "description": "No significant risk indicators were identified across sanctions lists, regulatory databases, or public records. The entity appears to pose minimal compliance risk based on available data.",
      "actionRequired": "Standard due diligence is sufficient. No enhanced measures required based on current findings.",
      "nextSteps": [
        "Document this risk assessment for your compliance records.",
        "Schedule periodic re-screening per your risk-based approach (e.g., annually)."
      ]
    },
    "entityResolution": {
      "confidence": "LOW",
      "confidenceReasons": [
        "Only the business name was provided — no corroborating identifiers.",
        "No address provided. Businesses with the same name may exist in multiple states or cities."
      ],
      "inputCompleteness": 6,
      "identifierCount": 1,
      "identifiersProvided": [
        "country"
      ],
      "identifiersMissing": [
        "ein",
        "duns"
      ],
      "warnings": [
        "Low entity resolution confidence: only business name provided. Add country and at least one unique identifier (EIN, DUNS, UEI, LEI, or tax ID) for more accurate screening results.",
        "Name-only screening may return false positives from sanctions and watchlist databases. Matches should be independently verified."
      ],
      "suggestedFields": [
        {
          "field": "ein",
          "reason": "US Employer Identification Number. Uniquely identifies a US business for IRS purposes.",
          "example": "\"12-3456789\""
        },
        {
          "field": "duns",
          "reason": "Dun & Bradstreet 9-digit number. Globally unique business identifier used in government contracting.",
          "example": "\"123456789\""
        }
      ]
    },
    "meta": {
      "entityIdentifiers": {
        "country": "GB"
      },
      "industryInferred": false,
      "dataSourcesUsed": [
        "ComplianceGrid CSL (OFAC/BIS/UN/EU)",
        "SAM.gov via ComplianceGrid"
      ],
      "unavailableSources": [
        "OSHA inspections (only news-release citations are loaded; full inspection data is not)",
        "GDELT Project (adverse media)"
      ],
      "processingTimeMs": 7695,
      "scoredAt": "2026-11-04T09:01:19.266Z",
      "modelVersion": "compliance-grid-risk-scoring-model-v1.0",
      "disclaimer": "This risk score is for informational purposes only and does not constitute legal advice. It is based on publicly available data and AI analysis. All accusation-based factors are clearly flagged. Verify findings indepe…",
      "listVersion": "58f4d6155f88d413",
      "listRetrievedAt": "2026-11-03T10:30:35.601Z",
      "screeningId": "cmw1w0ftv00mr2lrcq86mudac"
    }
  },
  "warnings": [
    "Low entity resolution confidence: only business name provided. Add country and at least one unique identifier (EIN, DUNS, UEI, LEI, or tax ID) for more accurate screening results.",
    "Name-only screening may return false positives from sanctions and watchlist databases. Matches should be independently verified."
  ],
  "recommendedFields": {
    "message": "Provide these fields for more accurate entity resolution",
    "inputCompleteness": 6,
    "missing": [
      "ein",
      "duns"
    ],
    "suggestedFields": [
      {
        "field": "ein",
        "reason": "US Employer Identification Number. Uniquely identifies a US business for IRS purposes.",
        "example": "\"12-3456789\""
      },
      {
        "field": "duns",
        "reason": "Dun & Bradstreet 9-digit number. Globally unique business identifier used in government contracting.",
        "example": "\"123456789\""
      }
    ],
    "minimumRecommended": [
      "name",
      "country"
    ]
  },
  "meta": {
    "dataSource": {
      "name": "ComplianceGrid",
      "provenance": "computed"
    }
  }
}