Skip to content

StephenAbbott/opencheck

Repository files navigation

image

OpenCheck

Customer due diligence risk checks powered by the Legal Entity Identifier (LEI), open data and open standards - including the Beneficial Ownership Data Standard (BODS).

Try the demo at https://opencheck.world/

What is OpenCheck?

You paste in a Legal Entity Identifier. OpenCheck queries GLEIF first, derives every cross-source identifier it can (UK Companies House number, Norwegian organisation number, Irish company registration number, Finnish Y-tunnus, Latvian registration number, Lithuanian entity code, Estonian registry code, Czech IČO, Polish KRS number, Austrian Firmenbuchnummer, Slovak IČO, French SIREN, Dutch KvK number, Swedish organisation number, Swiss UID, Canadian corporation number, Belgian enterprise number, Danish CVR number, Croatian MBS, Maltese registration number, Brazilian CNPJ, New Zealand company number, Australian ACN/ABN, OpenCorporates ID, Wikidata Q-ID, and more), and uses those bridges to fan out across 32 national and international corporate data sources.

Everything maps into BODS v0.4. Cross-source links and risk signals are computed deterministically, and the whole bundle is one click away from a downloadable export (JSON / JSONL / XML / ZIP, plus Senzing JSON entity records for entity resolution).

The risk-signal layer mirrors the EU AMLA draft customer due diligence regulatory technical standards conditions for "complex corporate structures" — trust/arrangement, non-EU jurisdiction, nominee, ≥3 ownership layers, plus the composite threshold rule and an advisory mirror of the subjective obfuscation condition.

Status

Latest: Phase 67 — FullCheck mode (enhanced due diligence)

A QuickCheck/FullCheck mode toggle on the results page. QuickCheck stays the fast subject screening; FullCheck maps and screens the wider corporate network connected to the entity, all behind the toggle.

  1. Eager network build. "Run FullCheck" expands a single unified ownership graph to a visible depth budget (a client-side loop over /expand-layer — no new backend), with progress + cancel.
  2. Risk-first. Each expansion hop already screens the entity, so the network's risk signals are surfaced and overlaid on the graph, with a QuickCheck-vs-FullCheck diff ("FullCheck surfaced N more signals across the network").
  3. Export the network. POST /export-network takes the assembled network away as BODS / Senzing JSON / Neo4j-Cypher, or a ZIP bundling all of them + manifest + licences.

Previous: Phase 66 — Senzing JSON as an export format

Full development history

Quick start

The backend ships with cache-first dispatch: in stub mode (no API keys, no OPENCHECK_ALLOW_LIVE) every adapter returns deterministic placeholder data. Live mode is opt-in per source via env vars.

Docker

cp .env.example .env
docker compose up --build

Local (without Docker)

Backend:

cd backend
uv sync
uv run uvicorn opencheck.app:app --reload --port 8000

Frontend:

cd frontend
npm install
npm run dev

The BOVS icons and country-flag SVGs are committed under frontend/public/, so the dev server needs no extra build step.

Documentation

Page Contents
How it works Step-by-step lookup flow, per-adapter detail, Open Ownership BODS bundles, API surface, project structure
Sources Full adapter table — active sources plus inactive bulk-only adapters, license, entry point, description
Risk signals All signal codes: source-derived, AMLA CDD RTS, FATF jurisdiction, state-controlled/SOE, cross-source name match, ICIJ Offshore Leaks
Subsidiary network Lazy GLEIF Level-2 reveal — direct + ultimate children mapped to BODS, graph (small) or table + export (large)
Configuration Environment variables, Render deployment, running the test suite
Development history All phases

Licensing

OpenCheck's own code is MIT-licensed. Data retrieved from third-party sources is licensed under each source's own terms — see ATTRIBUTIONS.md. Downloaded exports include a LICENSES.md listing every source that contributed data, with re-use guidance for the most-restrictive licence in the bundle.

The frontend renders ownership graphs with Cytoscape.js (MIT). It re-uses the Beneficial Ownership Visualisation System design tokens (CC BY 4.0) and the BOVS entity/person icons and country-flag SVGs from Open Ownership's visualisation library (Apache 2.0) — both © Open Ownership. The committed assets live under frontend/public/bods-dagre-images/, a directory name retained from their original source.

Roadmap

  • Live opentender.eu integration — the adapter is wired but live_available=False for now.
  • A "complex offshore" demo subject that fires every AMLA chip simultaneously.
  • BODS RDF / SPARQL backbone via Oxigraph — load the assembled BODS bundle into a triple store, expose /sparql for the published Open Ownership red-flag queries.

Open issues and discussion live in the GitHub repo.

Related projects

About

Customer due diligence checks powered by the Legal Entity Identifier, open corporate data and open standards including the Beneficial Ownership Data Standard

Topics

Resources

License

Stars

Watchers

Forks

Packages

 
 
 

Contributors