Supplier Compliance Screen

Supplier Compliance Screen is a public Apify Actor that checks up to three US company names against public openFDA enforcement and EPA ECHO facility records. It writes one dataset row per company only when every requested FDA and EPA lookup for that company validates. Companies with a failed lookup are not written to the dataset; their partial findings and errors are stored in the run's Key-Value Store (see below). Each match links to the official source.

Independent product disclaimer: Supplier Compliance Screen is an independent product and is not affiliated with, endorsed by, or sponsored by the US Food and Drug Administration (FDA) or the US Environmental Protection Agency (EPA). Agency names are used only to identify public data sources.

This is an approximate name search for research support. A match does not establish wrongdoing; verify every record with the source agency before acting. Results are not legal, regulatory, or compliance advice.

Input

{
  "companies": ["Tyson Foods", "Blue Bell Creameries", "Johnson & Johnson"],
  "companyStates": ["AR", "TX", "NJ"],
  "sources": ["fda", "epa"],
  "lookbackYears": 5,
  "maxMatchesPerCompany": 10
}

• companies: 1–3 non-empty company names; at most one dataset row per unique name, written only if that company's lookups validate.
• state: optional global two-letter state abbreviation for EPA ECHO.
• companyStates: optional state list aligned by index with companies; each provided state overrides the global state for that company.
• sources: fda, epa, or both. Defaults to both.
• lookbackYears: FDA date window, from 1 to 10 years. EPA results use the agency's current summary window.
• maxMatchesPerCompany: FDA result cap across food, drug, and device endpoints, from 1 to 10. EPA facility rows are capped at 10.

Output

Each successful dataset item includes company, query, fda.recalls, epa.facilities, riskScore (0–100), riskBasis, sourcesChecked, fetchedAt, errors (empty), and a disclaimer. A score is a transparent count-based signal, not a legal or compliance conclusion. FDA returns enforcement records; EPA fields are ECHO facility indicators.

If any requested FDA or EPA lookup fails after retries, that company's partial findings and errors are saved immediately in the run's default Key-Value Store under a per-company key such as FAILED_LOOKUPS_1 (JSON). They are omitted from the default dataset because the current PPE configuration automatically charges for each default dataset item. The run log identifies affected companies and points to their records. This keeps failed lookups inspectable without charging the per-item event; it also means consumers that only read the default dataset will not see partial rows.

Billing regression check

Run npm test in this directory (no Apify cloud run): regression tests verify an all-success company writes exactly one default dataset item; a failed company writes its complete partial result and error to its own FAILED_LOOKUPS_{n} KVS key without adding a default dataset item; and multiple companies are handled independently. Before release, review a free or explicitly authorized cloud run only if the account can run it without PPE charges; otherwise validate after the event configuration and code have been approved together.

Sources and operating behavior

• FDA: https://api.fda.gov/{food,drug,device}/enforcement.json (official, keyless API; terms: https://open.fda.gov/terms/).
• EPA: https://echodata.epa.gov/echo/echo_rest_services.get_facilities (official ECHO search service).
• The Actor makes sequential requests, waits between source calls and companies, retries throttling/server errors with backoff, uses no proxy, and limits each run to three companies.
• EPA name search uses ECHO's p_fn facility-name parameter, state filter, and a small response set. The API's returned facility rows may not correspond to the corporate parent.

Run locally

Requires Node.js 20+ and the Apify CLI.

npm install
apify run

INPUT.json contains a small three-company sample. The Actor uses public endpoints only and does not evade CAPTCHA, WAF, or access controls.

Test input

The three sample names from the candidate brief are Tyson Foods (AR), Blue Bell Creameries (TX), and Johnson & Johnson (NJ); companyStates applies their individual state filters by list order in the bundled input.

Scope

The Actor screens public records for research support. It does not make compliance determinations, verify corporate identity, or replace review of the linked agency records. Pricing and run limits are shown on the Apify Store listing and may change.