Air8  Compliance Intelligence
Capability & Output Brief

The regulation is public. Knowing it lands on your product is the work.

Our compliance knowledge base scopes the rules that actually bind one factory, one product, one market — reads them without the usual misreadings, proves them against the documents on file, and keeps itself current as the law moves. Six readers take six different outputs out of the same assessment.

Scope router — worked example (anonymised)
SupplierCN·JS-01
ProductHS 9505 — festive décor
OriginChina
DestinationEU + US
Buyer profileUS club retailer
Resolved →
REACH SVHC GPSR EU AR UFLPA CA Prop 65 Buyer RSL PPWR packaging
6 frameworks in scope·4 with no evidence on file·confidence 72% — no BOM held
01 Scope · Method

Which rules actually apply?

Three inputs decide the obligation set. Change any one of them and it changes completely — which is why a generic compliance checklist is worth very little.

Input 1

Product type

  • 9505 Festive décor → REACH, GPSR
  • 6204 Apparel → + PFAS, azo dyes
  • 9405 Electrical lighting → + CE, RoHS
  • 9503 Toys → + EN 71, tighter phthalates
Input 2

Destination market

  • EU only → REACH + GPSR + PPWR
  • US only → CPSC + Prop 65 + UFLPA
  • Both → dual stack; one submission has to satisfy EN and ASTM
Input 3

Trigger conditions

  • China origin → UFLPA presumption
  • Non-EU factory → EU representative required
  • Electrical parts → CE + RoHS
  • Children's use → tighter thresholds

From three inputs to an addressed ruleset

L1 Scope router

Reads product, market and triggers. Holds no rules itself.

L1-compliance-scope.md
Rule addresses

Returns the exact L2 sections to open — nothing more.

§SVHC§GPSR§UFLPA
L2 Rule book

Opens only those sections: thresholds, dates, exemptions, enforcement precedent.

Assessment

CN·JS-01 — festive décor, CN → EU + US.

6 in scope4 unproven

Why the two layers stay separate

L1 is the index; L2 is the rule book. Updating a threshold cannot break the routing, and adding a route cannot corrupt a rule — which is also what makes expansion cheap (05).

02 Reading · Method

How a rule gets read without being misread

Four checks, in this order. Getting any one of them wrong changes the answer — not just the wording.

  • 1

    Classify the product first

    A decorative item with LED lights is not HS 9505 — it is HS 9405. That one reclassification swaps general product safety for electrical safety: different testing, different marking. Everything downstream inherits it.

  • 2

    Separate process use from presence in the article

    "The factory used n-hexane" is not "the article contains n-hexane" — most of it evaporates during coating. The obligation attaches to residual content in the finished article, which only a residual test settles.

  • 3

    Use the right denominator, then check exemptions

    The 0.1% SVHC threshold is measured on total finished-article weight, not per coating or component. Read against the wrong denominator, a compliant article looks like a violation — or the reverse.

  • 4

    Name the entity that carries the obligation

    Under REACH the EU importer owes the SCIP notification, not the factory. But if the factory withholds the data, that liability returns as a cost claim under the supply contract.

Four misreadings we correct on sight

"The PFAS restriction hits our decorative items."
Scoped to apparel and footwear. Decorative hardgoods sit outside it — a test cycle avoided.
"We don't add n-hexane, so we're fine."
If it is used as a solvent anywhere on the line, only a residual test proves the article is under 0.1%.
"An EU representative is too expensive."
A few hundred euros a year — administrative overhead, not a barrier.
"China origin means UFLPA blocks us."
It is a rebuttable presumption. Chain-of-custody evidence clears it; origin alone stops nothing.
03 Evidence · Method

What we hold, and what has to be asked for

Knowing the rule is not the same as being able to prove it. Naming that boundary turns a blanket document request into four specific asks with a named holder and a deadline.

On file ~Partial — held for some clients Has to come from the factory

In our own records

Factory name + countryFixes jurisdiction, UFLPA scope, and whether an EU representative is required.
Facility size + buyer concentrationSizes the exposure, and pulls in that buyer's own restricted-substance list.
Social audit reportsBSCI / SMETA where Air8 commissioned the audit — rating, date, corrective actions.
~
Third-party test reportsHeld for a number of clients from onboarding and field survey. Coverage is uneven and reports expire — currency has to be checked per shipment, not assumed.
~
Bill of materialsPartial, via group trade records. The single field that most raises SVHC screening confidence.

Only the factory has it

Safety data sheetsComposition of the raw materials. Without them SVHC presence is inferred at category level only.
SVHC declarationFactory self-declaration — worth nothing unless it post-dates the latest candidate-list update.
EU representative appointment letterRequired of every non-EU manufacturer selling into the EU since December 2024.
Tier 2–3 traceabilitySub-tier chain of custody for cotton, polysilicon and similar inputs — the evidence that rebuts a UFLPA presumption.

What the map is for

Every ✕ becomes one line in the data request: which document, who issues it, which framework it closes, by when. Until it arrives the assessment runs on a worst case and says so — a stated confidence, never a silent guess.

04 Currency · Upkeep

How it stays current

Three tiers of signal: what the law says, what is actually being stopped, and what is coming. Most teams run only the first.

1

Law — primary sources Weekly sweep

ECHA candidate list · EUR-Lex · DHS UFLPA entity list · CPSC.gov · OEHHA Prop 65
2

Enforcement — where the judgment is On every alert

EU Safety Gate · SGS Safeguards · CIRS Group · Eurofins · TÜV SÜD briefs
The tier most teams skip. It shows what is being stopped in practice, not what the text forbids — a category recurring in Safety Gate is a live warning for every supplier we finance in it.
3

Early warning — 6 to 12 months out Continuous watch

ECHA intention registry · EU consultation portal · AAFA / AHFA alerts
Buys a testing cycle instead of a scramble — and it is the only window in which a restriction can still be designed around.

From signal to client action

01 · CaptureSignal logged

Source, date, tier, raw text kept verbatim.

02 · ClassifyLaw, enforcement or early

Sets urgency and who needs to hear it.

03 · MapWhich L2 sections move

Threshold, date or exemption edited, version stamped.

04 · Re-scopeWhich clients are hit

L1 runs in reverse across the book.

05 · ActNotice + document request

Named client, named document, named deadline.

The distinction that causes most of the damage

Enters into force is not shall apply from. GPSR entered into force June 2023 and applied from December 2024 — an eighteen-month gap. In the worked example CN·JS-01 has shipped without an EU representative for over a year and a half, because the two dates were read as one. L2 records both; the router keys off the second.

05 Growth · Upkeep

How coverage keeps expanding

Three axes, one intake path. Because the index and the rule book are separate, new coverage never re-opens settled rules.

Axis 1

New product category

A category we already finance but cannot yet scope — footwear, small appliances, furniture. Entry point is always the HS code.

Cost: one L1 route + the L2 sections it addresses. Existing routes untouched.
Axis 2

New destination market

UK, Japan, Canada, Gulf states — each with its own authority, local-representative rule and accepted proof format.

Cost: one market column, plus that market's sources added to tier 1.
Axis 3

New buyer requirement set

Large retailers run restricted-substance lists stricter than law. Passing the regulation and failing the buyer's list still costs the order.

Cost: one buyer profile in L2, keyed to buyer concentration we can already see.

What triggers a build

  • Portfolio exposure first. A category or market we already finance outranks one that is merely interesting.
  • An enforcement case we could not classify. Tier 2 surfaced it; the KB had no answer.
  • A question the agent declined. Logged every time, then read as a build queue.
  • A tier 3 signal firming up. We build before it applies, not after.

What a build must satisfy to publish

  • A primary source cited — regulator or official journal, never a secondary summary alone.
  • Both dates recorded separately — in force, and applies from.
  • Thresholds with their denominator — the number means nothing without it.
  • Evidence type named — which document proves it, and who issues it.
  • Back-filled and versioned — past assessments the rule would have changed are re-scored, and any assessment can be replayed against the rule text as it stood that day.
06 Gaps · Upkeep

How we audit our own blind spots

A knowledge base that never reports a gap is unaudited, not complete. Two kinds exist, detected differently, each with its own closing discipline.

Knowledge gap

The rule is not in the KB. We cannot judge the situation at all.
Detected byAn enforcement case we cannot classify · a question the agent declines · a rising override rate on its output.
Closed byAuthoritative source → draft → expert review → back-fill affected assessments → publish with version and effective date.

Data gap

The rule is known; the document needed to test it against this supplier is missing.
Detected byEvery assessment line resolving to "cannot determine because…" — counted, not swallowed.
Closed byName the holder → request with a deadline → if unmet, worst case and lower stated confidence → on arrival, re-score.

Both appeared in the worked example

Knowledge: PFAS confirmed as scoped to clothing, not decorative hardgoods — two hours' work that removed a testing requirement from the supplier.

Data: no BOM on file for CN·JS-01, so SVHC sits at category level. Stated confidence 72%, and it moves the moment the BOM lands.

07 Output

One assessment, six readers

The value is not the knowledge base — it is what each reader decides differently because of it. Same rules, same evidence, same confidence score; six renderings.

Air8 · Portfolio

Exposure surfaces before the chargeback does

AsksWhich financed suppliers carry live compliance exposure, and how big?
GetsSupplier × framework × evidence status × confidence, sorted by amount at risk.
ChangesWhich files carry a pre-disbursement condition, and which re-score automatically when a list updates.
Portfolio risk table
Air8 · BD & RM

A first meeting that isn't about the rate

AsksWhat can I tell this factory that its bank cannot?
GetsA one-page obligation snapshot from HS code, origin and destination alone — with the gaps most likely open.
ChangesOpens on their risk instead of our pricing, and puts the document list on the table pre-onboarding.
One-page snapshot
Air8 · Risk & Credit

Compliance stated as a repayment risk

AsksDoes this gap actually translate into a chance of not being repaid?
GetsCredit-memo language: the detention or chargeback path, exposure, evidence held, confidence.
ChangesLimit, tenor or a condition precedent — instead of "compliance risk noted", which changes nothing.
Credit-memo language
Supplier · Factory

Keep this order, then next season's

AsksWhich rules apply to me, what changed, what do I do first?
GetsAn ordered action list — document, issuer, lab, cost band, deadline — and what non-compliance costs.
ChangesWhat gets tested and declared before shipment, rather than discovered at the border.
Sequenced action list
Buyer · Merchandiser

Source it compliant the first time

AsksWhich of these suppliers can ship into my market — and still can next quarter?
GetsStatus by product category, the import document pack, and an expiry watch on audits and test reports.
ChangesWhich supplier wins the order, and what the PO requires on acceptance.
Sourcing filter + doc pack
Funder · Credit insurer

Evidence where an assurance used to go

AsksIs the underlying trade lawful and shippable — and what backs that claim?
GetsA per-transaction evidence index: framework, document, issuer, date, remaining gaps stated openly.
ChangesWhether the receivable is accepted into the facility, and on what terms.
Evidence index

One knowledge base, six outputs

The intelligence layer is shared and versioned; only the rendering differs. The assessment is written once and read six ways — a risk flag, an opener, memo language, a roadmap, a sourcing filter, an evidence index.