Skip to content
1,322,867 nurse-staffing records · CMS PBJ
fonteum
DataAPIRisk SignalsResearchCompareSnapshotsRequest access →

Compliance posture

Methodology · Corrections log · Editorial policy

fonteum

Product

  • Data
  • API
  • Methodology
  • Sources
  • Freshness
  • Citations

For buyers

  • AI agents
  • RAG developers
  • Compliance
  • Researchers
  • Developers

Reference

  • Compare
  • llms.txt
  • Agent card
  • Audit pack
  • Quality scorecard
  • Pilot intake
  • Research

Sourced from federal agencies. Fonteum, Inc., Delaware C-corp. © 2026.

Request access→
Integrity attestations

Every snapshot, hashed. Re-hash it yourself.

Every dated snapshot Fonteum publishes is SHA-256 hashed and attested at write time. Re-fetch the upstream source archive, run shasum -a 256, and compare to the hash on file at /verify/[snapshot_id]. A 64-character match means the bytes you read are byte-exact to what we ingested.

10 attestations on file across 10 source families. Foundation layer for the Certificate-Transparency-style attestation chain — hashes ship first, chain semantics layer on top once 30+ snapshots have accumulated.

How to re-hash a snapshot →

Security & compliance

What we run on, and what we hold.

SOC 2
Type 1 audit in progress, target September 2026.
Infrastructure
Hosted on Vercel (edge network). Data warehouse: Supabase (PostgreSQL). All data at rest encrypted. All data in transit TLS 1.2+.
Data scope
Public-domain federal regulatory records only. No PHI. No PII beyond what appears in federal public records. No BAA required.
Snapshot integrity
Every ingestion run produces a SHA-256 hash stored in snapshot_attestations. Verify any snapshot at /verify/[id].
Security contact
Recent attestations

10 attestations on file across 10 source families.

cms_care_compare_nh 1 attestation

  • 2026-05-31·attested 2026-05-31·0 B·SHA-256
    36a1f855…09ae1dfaattestation →source archive ↗

cms_pos_facilities 1 attestation

  • 2026-05-31·attested 2026-05-31
Open & attested

Live FHIR R4 API, a public SHA-256 attestation chain, and an open methodology — every Fonteum value is traceable to its federal source. The hashes above are how a verifier proves it.

FHIR R4 API
US Core 6.1.0
live · /api/fhir
Attestation chain
SHA-256 signed
public · /chain
Methodology
version v2026.05.0
public · /methodology
Provenance
14-tuple per field
source · date · confidence
Source registry
22 federal families
all primary-source · /sources
security@fonteum.com
·
66.6 KB
·
SHA-256
4dc50d0a…f72255bcattestation →source archive ↗

cms_qpp_mips_individual 1 attestation

  • 2026-05-31·attested 2026-05-31·466.0 KB·SHA-256
    96507db7…d9f4b769attestation →source archive ↗

cms-inpatient-utilization 1 attestation

  • 2026-05-31·attested 2026-05-31·1.2 KB·SHA-256
    f55bb4f3…136033a0attestation →source archive ↗

cms-outpatient-utilization 1 attestation

  • 2026-05-31·attested 2026-05-31·1.2 KB·SHA-256
    f55bb4f3…136033a0attestation →source archive ↗

cms-provider-utilization 1 attestation

  • 2026-05-31·attested 2026-05-31·1.2 KB·SHA-256
    f55bb4f3…136033a0attestation →source archive ↗

nppes 1 attestation

  • 2026-05-31·attested 2026-05-31·0 B·SHA-256
    7ad6fbf9…6349f577attestation →source archive ↗

oig_leie 1 attestation

  • 2026-05-31·attested 2026-05-31·66.5 KB·SHA-256
    f2192873…b710efd7attestation →source archive ↗

pecos_ppef 1 attestation

  • 2026-05-31·attested 2026-05-31·0 B·SHA-256
    7388b25a…5f5b5ee8attestation →source archive ↗

source_manifest 1 attestation

  • 2026-05-31·attested 2026-05-31·12 B·SHA-256
    b4940b24…c32c37ebattestation →source archive ↗