Skip to content

Enterprise

Jump to bottom
mrdulasolutions edited this page Jun 15, 2026 · 2 revisions

ExChek Enterprise

ExChek's core is free and always will be: classification analysis, jurisdiction and ECCN determination, eCFR regulatory data, restricted-party screening, red-flag assessment, and the local audit-ready Word report — all of it runs on your machine, none of it requires a key or an account.

ExChek Enterprise is the paid layer on top: finished, branded compliance documents rendered by the ExChek API, plus a compliance dashboard that compounds as your AI works. You pay for the deliverable, never for the thinking — the analysis behind an Enterprise memo is the exact same analysis the free flow produces.

The Official Classification Memorandum (PDF) — $1 per report

The flagship Enterprise document: a branded, audit-ready ~28-page classification memorandum with native pagination, a document-control block, an executive summary with risk posture, the full Order-of-Review analysis (Steps 1–6, including the "specially designed" catch/release), encryption/software analysis, license determination, screening and red-flag tables, AI-usage and regulatory-currency disclosures, and a reviewer certification page.

It is the same analysis the free flow produces — rendered as the document an enterprise compliance program (or a regulator) expects to see. The free local Word report remains Option 1 and the default in ECCN Classification; the Memorandum PDF is Option 2, offered at report time.
Price $1.00 per rendered document — flat rate, prepaid credits, no subscription, no base fee
What you get A ~28-page branded PDF, delivered as a 1-hour download link (see below)
Same analysis Identical determination logic to the free local Word report — Enterprise renders it as a finished, audit-ready document
In-skill exchek-classify offers this as Option 2 at report time; the free local Word report stays Option 1 and the default. See Document Converter

Draft → review → finalize

Renders follow a deliberate three-step protocol so you never pay for a memo you haven't approved:

  1. Draft. Render with draft: true (REST: ?draft=1) for a free watermarked preview — no credit consumed, nothing stored.
  2. Review. Read the draft, correct the inputs, re-draft as many times as you like — still free.
  3. Finalize. Render once without the draft flag, after you explicitly approve. Only this approved final render consumes a credit. Failed validation and service errors are never charged.

Link-only delivery

The PDF is never embedded in the response — binary blobs are unreliable across Claude surfaces. Every render returns a 1-hour download link in the response text (and in structuredContent.download_url):

  • On claude.ai / Claude Desktop, click the link to download.
  • On Claude Code / Cursor, fetch the link to save the file. Do not re-render to obtain the file — a second final render charges another credit.

After the hour the link expires; the memo is also retained in your dashboard's Document vault if you have document storage on.

Buying credits

Credits are bought at https://app.exchek.us:

  1. Sign in and buy credits — a one-time Stripe purchase, pick your quantity. No subscription, no base fee.
  2. Your exk_live_… API key is shown exactly once, on the confirmation page after payment. Copy it then.
  3. The same page is your account home: manage keys, view render history, and reach the compliance dashboard below.

Buying credits is what creates your Enterprise account and dashboard. When credits run out, renders return HTTP 402 with a purchase link — buy again to receive a new key, or email matt@exchek.us to top up an existing one.

How keys work

The same key works across all three Enterprise surfaces — see API Reference for the OAuth connector, key-header MCP, and REST endpoints side by side.

  • Keys are prepaid bearer credentials: we store only a SHA-256 hash and the remaining credit balance. The plaintext key exists once, on your screen, at purchase time — we cannot recover it (we can rotate it; credits carry over).
  • One key works on every surface. There is no client ID, OAuth app, or account to manage — the preferred OAuth connector (https://api.exchek.us/mcp/pro) even handles sign-in for you, so on claude.ai and Desktop you never touch the key at all.
  • Treat it like a password: an environment variable (EXCHEK_API_KEY) or the plugin's enterprise_api_key setting (stored in your OS keychain) — never in source control, never in a memo.

The compliance dashboard

Buying credits creates your account at https://app.exchek.us, and the dashboard that comes with it is where Enterprise compounds. It is fed by the same metadata-discipline tools the skills use — stage/status, generic labels, ECCNs — never item specifications, file contents, or analysis text.

Surface What it does
Transactions The compliance pipeline (classify → jurisdiction → screen → license → export docs) fills itself as your AI works, via opt-in metadata-only sync. A needs-attention queue flags stale screens (90 days), stale classifications (30 days), and missing stages — each with a ready-made prompt to hand back to your agent.
Screening Center Parties your AI screens can be registered for continuous monitoring — re-screened weekly (daily for high-risk) against the Consolidated Screening List, with email alerts the moment a new match appears and a per-party evidence log for audits.
Products registry Confirmed determinations are saved (generic label + ECCN only) so an item is classified once and reused — agents check the registry before re-deriving anything, with staleness flags after 30 days.
Regulatory Radar Recent BIS/DDTC/OFAC rulemaking cross-referenced against your ECCNs, your team's pinned notes, and your monitored parties — plus alerts when a note's pinned CFR section is amended after the note was written.
eCFR Workbench + notes Read and search the CFR, and pin your team's institutional guidance to citations; agents pull those notes into every analysis.
Document vault Opt-in retention of rendered memoranda, organized for 15 CFR 762 recordkeeping.
Audit-Readiness Score A 0–100 heuristic across screening health, classification currency, pipeline completeness, and recordkeeping — each component links to the page that improves it. (The free, local version of this score lives in Analytics.)
Team Share keys, parties, products, and notes with your organization; roles via your identity provider.

Privacy

Rendering is stateless: your variables are substituted into the template, the PDF is returned, and everything is discarded. Nothing is stored; service logs record only the customer name and byte counts — never memo content. Responses are sent with Cache-Control: no-store. The output is held only as the transient 1-hour delivery copy behind the link, plus the dashboard vault if you have document storage on.

Even so, the memo variables transit api.exchek.us for rendering. CUI, classified, and § 126.18-restricted matter must never be sent — the skills enforce this gate at entry, and the free local Word report (Option 1) exists precisely so those memos never leave your machine. When the work is sensitive, choose Option 1. Full policy: https://docs.exchek.us/docs/legal/privacy. See also CUI and Classified Information.

What stays free

Everything else. All 20 skills, both MCP servers (local exchek and hosted exchek-api), the eCFR data API, CSL screening, the document converter, and the local Word/Pages classification report. Enterprise documents are an option, never a wall.

Support

→ Related: ECCN Classification · Document Converter · Analytics · Home

Clone this wiki locally