Compliance Central

Three compliance checks, one side panel, before the car leaves.

Compliance Central runs OFAC sanctions screening, a Michigan MDOS Repeat Offender check and a Title/Lien check from a Chrome side panel next to your deal screen — then prints the record for the jacket. A phone can scan the buyer's licence barcode and fill the form for you.

Install from Chrome Web Store Watch the scan demo
  • No account
  • No API key
  • Built for Michigan
One verdict Clear to deliver
  • OFAC sanctions Runs on this computer No match
  • Repeat Offender MDOS · via our service Clear
  • Title & lien MDOS · via our service Clear

Example of the summary the panel builds. Every check keeps the evidence it was based on, so the record can be reopened, re-screened and reprinted. Results are not a legal certification and require human review.

What it checks

Three checks a Michigan deal actually needs

Each one names its own source and says where it runs. Two of them ask a state system a question; the third never leaves your computer at all.

On this device

OFAC SDN screening

The extension downloads the official Specially Designated Nationals list from the U.S. Treasury and compares names against it on your own machine. It tries to refresh the list once a day; if a refresh fails it screens against the stored copy and tells you the copy is not current.

You enter
Buyer and co-buyer name, date of birth
You get back
Candidate matches with a similarity score, a date-of-birth confidence label, and the SDN programme and country
What leaves
No customer information. Downloading the public list is the only contact with Treasury.
Via our service

Repeat Offender

The Compliance Central service queries the Michigan Department of State portal on your behalf and brings back what it said, along with a capture of the page it came from.

You enter
Name, date of birth, Michigan DLN/PID
You get back
The portal result plus a captured image of the page it came from
What leaves
Those fields, over HTTPS, only when you run the check
Via our service

Title & lien

Runs a trade-in VIN against the Michigan title and lien record, so a lien or a branded title turns up before you appraise the car rather than after. The panel re-derives the title brand from the reported status, and a salvage, rebuilt, scrap or flood title cannot come back reading as clear.

You enter
A full 17-character trade-in VIN
You get back
Title type and brand, lien status and holder, year/make/model, with the page capture
What leaves
The VIN, over HTTPS, only when you click Check title/lien

Demo · Phone scan

Scan the licence. Don't type it.

Typing a name, a date of birth and a licence number is where screenings go wrong. Your phone reads the barcode on the back of the ID and fills the panel instead — and the photo of the licence never leaves the phone.

  1. Illustration of the front of a sample Michigan ID, marked "not a real ID", with an arrow indicating to turn the card over.
    Turn it overThe front has nothing the scanner needs. Everything is on the back.
  2. Illustration of the back of a sample Michigan ID, marked "not a real ID". The wide PDF417 barcode, second from the top, is ringed in gold and labelled "scan this one".
    Aim at the wide barcodeSecond from the top, on the right. Scanning is automatic — tilted or off-centre is fine.
  3. LAST
    DELANEY
    FIRST
    MARCUS
    DOB
    1984-03-11
    DLN
    D000 000 000 000
    Review what filled inYou confirm the fields on the phone before they are sent. Sample data shown.

The image stays on the phone

The barcode is decoded in your phone's browser. The licence image is never uploaded or transmitted — only the text fields you approve travel to your computer.

The relay cannot read it

The side panel generates a one-time key that exists only inside the pairing QR code. Your phone encrypts the fields with it, so the service in between only ever handles an encrypted package.

It expires either way

The package is single-use, expires in about two minutes, and is deleted the moment your computer collects it. It is never written to a database or a log.

Open the scanner page

The scanner page is the real page your phone opens. Opened on a desktop without a pairing code it will simply ask for camera access — nothing is sent anywhere.

Registration & plates

A plate figure you can defend

Guessing a registration total and correcting it at delivery is a bad conversation. The panel fills the state's own calculator and brings back what it said.

It runs the public SOS calculator

You make the vehicle and plate choices in the panel. On an explicit Calculate SOS fee click, those completed choices go to the Compliance Central service, which applies them to the public Michigan SOS calculator and returns the verified fee together with an actual image of the official result page.

Nothing opens on your computer, and the extension has no permission to open or read browser tabs.

It refuses to guess

If the calculator does not produce a verified fee and page capture, the extension reports the failure and quotes nothing. It never presents an unverified number as an official fee.

It does not use an SOS account and does not read SOS credentials or cookies. It does not submit a filing, issue a BFS-4, transfer a title, or complete an RD-108. Michigan SOS remains the source of truth for the final fee and eligibility.

Only the registration and plate fee is calculated by the state. Title, lien recording, instant title and sales-tax amounts shown beside it are published reference figures the extension carries, and the customer worksheet says so on its face.

The output

What ends up in the deal jacket

A screening you cannot produce later is not much use. Every run prints as letter-size sheets, one per report, with your dealership's name and logo on the masthead and a page count on every sheet.

  1. SHEET 1 Decision The verdict, the reason, and any check that did not return a clear answer.
  2. SHEET 2 OFAC record Who was screened, what the list said, when it was published, and how many entries were compared.
  3. SHEET 3 Repeat Offender Where a state page was captured, the capture itself is the sheet.
  4. SHEET 4 Title & lien Title type and brand, lien status and holder, and the captured page behind them.

Print it, or save the PDF

Print a single check on its own, print the whole jacket, or download it — combined into one PDF, or as separate PDFs in a zip. A co-buyer adds their own OFAC and Repeat Offender sheets.

Records stay on the device for up to 30 days so a deal can be reopened, re-screened and reprinted. If a full run is more than a week old, the panel flags it before delivery. The history itself exports as a CSV audit log.

This report records an automated name search against the U.S. Treasury OFAC SDN list using Compliance Central's configured similarity threshold. It is not an OFAC determination, legal advice, or a compliance certification. Potential matches require human review; no-match results do not by themselves establish that a party is legally cleared. Printed on every OFAC record

Where the data goes

Most of it never leaves the building

Every outbound request is tied to a button you press, and this is the whole list. The full detail is in the privacy policy below.

Stays on your computer

Never transmitted by the extension.

  • OFAC SCREENINGThe sanctions list is downloaded to your machine and every name is matched against it there.
  • THE LICENCE IMAGEDecoded on the phone. Never uploaded or transmitted.
  • COMPLIANCE HISTORYUp to 50 working records, kept no more than 30 days, in local extension storage. Clearable at any time, and removed when you uninstall.
  • YOUR DEALERSHIP DETAILSStore name and logo for the printed worksheet, held as local preferences.

Leaves, over HTTPS, when you click

Each row lists the action and exactly what it sends.

  • RUN REPEAT OFFENDERName, date of birth and DLN/PID, to our service, which queries the MDOS portal.
  • CHECK TITLE/LIENThe 17-character VIN, to the same service.
  • CALCULATE SOS FEEThe completed vehicle and plate choices, to run the public Michigan SOS calculator.
  • DECODE VINA VIN or partial VIN, to NHTSA's public vPIC decoder, for vehicle basics.
  • PHONE SCANAn encrypted, single-use package the relay cannot read.

The panel itself

Real screens from the current release

The screening workspace, the verdict, the official plate-fee calculator, the on-device audit trail, and the settings that put your store's name on every customer worksheet.

The screening workspace: scan the buyer's ID or type it in, then run every check
Scan the buyer's ID with a phone, or type it in.
A sample completed screening with its verdict and check results
One verdict, with the available evidence saved under it.
A sample plate fee calculation showing the total, registration term, and print controls
The registration fee, term and breakdown together. Sample quote shown.
The History tab with saved compliance records, re-screen flags, and CSV export
Thirty days of records, kept on this device.
Settings with the dealership name, re-screen reminder, and privacy controls
Your store's branding on printed customer records.

Get it running

Install it, or load the test build

Every check — OFAC, Repeat Offender and Title/Lien — is included free, with no account, sign-up or API key.

From the Chrome Web Store

The normal way in. Chrome keeps it up to date on its own, and the side panel appears next to whatever you already have open.

Install from Chrome Web Store

Load the test build

For trying a build before it reaches the store. It will not auto-update.

  1. Download the zip and unpack it.
  2. Open chrome://extensions.
  3. Turn on Developer mode.
  4. Choose Load unpacked.
  5. Pick the folder that has manifest.json directly inside it.
Download the latest test build

Plainly

What this is not

A compliance tool that oversells itself is worse than no tool. Here is where the line is.

Not a legal certification

The checks and the records they produce are not a legal certification and require human review. They do not by themselves establish that a deal is compliant.

Not legal advice

Nothing the extension produces is legal advice. Your own counsel and your own compliance policy decide what a result means for a deal.

Not a government product

Compliance Central is an independent tool. It is not issued, endorsed or approved by the U.S. Treasury, OFAC, the State of Michigan, the Michigan Department of State or the Michigan Secretary of State.

Not a filing system

It does not submit anything to the state. It cannot file a transaction, issue a BFS-4, transfer a title or complete an RD-108, and Michigan SOS remains the source of truth for fees and eligibility.

Legal document

Privacy Policy

How Compliance Central handles customer and dealership data. This is the complete policy for the extension and for the phone scanner page.

Effective: August 18, 2026Applies to: Compliance Central 1.6.0

Data Use at a Glance

  • OFAC screening stays on your device. No customer information is transmitted for an OFAC-only check.
  • Repeat Offender and Title/Lien checks use our HTTPS service. The entered name, date of birth, license/ID number, and VIN when used are sent only to request the selected MDOS portal response.
  • SOS Fee Quote stays in the side panel. Vehicle, fuel, commercial-use, plate, and plate-design edits happen locally. On an explicit Calculate SOS fee click, the completed vehicle and plate choices are sent to our HTTPS service, which applies them to the public Michigan SOS calculator and returns the verified fee plus an actual image of the official result page. Nothing opens on your computer. It does not access SOS credentials or cookies, and it does not file any SOS transaction.
  • VIN helper is optional and explicit. A sold-vehicle VIN or partial VIN is sent to NHTSA's public vPIC decoder only after you click Decode. Supported vehicle type, body, fuel, and model-year fields are filled locally for review. Trade Title/Lien stays in the existing Trade-In workflow and is not mixed into the fee workspace.
  • Phone scan images stay on the phone. Only the text fields you approve are sent to your computer in an encrypted, single-use package.
  • Saved customer history is local and limited. Up to 50 working records are kept on your device for no more than 30 days so dealership staff can reopen a customer, re-screen, and reproduce prior reports. History can be cleared at any time.

1. Overview

Compliance Central ("we", "our", or "the extension") is a Chrome extension that helps Michigan automotive dealers run compliance screenings — OFAC sanctions, Repeat Offender (MDOS), and Title/Lien checks — from a browser side panel. We are committed to protecting the personal information you enter. This policy explains exactly what data the extension handles, where it goes, and what is and is not retained.

2. What Data the Extension Handles

To run a compliance check, you enter buyer and (optionally) co-buyer details: first / middle / last name, suffix, date of birth, and Michigan DLN/PID, plus an optional trade-in VIN. The optional SOS Fee Quote workspace also handles only the vehicle and plate choices needed by the public calculator, a returned fee, an actual official result-page capture, and a non-personalized official plate-design preview. This information is used only to perform the checks and quote actions you request. We do not sell it, share it with advertisers, or use it for any purpose unrelated to the extension.

  • Compliance records can be reopened: submitted buyer/co-buyer fields, trade VIN, results, and captured portal evidence are saved in local extension storage for up to 30 days so authorized dealership staff can re-screen or reproduce reports.
  • SOS quote data is session-only: calculator choices, returned fee, official result-page capture, plate preview, and any typed VIN stay only for the browser session. The extension never stores an SOS credential, cookie, plate number, customer name, or SOS VIN in persistent Compliance History. A user-requested print or PDF remains wherever the user chooses to save it.
  • Persistent working history is device-local: each record contains the submitted customer fields, timestamp, results, and report evidence needed to reopen and reproduce the record. History is limited to 50 records and 30 days and can be cleared at any time. SOS credentials, cookies, authentication tokens, and backend keys are not stored in History.
  • Files you choose to download: a PDF or CSV is saved only when you request it. Downloaded files may contain the details shown in the report and remain wherever you save them until you delete them.
  • No tracking or analytics: the extension does not track your browsing, and does not use Google Analytics or any third-party advertising or analytics network.

3. Data Transmitted for MDOS Checks

The Repeat Offender and Title/Lien checks are performed by our secure backend service hosted on Fly.io, which queries the Michigan Department of State (MDOS) portal on your behalf using automated browsing.

  • For these two checks only, the buyer/co-buyer name, date of birth, and DLN/PID (and the VIN for a title check) are transmitted to our backend over an encrypted HTTPS connection.
  • The backend processes this data in memory to request the MDOS portal response and screenshot. Submitted customer data is not intentionally retained by the backend and is not written to its database or application log. The returned result and screenshot are saved only in the extension's device-local History so the dealership can reopen and reproduce the record.
  • Like any hosted web service, Fly.io receives ordinary network request metadata. Compliance Central uses the request IP address transiently in memory for rate limiting and abuse prevention; the app does not write it to its database or application log.
  • The extension includes built-in access to the backend, so these checks work without an account, API key, or setup.

4. SOS Fee Quote and VIN Helper

The SOS Fee Quote workspace is a convenience layer over the public Michigan SOS calculators; Michigan SOS remains the source of truth for the final fee and eligibility.

  • The extension displays its bounded dealership form and official Michigan plate artwork locally. Clicking the selected plate opens an instant in-sidebar viewer with zoom and drag-to-pan controls, without opening a new window or the SOS website. After an explicit Calculate SOS fee action, the completed calculator fields — including the registered owner's birthdate (used by Michigan to set the expiration date) and, for a plate transfer, the plate number — are sent to the Compliance Central service, which runs the public Michigan SOS calculator and returns the fee plus an actual image of the official result page. Nothing opens on your computer, and the extension has no permission to open or read browser tabs.
  • If the calculator does not produce a verified fee and page capture, the extension reports the failure and quotes nothing. It never presents an unverified number as an official fee.
  • The extension does not read or send SOS credentials, cookies, authentication tokens, or account information. It does not submit a filing, issue a BFS-4, transfer a title, or complete an RD-108.
  • When you explicitly use the VIN helper, the VIN goes directly from the extension to NHTSA's public vPIC service to obtain vehicle basics. The raw VIN is not kept in the decoder response, sent to SOS, or written to extension storage.
  • When you explicitly use Check title/lien, a full 17-character VIN is sent to the existing MDOS backend as described above. The SOS workspace displays only a bounded live result and does not save the VIN, screenshot, or result to audit history.

5. License Scan (Optional)

The optional "Scan license with phone" feature lets you capture a customer's Michigan driver's license or state ID with your phone instead of typing. It is designed to be private:

  • Scanning and parsing happen on your phone — the barcode on the back of the license is read and decoded in your phone's browser. The license image is never uploaded or transmitted.
  • Only the parsed text fields (name, date of birth, and license/ID number) travel to your computer, and they are end-to-end encrypted: the desktop extension generates a one-time key that exists only inside the QR code, your phone encrypts the fields with it, and our backend merely relays an encrypted package it cannot read.
  • That encrypted package is single-use, expires in about two minutes, and is deleted the moment your computer retrieves it. It is never written to a database or log.
  • Once the fields autofill, they are handled exactly like manually typed data — including retention. As described in Section 2, the submitted buyer and co-buyer fields (name, date of birth, and license/ID number) are saved with the compliance record in local extension storage for up to 30 days so the deal can be reopened or re-screened, and can be cleared at any time from Settings or History. Scanning changes how the fields are entered, not how long they are kept.

6. OFAC Screening (Local Only)

OFAC sanctions screening is performed entirely on your device. The extension downloads the official SDN list directly from the U.S. Treasury OFAC Sanctions List Service and matches names locally. No customer information is sent anywhere for an OFAC check.

7. Third-Party Services

  • U.S. Treasury OFAC Sanctions List Service (sanctionslistservice.ofac.treas.gov): provides the official SDN list the extension downloads for local screening. Treasury redirects the file download to its dedicated AWS GovCloud storage host. Only the public list is downloaded — no customer data is sent.
  • Michigan Department of State (MDOS): the official source queried (via our backend) for Repeat Offender and Title/Lien results.
  • Michigan Secretary of State public fee calculator: verifies the locally completed registration/plate choices and supplies the calculated fee and actual official result-page capture only after an explicit SOS Fee Quote action. Official plate artwork is loaded from www.michigan.gov. The extension does not use an SOS account or access SOS credentials/cookies.
  • NHTSA vPIC (vpic.nhtsa.dot.gov): receives an optional VIN or partial VIN only after you click Decode VIN and returns basic vehicle characteristics for SOS field suggestions.
  • Fly.io: hosts our backend service. Customer data is processed in memory and is not intentionally retained after each request; ordinary network metadata is handled as described above. For the optional license scan, the service relays only an encrypted, single-use package it cannot read.
  • GitHub Pages (techsavvyjoe.github.io): serves the static phone scan page (and this policy). The scan page performs the barcode decoding on your phone; the license image is not sent to it.

8. Permissions

The extension requests only the permissions it needs:

  • sidePanel — to show the compliance interface in Chrome's side panel.
  • storage — to save preferences and bounded, device-local customer/report history.
  • unlimitedStorage — to hold the downloaded OFAC sanctions dataset and up to 50 saved customer/report records, including state-site evidence images, for no more than 30 days.
  • alarms — to refresh the OFAC sanctions list automatically about once per day.
  • Host access to sanctionslistservice.ofac.treas.gov and its dedicated AWS GovCloud file host (official OFAC list download), compliance-central-api.fly.dev (MDOS backend), dsvsesvc.sos.state.mi.us (official plate-design artwork shown next to a fee quote), and vpic.nhtsa.dot.gov (optional VIN decoding). Official published plate-gallery images load from www.michigan.gov without a broad host permission.

9. Chrome Web Store Limited Use

Compliance Central's use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. See the official Limited Use requirements.

Information is used only to provide the compliance checks, phone-to-computer transfer, local preferences, and audit records described in this policy. It is not used for advertising, market research, credit scoring, or any purpose unrelated to the extension's single purpose. Human access is limited to a user's explicit support request, security investigation, legal requirement, or aggregated operations that cannot identify a person.

10. Your Rights and Choices

  • Clear your compliance history at any time with the in-app "Clear local history" button, or delete a single record from its History card.
  • Delete any reports you downloaded from the location where you saved them.
  • Uninstalling the extension removes all locally stored data.

11. No Account Needed

All checks — OFAC, Repeat Offender, and Title/Lien — are included free, with no account, sign-up, or API key. Just install and use.

12. Contact Us

Questions about this policy, the extension, or backend access? Email joejgallant@gmail.com or use the Chrome Web Store support page for this listing.

Back to top ↑