ChiselGrowth APIs: compliance checks, institution data and brand extraction for banks and credit unions

Overview

One key works for all three APIs. Requests and responses are JSON over HTTPS, and every request carries your key in the x-api-key header.

Beta price: Free during the beta
Beta limit: 500 requests per day per key, 2 per second
Environments: Staging key first, production key after your first working integration

API	What it does	Typical time
Compliance	Grades one social ad (headline, body, call to action, disclaimer) and says what to fix	2 to 4 s
Institutions	Who an institution is (live FDIC or NCUA record) and what its ads must say	under 2 s
Brand	Logo files, colors, tagline and brand voice from a bank or credit union website	30 to 90 s, asynchronous

Review assistance, not approval. These APIs flag and explain potential issues and return public-record data. They are not legal advice. The final decision on any ad belongs to the institution's compliance reviewer.

Quickstart

Get a key. Request beta access. We reply within two business days with a staging key and base URL.

Check the key.

export BASE="https://0hnoy2hqtj.execute-api.us-east-2.amazonaws.com/staging"
export KEY="your-key"
curl -s "$BASE/v1/health" -H "x-api-key: $KEY"
# {"request_id":"…","ok":true,"version":"compliance-api-…","apis":{"compliance":"…","institutions":"…"},"client":"Your Organization"}

Look up an institution to get the exact insurance statement its ads need.

curl -s "$BASE/v1/institutions/lookup?url=https://www.legend.bank" -H "x-api-key: $KEY"

Grade an ad. See the Compliance API below.

Production base URL, issued with your production key: https://c4ruza2tpg.execute-api.us-east-2.amazonaws.com/prod

Compliance API

Checks one bank or credit union social ad against the same rule set ChiselGrowth uses for its own campaigns.

Area	What is checked
Deposit insurance	Banks: “Member FDIC” on deposit ads (12 CFR 328). Credit unions: the NCUA official advertising statement (12 CFR 740). The wrong insurer is always flagged.
Deposit accounts	Rates and APY, “free” and “no fee” claims (Reg DD, 12 CFR 1030; NCUA, 12 CFR 707). Interest or dividends are never called “profit”.
Credit	Reg Z triggering terms (payment, term, down payment, finance charge) that need APR disclosure.
Mortgage and HELOC	NMLS ID in the disclaimer; Equal Housing language.
Accuracy	Absolute claims (“guaranteed”), early-pay claims without “up to”, unsupported popularity or staff claims.
Platform	Facebook, Instagram and LinkedIn length limits.

POST/v1/compliance/checkGrade one ad

Field	Notes
`ad.headline` required	Up to 200 characters
`ad.body_copy` required	Up to 1,000 characters
`ad.platform` required	`facebook`, `instagram` or `linkedin`
`ad.product_category` required	`checking`, `savings`, `money_market`, `cd`, `ira`, `mortgage`, `heloc`, `auto_loan`, `personal_loan`, `business_loan`, `sba_loan`, `credit_card`, `commercial_real_estate`, `other`
`ad.product_name` required	The product's own name
`ad.cta_text`, `ad.disclaimer`	Send the disclaimer exactly as it will run
`ad.ad_format`	`feed` (default) or `story`
`institution.type` required	`bank` or `credit_union`
`institution.name` required	Up to 160 characters
`institution.nmls_id`	Needed for mortgage and HELOC ads; 4 to 10 digits
`product_page_text`	Recommended. Text of the product's own page, up to 8,000 characters. Lets the check confirm fee and “free” claims instead of flagging them.

curl -s "$BASE/v1/compliance/check" -H "x-api-key: $KEY" -H "content-type: application/json" -d '{
  "ad": {
    "headline": "Get Paid Up to 2 Days Early",
    "body_copy": "Free Checking can deposit your paycheck up to two days early with direct deposit.",
    "cta_text": "Learn More",
    "disclaimer": "Member FDIC.",
    "platform": "facebook",
    "product_category": "checking",
    "product_name": "Free Checking"
  },
  "institution": { "type": "credit_union", "name": "Example Credit Union" },
  "product_page_text": "Free Checking: no monthly service fee. Early direct deposit up to 2 days..."
}'

{
  "request_id": "…",
  "decision": "needs_changes",
  "grade": "red",
  "score": 75,
  "institution_type": "credit_union",
  "rule_results": [
    { "rule_code": "T1-007", "rule_name": "NCUA Official Advertising Statement",
      "status": "fail", "component": "disclaimer",
      "explanation": "…", "fix_instruction": "…" }
  ],
  "checks": {
    "copy_quality": { "code": null },
    "reg_z_trigger": { "code": null },
    "nmls": { "status": "none" },
    "disclaimer": { "expected": "Federally Insured by NCUA.", "matches": false, "missing": false, "wrong_insurer": true }
  },
  "notice": "Review assist only: …"
}

Reading the decision

`decision`	Meaning	What to do
`pass`	No rule failed and every check passed	Send it to your reviewer as usual
`needs_changes`	At least one rule or check failed	Apply each `fix_instruction`, then check again
`needs_nmls`	Only the NMLS ID is missing	Add `institution.nmls_id` and the NMLS number to the disclaimer

checks.disclaimer.expected is the disclaimer ChiselGrowth would use for this product. Different wording is not a failure by itself; missing and wrong_insurer are.

Copy-quality codes

`early_pay_claim_without_up_to`	“N days early” needs “up to” or “as early as”
`sweeping_claim_without_fact`	“Without limits” with no unlimited feature
`profit_wording_for_earnings`	Interest or dividends called “profit”
`generic_product_free_claim`	“Free” on a generic product without page support
`unsupported_popularity_claim`, `unsupported_people_claim`	Awards, “#1”, “customers love”, staff claims
other codes	Generic filler, fee-led or off-product copy: rewrite with a concrete product fact

Institution API

Who a bank or credit union is, and what its ads must say. Public regulator data only (FDIC BankFind and the NCUA Credit Union Locator), read live on every call.

GET/v1/institutions/lookupLook up one institution

Send exactly one of url, fdic_cert or ncua_charter.

Parameter	Notes
`url`	Website, matched exactly against the website the regulator lists. Example: `https://www.legend.bank`
`fdic_cert`	FDIC certificate number, up to 7 digits
`ncua_charter`	NCUA charter number, up to 7 digits
`name`	Optional, with `url`: helps find credit unions and name candidates

The answer has two parts. institution: legal name, city and state, website, status, FDIC certificate or NCUA charter, insured since, charter class, primary regulator, total assets and, for credit unions, members. advertising: the exact insurance statement (Member FDIC. or Federally Insured by NCUA.), the Equal Housing statement for mortgage and home-equity ads, deposit rules, membership rules for credit unions, the right words for customers and earnings, and the compliance rules that apply.

curl -s "$BASE/v1/institutions/lookup?ncua_charter=61650" -H "x-api-key: $KEY"

No exact website match returns 404 with error: "no_exact_website_match" and a list of candidates. Call again with one of their numbers. 503 means FDIC or NCUA did not answer in time; retry.

Brand API

Logo files, colors, tagline and brand voice from a bank or credit union website. Asynchronous: start a job, then poll it every 5 to 10 seconds. The website is first checked against FDIC and NCUA records; other websites get 404. At most 3 jobs run at a time per key.

POST/v1/brands/extractStart a job

curl -s -X POST "$BASE/v1/brands/extract" -H "x-api-key: $KEY" \
  -H "content-type: application/json" -d '{"url":"https://www.legend.bank"}'
# 202 {"job_id":"…","status":"queued","institution":{"type":"bank","legal_name":"…"},"poll":"/v1/brands/jobs/…"}

GET/v1/brands/jobs/{job_id}Status, and the brand when complete

status is queued, running, complete or failed (with error: site_not_reachable, timed_out or extraction_failed). When complete, result contains:

`logos`	Up to two variants: `light` for light backgrounds, `reverse` for dark ones. File bytes in `data_base64`; `null` above 512 KB, with `source_url` to fetch it.
`colors`	`primary`, `secondary`, `accent`, `gradient`, with `source` (`logo_pixels` or `applied_css`) and `confidence`
`tagline`	Only when it appears word for word on the homepage
`voice`	`brand_voice`, `brand_story`, `value_prop`

Fields are null rather than guessed.

Errors and limits

HTTP	Meaning
`400`	Invalid request. `details` lists every problem at once.
`403`	Missing, unknown, suspended or revoked key
`404`	Institution not found (with `candidates` when there are close matches), or no such brand job for this key
`422`	No compliance rule covers this product category
`429`	Rate limit, daily quota or running-job limit reached
`500`, `503`	Our side, or a regulator source did not answer. Quote `request_id` when you contact us.

Set a client timeout of 30 seconds. Keep your key on your server; never put it in a browser or mobile app. If a key leaks, tell us and we revoke it and issue a new one.

What we keep

Usage record	Per request: time, route, HTTP status, decision, grade, institution type and response time. Used for limits and support. No ad text.
Ad text	Sent to the AI model that grades it (Amazon Bedrock, in our AWS account, US East). Kept in our AWS logs for troubleshooting. Never used to train models.
Don't send	Customer or member personal information. The APIs need marketing copy and public institution data only.

Request beta access

The beta is free and open to banks, credit unions, and the agencies and fintechs that build for them. A person reviews every request; we reply within two business days.

Send an ad. Get back what a compliance reviewer would flag.

Overview

Quickstart

Compliance API

Reading the decision

Institution API

Brand API

Errors and limits

What we keep

Request beta access