Skip to content
FonteumPublic-records evidence

API METHODOLOGY

Composite resolution— v2.

Fonteum can return available blocks from 6 declared federal source families for one NPI on /api/v1/npi/{npi}. Blocks can be null, pending, or absent. The route documents an X-Fonteum-Methodology header pointing at this page so downstream consumers can pin against the exact methodology version that produced their result.

Pinned: v2 · Last reviewed 2026-07-12

Inputs

6 federal source families.

A returned block identifies one of these declared sources. Not every source is loaded or NPI-keyed, and a listed source can produce a null block. Fonteum does not use fuzzy name or address matching to fill a missing NPI join.

nppes-npi-registry

CMS NPPES NPI Registry

Freshness note: Loaded NPPES table: newest system date 2026-06-10, checked 2026-07-12

License: US-Government-Works

Source →

oig-leie

OIG LEIE (Exclusions)

Freshness note: Loaded serving table: source release 2026-05-08, checked 2026-07-12

License: US-Government-Works

Source →

cms-pecos

CMS PECOS

Freshness note: Loaded serving table: newest source release 2026-06-18, checked 2026-07-12

License: US-Government-Works

Source →

cms-qpp-mips

CMS QPP MIPS Individual

Freshness note: Publisher releases program-year files; inspect the returned block for its available date

License: US-Government-Works

Source →

cms-open-payments

CMS Open Payments (Sunshine Act)

Freshness note: Pending NPI-keyed ingest; no loaded composite observation asserted

License: US-Government-Works

Source →

sam-gov-exclusions

SAM.gov Exclusions

Freshness note: Publisher cadence is daily; Fonteum ingest pending, with no loaded composite observation asserted

License: US-Government-Works

Source →

Join key

NPI joins only where the source publishes it.

The National Provider Identifier is a federally assigned 10-digit administrative identifier. An organization can hold more than one NPI for enumerated subparts, and some listed sources publish no NPI. Fonteumdoes not perform name-based, address-based, or specialty-based matching to bridge these composite blocks — an NPI join is exact or the block remains null.

If NPPES has no record for the requested NPI, the endpoint returns 404 even when other source families may carry a row under the same number. NPPES is the registry of record.

Conflict resolution

Disagreements stay visible.

When the same field appears in more than one source (for example, specialty in NPPES vs. PECOS), the composite response surfaces both values on their per-source blocks. Fonteum does not silently pick one. The reader sees the NPPES value under sources.nppes.data, the PECOS value under sources.pecos.data, and the available provenance object on each block reports the source, snapshot, and confidence fields supplied by that response; fields can be null.

Confidence scoring

The 0 – 1 scale.

  • 1.0 — source returned the field with no parse warnings.
  • 0.9 — field present but normalized (case-folded, whitespace trimmed, zip truncated).
  • 0.7 — field inferred from a related field (primary taxonomy from a non-primary one).
  • 0.0 — field absent or source not yet ingested (data_availability flags say so).

The composite block exposes field_confidence_min— the minimum confidence across all returned source blocks. A caller can index on it to decide whether to trust the joined record without re-parsing every per-source provenance object.

Composite flags

Why active_and_clean is tri-state.

This legacy-named field is true only when NPPES registry status is Active and the unified OIG LEIE, SAM.gov, and state Medicaid exclusion screen returns no match while its coverage is current and reconciled. It is false when the registry is inactive or an affirmative exclusion is present. It is nullwhen exclusion coverage is stale or cannot be reconciled to a comparable attested source artifact. A null result is indeterminate and is not a clearance. PECOS enrollment deactivation is not evaluated because the public serving table does not expose that field.

Limitations

What this endpoint does not do.

  • Does not provide universal historical replay. A block represents the loaded response available to this endpoint and can lag the publisher; source dates vary and can be null.
  • Does not return Open Payments line items. When the NPI-keyed ingest lands the block will surface program-year aggregates only.
  • Does not return risk signals or anomaly flags. Risk scoring is a separate methodology on a separate roadmap wave.
  • Does not verify provider credentials. Fonteum publishes what CMS, OIG, and SAM.gov publish.

Versioning

Pinned at v2.

This page is the canonical methodology pin for the response shape the endpoint emits. Version 2 makes active_and_clean tri-state so stale or unreconciled exclusion coverage cannot appear as a clean result. The canonical page at https://fonteum.com/methodology/composite visibly carries the current v2 contract; the prior v1 semantics are recorded in the public methodology and corrections log. Future breaking changes — renaming a top-level key, dropping a source family, or changing the meaning of active_and_clean— require another major version. Additive changes (a new optional field on the composite block, a new source family added to the join) do not bump the version.

Related

Where this methodology is used.

  • Platform methodology — how every layer of the record pipeline works, from capture to signing.
  • API reference — the /api/v1/npi/{npi} endpoint contract that pins this page in its X-Fonteum-Methodology header.
  • Trust center — audit pack, corrections process, and the signing chain behind each block.

What’s on file, by the numbers

Platform snapshot · 2026-08-11

13.4Mproviders & companiesProviders, organizations, owners, and facilities on file
26.2Msource-linked factsSource-linked field facts in the dated platform snapshot
90sources with dataDistinct snapshot source IDs with at least one positive record count
73fresh sourcesDistinct source IDs whose latest positive-data snapshot falls within the preceding 45 days
111sources integratedActive registry rows; integration does not establish a load
13state Medicaid jurisdictionsDistinct states represented in the state-exclusions serving table

Integrated, with-data, and fresh-observation counts are separate. No platform-wide source-completeness count is published. Completeness is source-specific and must be evaluated against the named source's expected scope. State coverage is a separate jurisdiction measure.

Source authority is record-specific

Use the issuer named on the record.

Fonteum spans federal, state, and global public publishers. A source page or returned record identifies its issuer and dataset where that metadata is available. A platform registry count does not assign every page to one authority or establish loaded, fresh, or complete coverage.

Browse source records and their stated limitations →

Reproducible by design

Inspect the evidence each published figure actually supplies.

Source and date

Research pages expose the named public file and observation date where those fields are available. Source-file SHA-256 coverage is separate; facts do not currently link deterministically to signatures.

Available derivation

Studies with a retained release and committed derivation link the SQL or method used. Other studies state the evidence and reproduction limits they actually have.

Daily observations

Dated table row-count observations can detect local drift. They do not imply that an upstream publisher released or Fonteum ingested new data that day.

Named medical review

Reviewed by Jennifer Montecillo, MD, medical reviewer. Non-practicing medical reviewer.

Read the full provenance and attestation methodology →

Request access