Compliance

How we maintain compliance.

A firearm retailer's compliance obligations don't pause for software. Here's exactly what's enforced, what's exportable, and where the line is between what we've built and what your attorney should confirm.

// Regulatory basis

Built around ATF Rulings 2016-2 and 2022-01

Modeled on electronic recordkeeping standards

The bound book, hold, and disposition workflow are built around the electronic recordkeeping framework ATF Rulings 2016-2 and 2022-01 set out — not a paper process we tried to digitize afterward.

The hold is enforced in code

A firearm can't be released just because it's been paid for. The moment it's in the cart, the transfer is blocked until a NICS transaction number and disposition are on file — there's no setting that turns this off.

One record, start to finish

Acquisition and disposition live in the same bound book entry. See exactly how a sale moves through the hold on the How it works page.

// Bound book

The system of record, not a spreadsheet kept alongside it

Automatic acquisition entries

Every serialized firearm that enters inventory — purchased, traded in, or transferred — opens a bound book entry automatically. Nothing about its compliance history lives outside that record.

Disposition closes the loop

Once a disposition is recorded and the NICS number is on file, the same entry closes. There's no separate log to reconcile against the register.

Exportable on demand

Bound book entries and order history export any time, in standard formats — no waiting on us to pull a report ahead of an audit.

// Audit trail & access

Who touched what, and when

Role-scoped access

Staff, manager, and admin roles limit who can edit sensitive records like dispositions and pricing — not everyone at the counter has the same reach.

Financial adjustments are logged

Store-credit and similar financial adjustments are logged with who made the change and when. A system-wide access log across every module isn't there yet — tell us if that's a hard requirement for you.

No proprietary lock-in

Everything runs on a standard PostgreSQL database. If you ever leave, you leave with your data — inventory, orders, and bound book entries alike.

// A note on scope

What’s built in today, and what isn’t yet

Compliance note

This page describes the operational workflow FFL-POS enforces today — the hold, the NICS entry, and the bound book entry — and the ATF rulings that workflow is modeled on. It is not a certification, and it is not legal advice. Every shop’s situation is different; have an FFL attorney or compliance specialist review your specific setup before you rely on it for a live transaction.

Curious how this plays out sale by sale? See the full acquisition-to-disposition walkthrough on How it works, or how it fits into hosting and data security on the Security & compliance page.

// Questions

Frequently asked

Does this replace our paper bound book?

Yes. Every acquisition opens a bound book entry automatically, and every disposition closes it. Entries stay linked to the item's full history and export any time for an audit.

Can staff override the hold?

No. Release is blocked until a NICS transaction number and a disposition — Proceed, Delay, or Deny — are both on file. There's no setting or permission level that bypasses it.

Does this fully complete Form 4473 electronically?

The day-to-day workflow that matters — the hold, the NICS check, and the bound book entry — is built in today. Full electronic completion of Form 4473 follows ATF Rulings 2016-2 and 2022-01; we'll walk through exactly what that requires for your shop before you rely on it. This isn't legal advice — check your approach with an FFL attorney or compliance specialist.

How do we pull records for an ATF audit?

Bound book entries and order history export on demand, in standard formats. You don't need to ask us for a report or wait on anyone to generate one ahead of an inspection.

Who can see or edit compliance records?

Staff, manager, and admin roles scope access — dispositions and other sensitive records aren't editable by every login. Financial adjustments are logged with who made them and when.

Want to walk through your compliance workflow?

We'll go through the hold, the bound book, and what an audit looks like on your actual setup — no obligation, no pressure.

Talk to us