Don’t let an outdated CosIng database put your certifications at risk
BD-API keeps your regulatory database current with CosIng, DG SANTE, SCCS, Safety Gate and EUR-Lex data. A source-specific AI analyser enriches every update, and your software receives snapshots, SQL patches, changelogs and signed webhooks so you can decide before the problem reaches an audit.
The real problem
The risk is not technical. It is regulatory, economic and reputational.
A substance permitted yesterday can be restricted tomorrow. If your database does not reflect that, your team may certify, review or validate with stale information. In compliance, “I didn’t know” is not enough.
The EU publishes a change
A new SCCS opinion, an annex amendment or a CosIng update.
Your database falls behind
Your software keeps validating against a version that no longer represents the current regulatory state.
The risk surfaces late
It only appears at audit time, in an urgent reformulation or in a commercial decision made with incomplete information.
Hidden cost
The problem is not downloading an XLS. The problem is detecting the change, understanding its impact, versioning it, delivering it with evidence and being able to explain it months later.
Benefits for your operation
Update your regulatory database before a change becomes an incident.
BD-API turns database updates and regulatory news into actionable deliverables: data ready to integrate, traceable alerts and evidence so your team can decide with backing.
CosIng database always current
You receive snapshots and SQL patches so your system works with up-to-date CosIng data, with no dependency on sporadic manual reviews.
Classified SCCS and DG SANTE alerts
Every SCCS opinion and DG SANTE update arrives with substances, CAS numbers and critical dates extracted, classified by impact and ready to prioritise.
Safety Gate / RAPEX on your radar
Alerts on cosmetic products withdrawn or non-compliant in the EU, with brand, batch and substance involved for immediate action.
EUR-Lex ahead of the rest
EU legal acts — amending regulations, implementing decisions — captured via SPARQL before they appear in other feeds.
Audit-ready traceability
Every change is documented with source, version, changelog and integrity hash: concrete evidence to explain what changed and when.
Lower operational cost, fewer surprises
Your team stops chasing scattered PDFs, XLS files and bulletins; it gets the time back to assess impact, reformulation and business decisions.
From official source to internal decision. Without chasing PDFs or XLS files by hand.
From detection to delivery, every change is classified, versioned and ready to plug into your regulatory operation.
Multi-source watch
We monitor CosIng, DG SANTE, SCCS, Safety Gate (RAPEX) and EUR-Lex in parallel, with detection, deduplication and historical persistence per source.
Professional AI analysis
Every publication is routed through a source-specific AI analyser, with professional prompts in a descriptive register, that extracts substances, CAS numbers, critical dates, affected annexes and an executive summary.
Traceable, granular delivery
Initial snapshot, SQL patches signed with SHA-256, changelog, transactional email and HMAC-signed webhook. Premium allows granular per-source subscription so you activate only what your team needs.
The technology behind BD-API
Independent flows that keep data, alerts, integration and resilience under control.
BD-API runs on FluxorHub.com infrastructure and delivers verifiable updates to the client platform. If one flow slows down, the others keep working: the local database never depends on a permanent connection to validate.
Official source
Official EU CosIng (.xls)
Regulatory input monitored and versioned before it touches any client system.
BD-API engine
- Scheduled sync with CosIng EU
- Diff Engine
- Incremental patch.sql
- changelog.json + meta.json
Delivery to the client
Controlled integration
The platform calls /api/versions/check at the frequency it chooses, downloads the patch if there is a new version, verifies SHA-256 and applies everything in a single PostgreSQL transaction.
Operational result
Up-to-date regulatory database, automatic rollback if anything fails and clear evidence of every change.
Plans that adapt to your operation
Licence per installation. No hidden costs. Operational requests included.
Standard
For software that needs to stay current with the regulation in force.
- CosIng version check on demand (up to daily)
- SHA-256 verification + incremental SQL patches
- SCCS and DG SANTE alerts in raw format
- HMAC-signed webhook and transactional email
- Email support
Premium
For operations that need multi-source regulatory watch with AI analysis and enriched proactive alerts.
- CosIng version check on demand (up to daily)
- Multi-source watch: DG SANTE, SCCS, Safety Gate and EUR-Lex
- Professional source-specific AI analysis with executive summary, criticality and dates
- Granular subscription: activate only the sources you need
- Enriched webhook with extracted data + HTML email
- Detailed changelog per version + priority support
Frequently asked questions
What a Responsible Person asks before trusting a regulatory database
Does BD-API replace the regulatory officer?+
No. BD-API delivers data, alerts and traceability so the Responsible Person can decide with better information. The final interpretation stays with the qualified team.
What problem does it solve for a certification body?+
It reduces the risk of reviewing or certifying products against an outdated CosIng database. The value is not the API itself — it is the confidence before signing off.
Does the app depend on the internet to validate ingredients?+
No. The client keeps a local PostgreSQL database and validates offline. BD-API is used to receive snapshots, patches and regulatory updates.
What does it cover today?+
CosIng Annexes II–VI with 2,385 substances monitored, 32,675 ingredients catalogued and 5 annexes covered. We add multi-source watch over DG SANTE, SCCS, Safety Gate (RAPEX) and EUR-Lex, professional source-specific AI analysis, granular per-client subscription, SQL patches with SHA-256, changelog, transactional email and HMAC-signed webhook. The full playbook for monitoring EU cosmetic regulation →
What happens if Safety Gate or EUR-Lex are temporarily unreachable?+
The circuit breaker isolates the failing source, persists the failure and retries automatically with an adaptive cooldown. The other sources keep running normally; when AI is unavailable, the notice arrives in raw format so no events are lost.
Can I activate only SCCS without Safety Gate or EUR-Lex?+
Yes. Subscription is granular per client and per source: every client chooses which engines to listen to. You can activate only SCCS, add Safety Gate later or combine them as suits you.
Request licence
Fill in the form and we will get in touch to activate your access to the service.