THE OFFER
THE OFFER
From "we think we have a PFAS problem" to a filed report.
Minnesota's first-in-the-nation reporting deadline lands September 15. The PFAS Starter Package gets your product data collected, validated and submission-ready - then keeps it current as California, New Mexico and a dozen other states come due behind it.
Guided scoping against your product catalog and the states you actually sell into - including online-only sales.
Your data ingested in whatever format it lives in today - BOMs, specs, SDSs, supplier declarations, spreadsheets, PDFs.
Supplier outreach run for you, with a documented due-diligence trail showing what you asked, when, and what came back.
Reports built to PRISM's structure - product description, PFAS identity, concentration range, and function per component.
Human compliance experts alongside the platform, plus deterministic AI that shows its evidence rather than guessing.
One dataset, many obligations.
The same substance-level product data answers Minnesota, New Mexico, California, Connecticut labeling, EU PPWR food-contact limits and the pending federal TSCA 8(a)(7) filing. Scope beyond the starter package is quoted as added scope.
PFAS Starter Package
PFAS Starter Package
PFAS Starter Package
$5,000/ month
$5,000/ month
$5,000/ month
Month-to-month. No setup fees.
Month-to-month. No setup fees.
Month-to-month. No setup fees.
✓ All state and federal PFAS obligations covered
✓ Up and running in as little as a week
✓ Month-to-month, cancel anytime
✓ No setup fees, no obligation
✓ Extends to your other frameworks without re-collecting data
✓ All state and federal PFAS obligations covered
✓ Up and running in as little as a week
✓ Month-to-month, cancel anytime
✓ No setup fees, no obligation
✓ Extends to your other frameworks without re-collecting data
Book a 15-min call
Book a 15-min call
Book a 15-min call
Book a 15-min call
A quick call is all it takes to see if it fits.
A quick call is all it takes to see if it fits.
A quick call is all it takes to see if it fits.
The deadline map, as it actually stands.
PFAS obligations no longer arrive one state at a time. Minnesota is the one with a filing date on it right now - the rest are already scheduled.
PFAS obligations no longer arrive one state at a time. Minnesota is the one with a filing date on it right now - the rest are already scheduled.
Minnesota
Collect SVHC Declarations from Every Supplier—Without the Chasing
Amara's Law, Minn. Stat. 116.943
GET EVIDENCE IN
DUE NOW
GET EVIDENCE IN
What's required:
Initial reports on every product with intentionally added PFAS sold, offered for sale or distributed in the state — including online-only sales — filed through PRISM, with a one-time $800 manufacturer fee. Reporting covers product description, each PFAS by name, concentration range, and the function it serves in each component. Products manufactured before July 1, 2023 were removed from scope by a 2026 amendment.
When:
September 15, 2026
Extension requests closed August 16. Granted extensions run to December 14, 2026. Annual updates due each February 1.
California
Collect SVHC Declarations from Every Supplier—Without the Chasing
AB 1817, AB 2771, AB 1200, AB 652, AB 347
GET EVIDENCE IN
THRESHOLD STEP-DOWN
GET EVIDENCE IN
What's required:
No general reporting duty, but hard sales bans already in force: food packaging (2023), juvenile products (2023), cosmetics and textiles (2025). The textile limit under AB 1817 drops from 100 ppm to 50 ppm total organic fluorine on January 1, 2027, and the severe-wet-conditions outdoor apparel exemption ends January 1, 2028. Manufacturers must issue certificates of compliance to distributors and retailers. SB 682, which would have extended bans to cookware and cleaning products, was vetoed in October 2025.
When:
January 1, 2027
50 ppm TOF for textiles
July 1, 2029
DTSC registration under AB 347
July 1, 2030
DTSC enforcement begins
New Mexico
Collect SVHC Declarations from Every Supplier—Without the Chasing
PFAS Protection Act
GET EVIDENCE IN
NEXT UP
GET EVIDENCE IN
What's required:
Reporting, labeling and first-phase sales bans all land on the same date, covering cookware, food packaging, dental floss, juvenile products and firefighting foam. Notably includes a first-of-its-kind fluoropolymer exemption. Further categories follow in 2028, with a general ban in 2032.
When:
January 1, 2027
Reports due, labels required on products manufactured after this date, first bans in force.
Other states
Collect SVHC Declarations from Every Supplier—Without the Chasing
ME, VT, CT, RI, NH, WA, CO
GET EVIDENCE IN
ROLLING
GET EVIDENCE IN
What's required:
Maine and Vermont bans took effect January 1, 2026, with Maine requiring a notification and fee for products covered by currently-unavoidable-use determinations. Connecticut's labeling requirement began July 1, 2026. Rhode Island and New Hampshire bans start January 1, 2027, with Rhode Island extending to severe-wet-conditions outdoor apparel in 2029. Washington reporting continues under Safer Products rules.
When:
2026 – 2029
Category-by-category, with definitions and exemptions that differ state to state.
Federal (US)
Collect SVHC Declarations from Every Supplier—Without the Chasing
TSCA § 8(a)(7), 40 CFR 705
GET EVIDENCE IN
START DATE DEFERRED
GET EVIDENCE IN
What's required:
EPA's PFAS reporting rule reaches back to anything manufactured or imported since January 1, 2011 — twelve years of historical data, with no de minimis threshold. In April 2026 EPA moved the start of the submission window to 60 days after its forthcoming revised rule takes effect, with a backstop of January 31, 2027. The window then runs six months (twelve for small manufacturers reporting solely as article importers). Proposed exemptions for article importers are not final — they should not be assumed.
When:
Opens no later than January 31, 2027
The previously codified October 13, 2026 deadline no longer applies; the window has not opened.
European Union
Collect SVHC Declarations from Every Supplier—Without the Chasing
PPWR (EU) 2025/40; REACH
GET EVIDENCE IN
IN FORCE
GET EVIDENCE IN
What's required:
PPWR's PFAS limits for food-contact packaging apply from August 12, 2026, alongside declaration-of-conformity obligations with no grace period. Separately, the ECHA universal PFAS restriction proposal under REACH remains in progress and would operate at a far broader scale if adopted.
When:
August 12, 2026 - PPWR applies
REACH universal restriction still under evaluation.
Collect SVHC Declarations from Every Supplier—Without the Chasing
GET EVIDENCE IN
GET EVIDENCE IN
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
Collect SVHC Declarations from Every Supplier—Without the Chasing
GET EVIDENCE IN
GET EVIDENCE IN
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
Collect SVHC Declarations from Every Supplier—Without the Chasing
GET EVIDENCE IN
GET EVIDENCE IN
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
Collect SVHC Declarations from Every Supplier—Without the Chasing
GET EVIDENCE IN
GET EVIDENCE IN
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
Collect SVHC Declarations from Every Supplier—Without the Chasing
GET EVIDENCE IN
GET EVIDENCE IN
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
Collect SVHC Declarations from Every Supplier—Without the Chasing
GET EVIDENCE IN
GET EVIDENCE IN
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
CORA launches targeted campaigns to collect substance-level REACH supplier declarations, follows up automatically, and accepts responses in any format.
Why PFAS reporting breaks spreadsheets.
The hard part was never the filing. It's proving what is in a product when the answer sits four tiers down a supply chain that never had to disclose it before.
The hard part was never the filing. It's proving what is in a product when the answer sits four tiers down a supply chain that never had to disclose it before.
A dedicated partner manager
who knows your business, your team, and your goals
Reporting is per component, not per product
Minnesota wants each PFAS named, its concentration, and the function it performs — for every component. A single SKU can generate dozens of line items. PRISM listed over 21,000 items across all filers by mid-August.
Suppliers answer slowly, or not at all
A dedicated partner manager
Most PFAS data has to be requested from tier-two and tier-three suppliers who have no obligation to respond quickly. Documented due diligence matters as much as the answer itself.
who knows your business, your team, and your goals
Definitions don't line up across states
A dedicated partner manager
"Intentionally added" is defined differently state to state, fluoropolymers are exempt in New Mexico but not elsewhere, and California measures total organic fluorine in ppm rather than intent. One answer does not fit all filings.
who knows your business, your team, and your goals
Reported data becomes public
A dedicated partner manager
Everything except approved trade secret claims is published in PRISM and readable by anyone without an account — customers, competitors, plaintiffs' counsel and NGOs included.
who knows your business, your team, and your goals
The report is not the finish line
A dedicated partner manager
Minnesota requires annual updates every February 1 and new reports for new products. New Mexico adds labeling in 2027. California's textile threshold halves in 2027. The dataset has to stay live.
who knows your business, your team, and your goals
Best available information is acceptable - if you can show your work
A dedicated partner manager
MPCA has acknowledged manufacturers may report on best available information while continuing to pursue supplier data. That only holds up if the pursuit is documented.
who knows your business, your team, and your goals
A dedicated partner manager
who knows your business, your team, and your goals
Reporting is per component, not per product
Minnesota wants each PFAS named, its concentration, and the function it performs — for every component. A single SKU can generate dozens of line items. PRISM listed over 21,000 items across all filers by mid-August.
Suppliers answer slowly, or not at all
Most PFAS data has to be requested from tier-two and tier-three suppliers who have no obligation to respond quickly. Documented due diligence matters as much as the answer itself.
Definitions don't line up across states
"Intentionally added" is defined differently state to state, fluoropolymers are exempt in New Mexico but not elsewhere, and California measures total organic fluorine in ppm rather than intent. One answer does not fit all filings.
Reported data becomes public
Everything except approved trade secret claims is published in PRISM and readable by anyone without an account — customers, competitors, plaintiffs' counsel and NGOs included.
The report is not the finish line
Minnesota requires annual updates every February 1 and new reports for new products. New Mexico adds labeling in 2027. California's textile threshold halves in 2027. The dataset has to stay live.
Best available information is acceptable - if you can show your work
MPCA has acknowledged manufacturers may report on best available information while continuing to pursue supplier data. That only holds up if the pursuit is documented.
How CORA gets you there.
CORA is Certivo's deterministic compliance engine. Same five stages whether the obligation is PFAS, PPWR or REACH - which is why the data you collect once keeps paying out.
CORA is Certivo's deterministic compliance engine. Same five stages whether the obligation is PFAS, PPWR or REACH - which is why the data you collect once keeps paying out.
CORA is Certivo's deterministic compliance engine. Same five stages whether the obligation is PFAS, PPWR or REACH - which is why the data you collect once keeps paying out.
CORA is Certivo's deterministic compliance engine. Same five stages whether the obligation is PFAS, PPWR or REACH - which is why the data you collect once keeps paying out.
It's a loop, not a checklist. The February 1 annual update should be a review, not a rebuild.
It's a loop, not a checklist. The February 1 annual update should be a review, not a rebuild.
Capture
Capture
Ingest BOMs, specifications, SDSs, supplier declarations and test reports in whatever format they exist today.
Ingest BOMs, specifications, SDSs, supplier declarations and test reports in whatever format they exist today.
Analyze
Analyze
Parse documents, extract substance identity and concentration, and map results to products and components.
Parse documents, extract substance identity and concentration, and map results to products and components.
Validate
Validate
Check every claim against the specific rule that applies - reporting scope, thresholds, exemptions - and flag the gaps.
Check every claim against the specific rule that applies - reporting scope, thresholds, exemptions - and flag the gaps.
Assure
Assure
Produce the filing and the audit trail behind it: what was claimed, on what evidence, verified when and by whom.
Produce the filing and the audit trail behind it: what was claimed, on what evidence, verified when and by whom.
Monitor
Monitor
Re-screen every BOM as substance lists, exemptions and templates change, then reopen the loop at Capture.
Re-screen every BOM as substance lists, exemptions and templates change, then reopen the loop at Capture.
Frequently Asked Questions
Minnesota is 26 days away. Is it too late to start?
No, but the shape of the work changes. The extension window closed on August 16, so for most manufacturers September 15 is now the operative date. MPCA has said manufacturers may report on the best information available by the deadline and keep working suppliers afterwards. What matters is that the report goes in and that your due diligence is documented. We prioritize scoping and filing first, then close the data gaps behind it.
Do we have to report if we only sell online into Minnesota?
Yes. The obligation covers products sold, offered for sale or distributed in the state, and MPCA has been explicit that online-only sales are included. Where a brand owner or producer has no US presence, the obligation can fall to the importer or first domestic distributor.
What happened to the federal TSCA October 2026 deadline?
It no longer applies. In April 2026 EPA finalized a change moving the start of the submission period to 60 days after the effective date of its forthcoming revised rule, with a backstop start of January 31, 2027. The window has not opened. Because the rule reaches back to January 1, 2011 with no de minimis threshold, the data assembly work is substantial regardless of when the window opens — and the proposed article-importer exemption is not final.
We don't add PFAS. Do we still have an obligation?
Frequently, yes — because the question is whether PFAS is intentionally added anywhere in the product, including by your suppliers, in coatings, seals, membranes, inks, lubricants or plated components. Most manufacturers who assume they are out of scope have not yet asked tier two. Scoping is the first thing we do, and a defensible "we are not in scope" conclusion is a legitimate outcome.
Can we protect confidential formulation data?
Minnesota provides a trade secret claim mechanism, and data granted that status is withheld from public view. Everything else, including your designated public contact, becomes publicly readable in PRISM after MPCA review. We flag what will be public before you file, not after.
Does this extend beyond PFAS?
That's the point of collecting it properly once. The same component-level substance data supports EU PPWR, REACH, RoHS, SCIP and EPR reporting. Additional frameworks are quoted as added scope, but you won't be re-collecting the underlying data.
Minnesota is 26 days away. Is it too late to start?
No, but the shape of the work changes. The extension window closed on August 16, so for most manufacturers September 15 is now the operative date. MPCA has said manufacturers may report on the best information available by the deadline and keep working suppliers afterwards. What matters is that the report goes in and that your due diligence is documented. We prioritize scoping and filing first, then close the data gaps behind it.
Do we have to report if we only sell online into Minnesota?
Yes. The obligation covers products sold, offered for sale or distributed in the state, and MPCA has been explicit that online-only sales are included. Where a brand owner or producer has no US presence, the obligation can fall to the importer or first domestic distributor.
What happened to the federal TSCA October 2026 deadline?
It no longer applies. In April 2026 EPA finalized a change moving the start of the submission period to 60 days after the effective date of its forthcoming revised rule, with a backstop start of January 31, 2027. The window has not opened. Because the rule reaches back to January 1, 2011 with no de minimis threshold, the data assembly work is substantial regardless of when the window opens — and the proposed article-importer exemption is not final.
We don't add PFAS. Do we still have an obligation?
Frequently, yes — because the question is whether PFAS is intentionally added anywhere in the product, including by your suppliers, in coatings, seals, membranes, inks, lubricants or plated components. Most manufacturers who assume they are out of scope have not yet asked tier two. Scoping is the first thing we do, and a defensible "we are not in scope" conclusion is a legitimate outcome.
Can we protect confidential formulation data?
Minnesota provides a trade secret claim mechanism, and data granted that status is withheld from public view. Everything else, including your designated public contact, becomes publicly readable in PRISM after MPCA review. We flag what will be public before you file, not after.
Does this extend beyond PFAS?
That's the point of collecting it properly once. The same component-level substance data supports EU PPWR, REACH, RoHS, SCIP and EPR reporting. Additional frameworks are quoted as added scope, but you won't be re-collecting the underlying data.
Get Compliant Fast
Get Compliant Fast
Get Compliant Fast
Get Compliant Fast
Fifteen minutes is usually all it takes to establish whether you are in scope for Minnesota, what your filing looks like, and what can realistically be done before September 15.
Fifteen minutes is usually all it takes to establish whether you are in scope for Minnesota, what your filing looks like, and what can realistically be done before September 15.
Fifteen minutes is usually all it takes to establish whether you are in scope for Minnesota, what your filing looks like, and what can realistically be done before September 15.
Book a 15-min call
Book a 15-min call
Book a 15-min call