Regulations library

The research security rulebook, in plain English.

Requirements are arriving faster than most compliance offices can track them. This library explains each mandate (who is covered, what it requires, the dates that matter, and what institutions should do) in language you can forward to a dean. Reviewed monthly against primary sources.

NSPM-33 & research security program certification

Expected 2026–27

National Security Presidential Memorandum 33 directs federal agencies to require research security programs from institutions receiving more than $50 million in federal science funding.

Final requirements expected Winter 2026
Last reviewed: 2026-07-18

The CHIPS & Science Act research-security provisions

In force

The CHIPS and Science Act of 2022 codified NSPM-33-style requirements into law, including required research security training, disclosure requirements, and MFTRP prohibitions.

In effect since Aug 9, 2022
Last reviewed: 2026-07-18

The NIH Research Security Training requirement, explained

In force

NIH Guide Notice NOT-OD-26-017 requires every senior/key person on an NIH application with a due date on or after May 25, 2026 to have completed research security training within the previous 12 months.

Effective May 25, 2026 · NOT-OD-26-017
Last reviewed: 2026-07-18

Common Forms & SciENcv: the 2026 disclosure standard

In force

NIH (and NSF) applications require personally certified biosketch and current-and-pending disclosures produced in SciENcv, with ORCID linked to eRA Commons. Rolled out in three phases in 2026; system enforcement began May 8, 2026.

Phased enforcement completed May 8, 2026
Last reviewed: 2026-07-18

Malign Foreign Talent Recruitment Programs (MFTRP): certification & prohibitions

In force

The CHIPS Act prohibits federal research funding to individuals participating in a malign foreign talent recruitment program, and requires institutions to certify no covered individuals participate.

Effective across agencies, 2024–2025
Last reviewed: 2026-07-18

False Claims Act enforcement in university research: a living tracker

Active enforcement

The federal False Claims Act is now the primary enforcement vehicle for research disclosure failures. Settlements since 2020, with institution, year, amount, and DOJ link, updated as they're announced.

Living tracker · updated as settlements are announced
Last reviewed: 2026-07-18
Founding Partner Program

Explainers ground the strategy. Verification grounds the certification.

If your institution certifies federal research disclosures, a briefing walks through verification on realistic examples — in about 30 minutes.