NexusFFL replaces paper, spreadsheets, and a drawer of disconnected tools with one hosted system: acquisitions and dispositions, electronic 4473s with e-signature, a tamper-evident audit trail, and an open API — built directly from ATF Ruling 2016-1.
Free trial, no card required — import your existing bound book by CSV in minutes.
Built condition-by-condition against ATF Rul. 2016-1 and the Doc 25216 approval checklist. This is a sample — see the full platform for every feature area, from e4473 e-signature to the open API.
Every action is hash-chained. Edit or delete a past entry and the chain visibly breaks — verify integrity in one click.
Forms 3310.4 and 3310.12 patterns are flagged automatically, with border-state and rimfire-exemption logic built in.
Tax stamp status, trust/individual, SOT flag, and per-location inventory in one queryable record.
One click assembles a variance-request cover letter and sample printout, ready for your local ATF office.
Hashed passwords, owner/staff roles, per-person attribution — not a shared PIN everyone knows.
Nightly, encrypted, off-box by default — satisfies the daily-backup condition without relying on memory.
Camera-based serial entry for acquisitions, cycle counts, and trace lookups — fewer transcription errors.
Deploy to a U.S. region to meet Ruling 2016-1's on-shore hosting condition — the guide walks you through it.
No fabricated certifications here — just what's actually built in, so you can verify it yourself.
bcrypt at cost 12, 10-char minimum. Never stored in plain text.
HTTPS by default on the recommended hosting path, cookies marked secure & httpOnly.
Every audit entry links to the last. Tampering breaks the chain — visibly.
AES-256, automated, off-box — not a manual habit you might forget.
Owner vs. staff enforced server-side on every request, not just hidden in the UI.
Acquisitions and dispositions are the floor, not the ceiling. Electronic 4473s with e-signature, a hash-chained audit trail, inspector-ready read-only logins, automated multi-sale and theft/loss workflows, and a REST API with signed webhooks for your POS or ERP — it's one connected platform, built condition-by-condition against ATF Ruling 2016-1.
We built NexusFFL the way we wished A&D software actually worked: mapped condition-by-condition to the ATF rulings that govern it, honest about the line between "software feature" and "ATF approval," and built so a correction, a multi-sale, or a theft report produces the paperwork instead of a scramble. It's compliance software written by people who read the ruling, not just the review pages.
Every plan includes the full compliance feature set — tiers scale with volume and staff, not with which features you're allowed to use.
For a single-location shop getting off paper.
For a busy shop or range counter.
For groups holding more than one FFL.
Prefer to run it yourself? NexusFFL is available self-hosted at no license cost — you cover your own hosting and back it up per the included guide.
No, and no A&D software can be pre-approved — ATF evaluates each licensee's request individually per 27 CFR 478.125(h). NexusFFL's "Compliance packet" button generates a sample printout and cover letter for your own variance request to your local Director of Industry Operations.
You deploy your own instance to a U.S. hosting region, which keeps records on U.S. soil per Ruling 2016-1. Only accounts you create can sign in; attachments and records require an authenticated session to access.
They're yours. Export a full CSV of your bound book, or take a database backup, at any time before you cancel.
Yes — every staff member gets their own account (owner or staff role), and every action in the audit log is attributed to whoever was signed in.
Not currently. NexusFFL focuses on giving you accurate records, automated detection, and an audit trail you can stand behind — for legal defense arrangements, talk to your own attorney.
They shouldn't. Ruling 2016-1's condition on database partitioning means each license needs its own separate, dedicated set of records — the Multi-license plan sets this up correctly from the start.
Get started free, generate your first compliance packet today, and decide from there.
Get started free