Digital Footprint Audit

Purpose

This audit maps the publicly indexed digital footprint of the National Center for American Indian Enterprise Development (NCAIED, EIN 95-2627645) across federal agencies, state regulators, nonprofit aggregators, certificate-transparency logs, the Wayback Machine, and NCAIED's own web properties.

What can anyone with a search engine learn about your organization in 30 minutes?

For a nonprofit the size of NCAIED (roughly $9M annual revenue, 30 staff, seven offices, a flagship conference drawing 5,000 attendees), the answer is: a complete financial profile, the full board, the executive team, the federal cooperative-agreement portfolio, 27 years of archived web history, and every major corporate partnership. That is not a failure of the organization. For a 501(c)(3) that stewards federal program funds, a legible public footprint is a feature. The question this audit asks is whether the footprint is shaped on purpose or by accident.

Methodology

Eight parallel research agents queried:

1. Advanced search (dorking): Google, DuckDuckGo, site-restricted queries across ncaied.org, sba.gov, mbda.gov, congress.gov, federalregister.gov, gao.gov, irs.gov, and propublica.org/nonprofits.
2. Wayback Machine: web.archive.org CDX API against ncaied.org and every discovered subdomain.
3. Certificate Transparency: crt.sh (unavailable, 502) plus Certspotter and live TLS inspection.
4. Federal funding: USASpending.gov, ProPublica Nonprofit Explorer, SAM.gov, grants.gov, SBA, MBDA, BIA.
5. Legal and regulatory: CourtListener, Justia, JudyRecords, Arizona Corporation Commission eCorp, Federal Register, docs.house.gov, LegiStorm.
6. Infrastructure: live DNS (dig), HTTP header inspection, CMS fingerprinting, MX record analysis.
7. Disaster and environmental: FEMA, EPA ECHO, USGS (N/A for office-tenant nonprofit).
8. Media and narrative: Indianz, ICT News, Tribal Business News, Native News Online, Morningstar, mainstream financial press.

Findings

1. Governance and Sensitive Documents

Queries executed:

"National Center for American Indian Enterprise Development" filetype:pdf "confidential" OR "internal"
"NCAIED" filetype:pdf "agreement" OR "contract" OR "MOU" OR "memorandum"
"National Center for American Indian Enterprise Development" filetype:pdf "bylaws" OR "articles of incorporation"

Assessment: CLEAN
Summary: No internal bylaws, articles of incorporation, MOUs, or documents marked "confidential/internal" surfaced. Only intentional public-facing governance material appeared. No accidental exposure.

2. Personnel and PII Exposure

Queries executed:

"NCAIED" filetype:csv OR filetype:xlsx "member" OR "directory" OR "roster"
site:ncaied.org filetype:pdf "staff" OR "board" OR "directory"

Assessment: CLEAN
Summary: No CSV/XLSX roster leaks. Personnel exposure is limited to intentional bios. No emails, phone numbers, or internal org charts surfaced via dorking.

3. Financial Documents

Queries executed:

"National Center for American Indian Enterprise Development" filetype:pdf "990" OR "audit" OR "annual report"
"NCAIED" site:propublica.org/nonprofits
"National Center for American Indian Enterprise Development" 990 site:irs.gov

Historical revenue trend (from ProPublica 990s):

Top executive compensation: Chris James, President/CEO, $324,754 total ($312,231 base + $12,523 other).

Assessment: LOW
Summary: Financial transparency is robust and intentional. Form 990s are indexed at four major nonprofit aggregators, Annual Reports for 2022 and 2023 are self-published. No audit, budget, or internal financial statements leaked outside normal 990 disclosure channels. The 3.5x revenue step-change between FY2021 and FY2022 is publicly reconstructable and lines up with the MBDA Business Center cooperative-agreement cycle.

4. Federal Funding and Contracts

USASpending Recipient Profile:

• URL: usaspending.gov/recipient/a85bb4b7-d4b5-322f-d661-2525c39ac9f6-R/latest
• Recipient ID: a85bb4b7-d4b5-322f-d661-2525c39ac9f6-R
• Significance: dedicated federal-recipient profile; every prime award NCAIED has ever received is aggregated here.

Active federal cooperative agreements and grants:

Subsidiary and affiliate entities identified:

Assessment: MEDIUM-HIGH
Summary: NCAIED's federal exposure is substantial, documented, and entirely reputation-enhancing. A dedicated USASpending recipient profile anchors the portfolio, and ProPublica holds 14 years of digitized 990s confirming revenue primarily sourced from three federal cooperative agreements across Commerce, DOI, and SBA. The highest-value finding is Native Edge Finance, a separate-legal-entity CDFI affiliate participating in the $400M EPA Clean Communities Investment Accelerator. That affiliate materially expands the organization's public footprint beyond the parent 990 and should be tracked as its own entity.

5. Legal and Regulatory Records

Incorporation and governance:

Litigation and court records:

Federal Register mentions (cooperative, not adversarial):

Congressional testimony:

Assessment: LOW
Summary: Clean public signal across court, regulatory, and Inspector General databases. No litigation, no GAO audits, no consent decrees. The federal relationship is cooperative: NCAIED is a named MBDA program operator across multiple Federal Register notices from 2003 to 2024, the CEO holds a federal advisory appointment, and the board chair testifies on Indian Country economic policy. One gap: the Arizona Corporation Commission entity record is not directly linked in search and would require a manual eCorp lookup.

6. Infrastructure and Technical Surface

DNS Configuration (ncaied.org):

Infrastructure profile:

Subdomain inventory:

Assessment: LOW-MEDIUM
Summary: Turnkey nonprofit stack: Firespring for the public site, Microsoft 365 for mail with SPF and DMARC at quarantine (above-average email hygiene for this org size), and a white-label event platform at res.ncaied.org for RES. Notable finding: four legacy subdomains (globaltrade, business, edge, new) are still indexed by search engines and still present in public materials but no longer resolve. The DMARC report mailbox dandyit@ncaied.org implies a designated IT contact or an outsourced MSP.

7. Certificate Transparency

Domains analyzed: ncaied.org, globaltrade.ncaied.org, business.ncaied.org

Certificate summary (visible window via Certspotter; crt.sh was unreachable):

Assessment: LOW
Summary: Small, modern, mainstream-hosted surface. No wildcard certs, no bundled multi-SAN certs (each subdomain gets its own narrow cert, which is good hygiene and limits subdomain leakage via CT). The primary historical-enumeration gap is that crt.sh was unreachable during the audit window.

8. Wayback Machine Archive

Domains queried: ncaied.org, globaltrade.ncaied.org, business.ncaied.org, edge.ncaied.org, res.ncaied.org

Archive summary:

Notable archived paths:

• http://ncaied.org/nationalcenter/login.taf?function=form — Legacy Tersus Application Framework login; system decommissioned but path still indexed
• http://ncaied.org/board-of-directors.php — Historical PHP board page
• http://ncaied.org/staff.htm — Historical staff listing
• http://ncaied.org/ncaied-staff-locations/ — Historical office locations

Assessment: LOW
Summary: 27 years of archived history (since 1998) makes NCAIED's earlier strategic posture and leadership changes reconstructable from Wayback. Nothing sensitive was exposed, but the persistence of legacy login paths (.taf, .php) in the public index is a reminder that retired CMS systems leave crawlable trails.

9. Media and Public Narrative

News coverage (recent 2 years):

Leadership:

Major partnerships and sponsors:

Flagship events:

Assessment: MEDIUM-HIGH
Summary: NCAIED is the preeminent national Native business-development nonprofit. Public narrative is overwhelmingly institutional and positive. Chris James and Derrick Watchman are the two public voices. Current priorities are federal policy advocacy, tourism expansion (Aambe), Indigenous agriculture, and navigating Trump administration policy impacts. The only meaningful friction point is the Keeler Substack open letter on RES 2026 vetting; otherwise coverage is uniformly favorable.

10. Disaster and Environmental

NCAIED is a 501(c)(3) office tenant at 953 E Juanita Ave, Mesa, AZ with nationwide programmatic scope. It operates no facilities subject to environmental regulation and has no direct FEMA partnership. Light-touch disaster-adjacent activity: during the pandemic NCAIED compiled third-party COVID-19 contracting resources and its standard technical-assistance mission points Native entrepreneurs toward SBA disaster loans.

Assessment: CLEAN (N/A)
Summary: No meaningful environmental or disaster footprint.

Risk Summary

Overall footprint assessment: SIGNIFICANT

NCAIED's digital footprint is significant in size but appropriate in posture. A 501(c)(3) of this scale operating federal cooperative agreements should be legible on USASpending, on ProPublica Nonprofit Explorer, on Federal Register notices, and on the congressional record. The audit did not surface a single document, PII record, or infrastructure exposure that appeared unintentional.

Recommendations

Immediate Actions

1. Retire dead legacy subdomains from public materials. globaltrade.ncaied.org, business.ncaied.org, edge.ncaied.org, and new.ncaied.org are still linked in Google search results and third-party pages but no longer resolve. Either restore DNS with a redirect to a current page, or scrub external references so visitors don't hit dead ends.
2. Confirm Arizona Corporation Commission entity record. A manual eCorp search should confirm articles of incorporation, current registered agent, and statutory agent history. If the registered agent has turned over, update third-party aggregators accordingly.
3. Audit the DMARC report pipeline. The dandyit@ncaied.org mailbox receives all DMARC reports. Confirm this mailbox is monitored and the reports are actually being read.
4. Document Native Edge Finance's public footprint separately. As a standalone legal entity operating in the $400M EPA CCIA pipeline, NEF has its own compliance and disclosure surface.

Ongoing Monitoring

1. Quarterly review of the USASpending recipient profile to catch new prime or sub-awards.
2. Annual certificate-transparency audit once crt.sh is accessible again.
3. Google Alerts on NCAIED and Native Edge Finance to catch critical coverage early.

Strategic Considerations

1. The 27-year Wayback footprint is an asset. Consider linking to a curated Wayback timeline on the About page to reinforce institutional history.
2. The three-way federal cooperative-agreement portfolio (MBDA, BIA, SBA) is publicly reconstructable. Have a narrative ready for "what happens when the MBDA Business Center agreement ends in August 2026?"
3. RES is the highest-value public-facing asset. The Substack open letter on speaker vetting is a soft signal that the 5,000-attendee convening attracts accountability pressure. A documented vetting/sponsorship policy would convert that pressure into a reputational asset.

What This Means

Donor and grant transparency is not only about what you disclose. It is about knowing what federal systems, nonprofit aggregators, and third-party watchdogs have already disclosed on your behalf, and what picture it creates when assembled. NCAIED's public footprint, once assembled, tells a coherent and flattering story: a 27-year-old institution stewarding federal economic-development funds for Indian Country, with clean governance, no litigation, growing corporate philanthropy, and a 5,000-person annual convening that sets the regional agenda. The recommendations in this audit are small corrections to a strong posture, not remediation of exposure.