Digital Footprint Audit

Purpose

This audit maps the publicly indexed digital footprint of the Northwest Native Chamber (NWNC) across federal spending portals, IRS 990 aggregators, state incorporation records, certificate transparency logs, court records, FEMA/EPA records, media coverage, and the entity's own web properties.

What can anyone with a search engine learn about your organization in 30 minutes?

For a 501(c)(3) that receives a material share of its revenue through federal cooperative agreements and grants, the honest answer is: quite a bit. Donor and grant transparency is statutorily public. What matters is whether the aggregated picture is the one you would choose to present, and whether the supporting infrastructure (web, email, brand identity) matches the professionalism of the mission.

Methodology

The following public sources were queried between 2026-04-22 and 2026-04-23:

• Federal spending: USASpending.gov, FPDS, SAM.gov
• IRS/nonprofit: ProPublica Nonprofit Explorer, GuideStar / Candid, Cause IQ
• Certificate transparency: crt.sh
• Web archive: Wayback Machine CDX API
• Courts: CourtListener, Justia, JudyRecords
• State/federal regulatory: Oregon SOS, Oregon DOJ Charities, Federal Register
• FEMA / EPA: FEMA.gov, EPA ECHO / Envirofacts
• Media: OregonLive, OPB, KGW, Underscore Native News, ICT News, InvestigateWest, Salem Reporter, PDX Pipeline, Tribal Business News
• DNS / infrastructure: dig, curl -sI against nwnc.org and its subdomains

Eight specialized reconnaissance agents executed in parallel across these dimensions. All findings below include clickable source URLs to allow verification.

Findings

Governance & Sensitive Documents

Queries used:

"Northwest Native Chamber" filetype:pdf "bylaws" OR "articles of incorporation" OR "MOU"
"Oregon Native American Chamber" filetype:pdf "confidential" OR "internal" OR "not for distribution"
"NWNC" OR "ONAC" filetype:pdf "agreement" OR "contract" OR "memorandum" site:nwnc.org
"Northwest Native Chamber" "Oregon DOJ" OR "charitable activities" filetype:pdf
site:nwnc.org OR site:nnapex.org filetype:pdf

Assessment: CLEAN Summary: No bylaws, articles of incorporation, board minutes, MOUs, or confidentially marked documents were indexed on the entity's own domains or on third-party servers. Governance documents appear properly scoped to internal channels.

Personnel & PII Exposure

Queries used:

"Northwest Native Chamber" filetype:csv OR filetype:xlsx "member" OR "roster" OR "directory" OR "staff"
"Northwest Native Chamber" filetype:pdf "staff list" OR "phone directory" OR "org chart" OR "salary"
"Northwest Native Chamber" "executive director" OR "board of directors" email contact

Assessment: MEDIUM Summary: No CSV/XLSX roster, staff list, org chart, or salary table is exposed on the entity's own domain. However, four commercial data brokers have scraped and republished staff names, emails, and phone numbers. This is ambient exposure that affects most small nonprofits and is not the entity's own leak, but formal opt-out requests would materially reduce the footprint.

Financial Documents

Queries used:

"Northwest Native Chamber" OR "Oregon Native American Chamber" filetype:pdf "budget" OR "audit" OR "financial statement"
"Northwest Native Chamber" OR "Oregon Native American Chamber" filetype:pdf "990" OR "annual report"
"Northwest Native Chamber" OR "Oregon Native American Chamber" site:propublica.org
"Northwest Native Chamber" OR "Oregon Native American Chamber" site:candid.org OR site:guidestar.org

Assessment: LOW Summary: All surfaced financial documents are statutorily public 990 filings republished by standard nonprofit aggregators. No audited financial statements, internal budgets, grant ledgers, or salary schedules beyond the 990 Schedule J disclosures were indexed. This footprint is expected and appropriate for a 501(c)(3).

Federal Funding & Contract Records

Queries used:

site:usaspending.gov "Northwest Native Chamber"
site:usaspending.gov "Oregon Native American Chamber"
USASpending API recipient/award searches (all variants)
"Northwest Native Chamber" MBDA grant award Portland
"NNAPEX" OR "Northwest Native APEX" funding
"Northwest Native Chamber" site:taggs.hhs.gov
"Northwest Native Chamber" site:sam.gov

USASpending Recipient Profile:

• URL: usaspending.gov/recipient/b9968ae5-b4d3-94db-cbe7-4d49d7834bd3-R
• Registered legal name: OREGON NATIVE AMERICAN CHAMBER (not the current brand "Northwest Native Chamber")
• UEI: N2TJXJD1HDA6 | DUNS: 783839348
• Significance: The rebrand has not propagated to federal registrations. All SAM, USASpending, MBDA, and DoD records still reference "Oregon Native American Chamber." Searches under the current brand return zero. This is a material name-collision hazard for any due diligence performed using only the current name.

Funding Records Found (2021-2026):

Total federal funding 2021-2026: $3,669,627

By agency:

• Small Business Administration (congressional earmarks): $1,174,000
• Department of Defense (APEX Accelerator + DLA PTAP): $1,169,627
• Department of Commerce / MBDA: $900,000
• Department of Labor / Employment & Training Admin: $426,000

Assessment: MEDIUM-HIGH Summary: The federal funding portfolio is fully reconstructable from public records under the legal name "Oregon Native American Chamber." 2023 IRS 990 revenue of $3.28M matches the federal award cadence, meaning NWNC is substantially dependent on federal cooperative agreements for its operating budget. The portfolio is diversified across four agencies and three program categories (procurement TA, minority business development, workforce training). Disruption to any single pipeline — particularly the DoD APEX line — would be material.

Legal & Regulatory Records

Queries used:

"Northwest Native Chamber" site:sos.oregon.gov
"Oregon Native American Chamber" site:sos.oregon.gov
"Northwest Native Chamber" site:courtlistener.com OR site:law.justia.com
"Oregon Native American Chamber" lawsuit OR litigation OR complaint
"Northwest Native Chamber" site:federalregister.gov
"Northwest Native Chamber" OIG OR audit OR "inspector general"

Incorporation / Charitable Registration:

Litigation / Court Records:

Regulatory Filings:

Assessment: CLEAN Summary: Clean legal posture typical of a well-run 501(c)(3). No litigation in any court database under any name variant. No regulatory enforcement. Federal relationship is as a grantee/cooperative-agreement counterparty rather than a regulated entity or Federal Register commenter.

Wayback Machine Archive

Queries used:

CDX API: url=nwnc.org/* (pages, PDFs, timestamps)
CDX API: url=onac.org/* (legacy domain check)
Path filters: admin, config, backup, login, wp-admin

Archive Summary:

Notable archived paths:

Assessment: LOW Summary: NWNC runs a WordPress multisite install with BuddyPress 11.1.0 and Google Site Kit, archived continuously 2010-2024 with a moderate 6,068-URL corpus but only 9 unique PDFs — a light-publisher profile where most content is pages, not documents. The footprint-reduction finding is the disclosed admin username adminmichel via the /author/ path, which materially narrows attack surface for targeted credential-stuffing or phishing.

Certificate Transparency

Domain analyzed: nwnc.org

Certificate Summary:

Subdomains Discovered via SANs:

Assessment: LOW Summary: All-Let's Encrypt, auto-renewing TLS across six per-host certificates (no wildcards) reveals six distinct program subdomains. The subdomain surface maps cleanly to discrete federally funded programs — a mature pattern that expands surface per program but is cleanly separated. Dual ECDSA+RSA issuance indicates competent modern hosting.

Infrastructure & Technical Surface

Domain analyzed: nwnc.org

DNS Configuration:

Infrastructure Profile:

Assessment: LOW Summary: A consolidated, professionally managed stack: one WP Engine WordPress install (likely multisite) fronted by Cloudflare, with Google Workspace email and Google Cloud DNS. All five program subdomains resolve to identical WP Engine edge IPs — meaning program sites share a single managed footprint rather than sprawling across ad-hoc CMSes. Maturity gaps are light-touch (no CAA record, no DMARC, partial HTTP security headers).

Disaster & Environmental

Queries used:

"Northwest Native Chamber" FEMA disaster
"Northwest Native Chamber" SBA disaster loan
"Northwest Native Chamber" site:epa.gov
"Multnomah County" FEMA disaster declaration 2024 2025 2026

FEMA Declarations (jurisdiction):

Environmental / EPA Records:

Assessment: LOW Summary: Minimal own-facility disaster footprint. Portland HQ sits in Multnomah County, included in two recent Oregon major disaster declarations, but NWNC is a community co-presenter (with FEMA and SBA ODRR) rather than an aid recipient. The one material environmental entanglement is that NWNC's Center for Tribal Nations project had a $300K Climate United/NEXT pre-development grant (EPA GGRF pass-through) frozen when EPA terminated the $20B GGRF program. The active NCWI clean-energy workforce program is funded by Portland Clean Energy Fund (municipal), which insulates it from federal EPA/DOE policy risk.

Media & Public Narrative

Queries used:

"Northwest Native Chamber" news 2024 2025 announcement
"Oregon Native American Chamber" Portland rebrand
"Northwest Native Chamber" executive director CEO president
"James Parker" "Northwest Native Chamber" CEO
"Center for Tribal Nations" Portland waterfront
"Native Clean Energy Workforce Initiative" NCWI GRID Alternatives
site:underscore.news / site:opb.org / site:ictnews.org — "Northwest Native Chamber"

News Coverage:

Public Statements:

Leadership Names Discovered:

Assessment: CLEAN Summary: The public narrative is uniformly positive, program-focused, and visibly in growth mode (1994 Oregon chamber → 2024-2025 tri-state identity with a signature waterfront capital project). No controversy, litigation, or financial scandal surfaces. The one "challenge" narrative is defensive — Parker publicly fighting in 2025 to preserve Oregon's TAP program from legislative cuts. Decision-making is visibly concentrated in CEO James Alan Parker (Chippewa Cree), who is the sole consistent spokesperson across every article, program launch, and municipal bio. The board roster is not publicly disclosed, which is notable for a grantee organization at this funding scale.

Risk Summary

Overall footprint assessment: MODERATE

For a 501(c)(3) at NWNC's federal-funding scale, this is what "doing it right" mostly looks like: no leaks, no litigation, a coherent managed hosting stack, and a positive public narrative. The items that move the overall rating from LOW to MODERATE are concentrated in three areas: (1) the discoverable federal funding portfolio (expected and statutorily mandated — but worth understanding from a competitive intelligence perspective), (2) the rebrand/legal-name mismatch that complicates due diligence by outside parties, and (3) operational hygiene items (admin username disclosure, DMARC absence, data broker opt-outs) that are straightforward to address.

Recommendations

Immediate Actions

1. Rebrand the federal legal identity. File the name change with the Oregon Secretary of State, the IRS (Form 8822-B), and SAM.gov so the "Northwest Native Chamber" brand matches the registered recipient name. Today, any funder, partner, or journalist searching USASpending under the current brand finds nothing.
2. Remove the leaked WordPress admin username. The /author/adminmichel/ page exposes the admin username via WP's default author archive behavior. Rename the account (or map the author slug to something non-obvious) and consider installing an "Edit Author Slug" plugin or equivalent.
3. Request removal from commercial data brokers. Submit formal opt-out requests to ContactOut, RocketReach, Wiza, and ZoomInfo for both the organization and named staff. Not fully eliminable, but materially reducible.
4. Add DMARC policy at the apex domain. SPF is configured (soft-fail); DMARC is missing. A starter v=DMARC1; p=none; rua=mailto:... record gives visibility into spoofing attempts without blocking legitimate mail.
5. Consider a CAA record. Today any public CA can issue a certificate for nwnc.org. Pinning to Let's Encrypt via a CAA record forecloses unauthorized issuance.

Ongoing Monitoring

1. Quarterly USASpending check. Confirm that award metadata (UEI, recipient name, NAICS) stays consistent as the rebrand propagates.
2. Semi-annual Wayback review. Scan /wp-content/uploads/ for documents that should not have been public-facing (procurement RFPs, member lists, internal templates).
3. Annual DNS/TLS posture review. Verify DMARC coverage, CAA record, and security headers across all program subdomains.

Strategic Considerations

1. Board transparency. GuideStar and nwnc.org both lack a public board roster. For a federal grantee at the $3.67M scale, publishing names (at minimum, chair and officers) is standard fiduciary transparency and reduces questions from funders.
2. Program subdomain governance. Six program subdomains share one WordPress install. As programs grow or sunset, define ownership (who renews certs, who maintains content) to avoid orphaned subdomains as staff turns over.
3. Clean energy narrative insulation. The NCWI program is funded by Portland Clean Energy Fund (municipal), which is the right hedge given federal GGRF volatility. Maintain that municipal anchor as the primary narrative, and treat federal clean-energy funding as upside rather than foundation.

What This Means

Donor and grant transparency means your funding portfolio, tax filings, and program outcomes are publicly assembled in ways that shape how funders and the public perceive your organization. For Northwest Native Chamber, the assembled picture is largely favorable — a growing, competent, federally supported economic development nonprofit with a clear mission and a visible public leader. The opportunities for improvement are operational rather than structural: align the federal legal identity with the public brand, close the common hygiene gaps (admin username, DMARC, data broker footprint), and publish the board so outside funders and journalists have the full picture that internal stakeholders already have.

Prepared by Oahe Data. This audit is provided as an informational assessment of publicly available data. No unauthorized access was performed or attempted.