# The United States: six sources, companies to sanctions

**Published:** September 8, 2026 | **Authors:** Cristian Correa

---

The United States is live on Croma. Six sources, fifteen endpoints and one key: who exists as a company, who raised money, who manages that money, what they hold publicly, and who you may not deal with. Every endpoint is also an MCP tool, so an agent can call them without you writing a client.

## The six sources

| Source | What it answers |
| --- | --- |
| Sunbiz (Florida) | 12.9 million entities in Florida's business registry, by name, officer or registered agent |
| SEC Form D | 774,140 private fundraise notices since 2008: startup rounds and fund closes |
| Delaware Division of Corporations | Every entity formed or registered in Delaware, where most US startups and funds are incorporated |
| SEC Form ADV | 23,845 investment advisers the SEC oversees and the 198,023 private funds they manage |
| SEC Form 13F | 397,833 quarterly reports from institutional managers since 2013, with their public positions |
| OFAC Sanctions | 19,846 people, companies, vessels and aircraft designated by the US Treasury |

## They read together

Each source answers well on its own, but the value is in crossing them, and they share the identifiers that let you.

A manager's CRD number appears on both its Form 13F and its Form ADV, so one firm reads whole: who it is, which private funds it runs, and what it holds publicly. Each private fund carries the file numbers of its Form D notices, which tie it back to the rounds it raised. From a firm to its funds, and from a fund to its fundraise, without leaving the API.

## An example

Every institutional manager that reports holding a stock, largest first. The CUSIP identifies the security, so every manager reports it under the same key:

```bash
curl https://api.croma.run/us/sec-13f/holdings-search/v1 \
  -H "Authorization: Bearer $CROMA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "cusip": "037833100",
    "min_value": 500000000
  }'
```

That CUSIP is Apple, and the top of the list is Vanguard, State Street and BlackRock with what they reported that quarter. Swap the `cusip` for another security, or pass a `manager_cik` instead, and you get one manager's whole book.

Every response carries `as_of`, the date the data is current to, so you never have to guess. The adviser registry is brought up to date daily and so are the sanctions lists, which means a party OFAC delists stops appearing the same day.

## What you can ask today

Who holds a stock and how much, by CUSIP or by issuer name. Which funds a venture firm manages and how big they are. Which companies were formed in Delaware or Florida, and who their registered agent is. Who raised money this week and for how much. And whether a name, or any alias it goes by, sits on a sanctions list, with the detail OFAC records about that party.

The guides carry every field: [Sunbiz](https://docs.usecroma.com/guides/united-states/sunbiz), [Form D](https://docs.usecroma.com/guides/united-states/sec), [Delaware](https://docs.usecroma.com/guides/united-states/delaware), [Form ADV](https://docs.usecroma.com/guides/united-states/iapd), [Form 13F](https://docs.usecroma.com/guides/united-states/sec-13f) and [OFAC](https://docs.usecroma.com/guides/united-states/ofac). You can try them without writing code in [the tools](/us/tools/sec-private-fund-search), which are free and need no account.

---

**More updates:** [View all changelog entries](/en/changelog/sitemap.md) | [Croma](https://usecroma.com)
