TrailProof

1. One-liner

Builds the time-and-effort, allowable-cost and procurement evidence a small federal grantee needs to survive a clawback or audit.

2. Trend signal — why now?

Three things moved at once, and they point at the same forgotten actor: the small federal grantee who just lost the one person who used to keep them compliant.

• The Single Audit threshold jumped from $750K to $1M on October 1, 2024 — the first change since 1997. Thousands of community nonprofits, rural clinics, tribal orgs and small local governments that crossed the old line during pandemic funding are now below the new one. They no longer have to commission a Single Audit. But — and this is the whole opportunity — they still owe every Uniform Guidance obligation: time-and-effort documentation, allowable-cost principles, procurement standards, subrecipient monitoring. The Single Audit was the verification mechanism, not the obligation. The auditor who used to catch the gaps is gone; the gaps remain.
• The clawback environment is the worst in a generation. By January 2026, DOGE had terminated 15,887 federal grants totaling ~$49B; 2025 saw nearly $400M in AmeriCorps grants and $500M in DOJ funding clawed back. Congress’s own research service (CRS R48243) calls clawbacks “a core function of the system,” not a rare event. The August 7, 2025 Executive Order plus updated Uniform Guidance and the 2025 OMB Compliance Supplement demand “continuous, documentable” compliance.
• The documentation itself is now AI-tractable. Long-context models can read a 60-page NOFO / award letter, extract every compliance obligation, and generate the defensible artifacts — effort certifications that tie to payroll, allowable-cost determinations, procurement-justification memos — that used to require a grants accountant. That was not true 18 months ago.

The pain is sourced, not hunch: inadequate documentation is the single most common Single Audit finding; time-and-effort and procurement are the top first-time findings; “noncompliance is the leading cause of questioned costs in Single Audits, with salary disallowances routinely reaching six and seven figures.”

Provenance:

• Signal 1 (Demand): Documentation is the #1 Single Audit finding; time-and-effort & procurement are top first-time findings; salary disallowances routinely six/seven figures — https://grantsights.com/blog/time-effort-reporting-grants , https://www.councilofnonprofits.org/running-nonprofit/nonprofit-audit-guidec/federal-law-audit-requirements — 2026-06-30
• Signal 2 (Economic): ~15,887 federal grants / ~$49B terminated by Jan 2026; clawbacks “a core function”; Oct 2024 threshold change to $1M strips small grantees of their auditor — https://www.congress.gov/crs-product/R48243 , https://grantedai.com/blog/single-audit-threshold-1-million-nonprofit-compliance-uniform-guidance-strategy-2026 — 2026-06-30
• Signal 3 (Feasibility): Long-context AI now reads full NOFOs/award letters and drafts effort certs, allowable-cost and procurement docs; small grantees may use “a simple signed activity record” not commercial software — https://grantsights.com/blog/time-effort-reporting-grants — 2026-06-30 Category: Regulatory arbitrage

3. The opportunity

The incumbents in “grant software” sit at the two ends a grantee touches least often and serve them worst in the middle.

• Pre-award writing/matching — Granted AI, Grantable, Instrumentl, FundRobin. They help you win the grant. They do nothing after the money lands. Granted AI’s “compliance” is an IRS check at application time, not post-award documentation.
• Deadline/budget tracking — Instrumentl, AmpliFund, Grant Frog. They tell you when a report is due and whether you’re over budget. They send you a calendar reminder. They do not produce the evidence the auditor or grantor will ask for when they question a cost.

The gap is the middle: the actual defensible paper trail. When a program officer or auditor asks “show me the effort certification that proves Jane’s salary charge,” “show me the three quotes that justify this purchase,” “show me how you allocated this shared cost” — the small grantee has a calendar reminder and a budget dashboard, and a panic attack. An AI-first tool that generates and keeps those artifacts, mapped to the specific obligations in their award, is a 10× better answer than the spreadsheet-plus-prayer the under-$1M grantee runs today.

TrailProof is not a deadline tracker. It’s the file you wish you’d been building all along, built for you, so that the day a clawback notice or monitoring visit arrives you hand over a folder instead of starting one.

4. Target market

• Primary customer: The finance/ops lead or Executive Director of a US nonprofit, rural health clinic, tribal organization, or small special-district/local government spending $100K–$1M/yr in federal awards — i.e., below the new $1M Single Audit threshold but fully bound by Uniform Guidance (2 CFR 200). 1–3 person finance function, no dedicated grants accountant.
• Why they buy: In their words (sourced): they “worry about mistakes in timesheets or procurement files triggering questioned costs,” feel “pressure from program staff wanting to get things done while finance says we cannot charge that,” and are “exhausted from repeatedly explaining why receipts or cost allowability matters.” They are terrified of the “high-risk grantee” label and a repayment demand that could end the org.
• Rough TAM reasoning: There are ~1.8M registered US nonprofits; tens of thousands receive federal pass-through or direct funding in this band, plus thousands of small local governments and tribal entities. Even a conservative serviceable slice of 40,000–60,000 grantees in the $100K–$1M band at $150–300/mo is a >$70M ARR ceiling — comfortably past the $5M target.
• Why now for them: They just fell below the audit threshold (Oct 2024), so the CPA who used to validate their files is no longer engaged — but the clawback wave (2025–26) makes “we’ll wing it” suddenly career-ending. The safety net came off the same year the floor turned to lava.

5. Product sketch (MVP)

• Award ingestion: Upload the NOFO / award letter / grant agreement; TrailProof extracts every compliance obligation (cost principles, reporting cadence, procurement thresholds, match requirements, period of performance) into a plain-English obligation checklist specific to that award.
• Time-and-effort engine: Generates compliant effort certifications that reconcile to payroll, on the grant’s required cadence, with the allocation methodology documented and applied consistently — the thing that produces six-figure findings when it’s missing.
• Allowable-cost screener: For any expense charged to the grant, a quick determination — allowable / unallowable / needs-justification under 2 CFR 200 and the award’s terms — with a saved rationale memo attached to the transaction.
• Procurement-justification builder: Walks micro-purchase / small-purchase / competitive thresholds and produces the documentation file (quotes, sole-source memo, conflict-of-interest attestation) auditors expect.
• Subrecipient monitoring tracker: Lightweight risk assessment + monitoring log for any pass-through subrecipients.
• Audit-ready export: One click produces the organized evidence packet — the “folder you hand the auditor” — per award, per period.
• Clawback / monitoring early-warning: Flags the gaps (missing certs, undocumented costs, lapsed procurement files) before a monitoring visit or the grantor asks.

6. AI angle — what’s load-bearing

Remove the AI and this is a folder of blank templates — which already exist for free and which nobody fills out, because filling them out correctly requires reading dense federal guidance against a specific award and applying judgment. That reading-and-judgment is exactly what AI now does:

• Obligation extraction from non-standardized 40–60 page NOFOs/award letters into a structured, award-specific checklist — long-context reasoning, not keyword search.
• Allowable-cost determinations: classifying a described expense against 2 CFR 200 Subpart E + award terms and writing the defensible rationale — the work a grants accountant bills $150/hr for.
• Effort-certification drafting reconciled to payroll with a documented, consistent allocation methodology.

If the AI is load-bearing anywhere, it’s here: the product’s entire value is collapsing a grants-accountant’s judgment into minutes for an org that can’t afford one. No AI, no product.

7. Localization angle (if any)

N/A — this is a US-only play by definition. The wedge is a US regulatory artifact (2 CFR 200 Uniform Guidance, Single Audit threshold, OMB Compliance Supplement). The same shape exists abroad (EU structural-fund reporting, UK lottery/grant compliance) and is a future expansion, but each is a separate regulatory build, not a localization toggle. Starting US-first keeps the regulatory surface single and knowable.

8. Business model — path to $1M–$5M ARR

• Pricing: $149/mo (single federal award, core docs) → $299/mo (multiple awards + subrecipient monitoring + unlimited exports). Annual prepay discount. Positioned below a fractional grants accountant ($150/hr, ~$1.5–3K/mo) and in line with grant-software peers ($99–$179/mo for Grant Frog/Instrumentl tiers) — but those don’t generate the evidence.
• ACV: ~$2,400 blended ($200/mo average).
• Rough math to $1M ARR: ~420 grantees × $200/mo × 12 = ~$1.0M. ~420 customers out of a 40K+ serviceable base is a 1% penetration — credible.
• Rough math to $5M ARR: ~2,100 grantees, or fewer if we land multi-award orgs and small local governments on the $299 tier and add a per-subrecipient line. Requires moving upmarket slightly into the $1M–$3M band (still Uniform-Guidance-bound, often skip full grants staff) and/or a fractional-CFO / nonprofit-accounting-firm channel reselling seats.
• Expansion path: ACV grows with award count, subrecipient count, and add-ons (indirect-cost-rate proposal builder, SF-425 / federal financial report drafting, single-audit-prep mode for orgs that cross back over $1M).

9. Go-to-market wedge — first 100 customers

• Federal award data is public. USASpending.gov lists every federal grant recipient with award amount. Filter to nonprofits/local govs in the $100K–$1M band with active awards → a named, contactable list of exactly the at-risk segment. Cold email + a one-page “3 most common findings that would hit your award” audit-gap teaser. This is the killer channel: I can build the target list precisely.
• Nonprofit accounting / fractional-CFO firms (Escalon, CLA, regional CPA shops serving nonprofits) — they lost the Single Audit engagement revenue when clients dropped below $1M and now field panicked compliance questions for free. Offer them TrailProof as a white-labelable client tool / referral cut. Each firm carries 20–100 small grantees.
• State nonprofit associations & grant-maker networks (National Council of Nonprofits chapters, GrantStation, community foundations doing pass-through) — they publish compliance alerts and host webinars to exactly this audience. Co-run a “post-$1M-threshold compliance” webinar; the content writes itself from the regulatory change.
• r/nonprofit, r/grantwriting, GrantsManagers’ communities — answer the recurring “we dropped below the audit threshold, what do we actually still have to do?” question with a free obligation-checklist generator (lead magnet) → paid for the evidence engine.

10. Build complexity — justification

Medium. The web app, document ingestion, and AI extraction/drafting are off-the-shelf (long-context model + standard stack). The real work is domain encoding: faithfully representing 2 CFR 200 cost principles, procurement thresholds, effort-certification rules, and the OMB Compliance Supplement into a structured, auditable rule set — and keeping it current as guidance changes. That’s not a research problem, but it demands a grants-compliance expert in the loop and careful prompt/rule design so outputs are defensible, not plausible. Small team, ~3–4 months to a credible v1 covering the highest-frequency findings (time-and-effort, allowable cost, procurement).

11. Gating checklist

Gate	Pass?	Note
Legal in target market	✅	Documentation-assistance tool; not legal advice or audit attestation. Disclaim accordingly.
Ethical — no harm / dark patterns	✅	Helps grantees comply, not evade. Strictly pro-integrity.
Market exists (evidence above)	✅	Sourced regulatory change + clawback wave + incumbent gap.
1–5 person team can build this	✅	Off-the-shelf AI + domain rules; needs a compliance SME.
Launchable with <$50K / ₹40L	✅	Web app + model API + one domain expert’s time.

12. Feasibility score

Axis	Weight	Score	Notes
Problem intensity	20	16/20	Six/seven-figure disallowances, “high-risk grantee” label, clawback wave. Hair-on-fire for the org’s survival — but felt acutely at audit/monitoring moments, not literally daily, so not a 19.
Demand evidence	15	12/15	Strong sourced regulatory + finding-frequency + incumbent-gap evidence; weaker on direct verbatim grantee quotes (forum search returned thin).
Build feasibility	15	11/15	Tech is off-the-shelf; the moat-work (faithful, current regulatory encoding) is the gating effort and must be right.
Distribution clarity	15	11/15	USASpending.gov gives an exact named list — rare and strong. Knock-off for longer sales conversations with cautious nonprofit buyers.
Revenue mechanics	15	12/15	Pricing benchmarked vs peers and vs fractional accountant; 420 customers to $1M is realistic. Churn risk if grantee loses funding.
Time to first revenue	10	7/10	Can pre-sell to a CPA-firm channel fast, but the v1 must be defensible before grantees trust it — 6–10 weeks to first paid.
Defensibility	10	5/10	Regulatory-knowledge + workflow lock-in (your evidence trail lives here) is a real soft moat; but copyable by a focused competitor. Speed and the CPA channel are the edge.
Total	100	74/100

13. Qualitative modifiers

Founder-fit tags

domain-expertise-required · technical-heavy

A technical builder paired with (or who is) a federal-grants-compliance practitioner. The product lives or dies on whether the generated artifacts actually survive an auditor — which requires real domain knowledge, not vibes.

Key assumptions to validate (3–5)

1. Assumption: Sub-$1M grantees will pay $150–300/mo for documentation they “could” do free in spreadsheets. How to test: 30 cold calls/emails to USASpending-sourced grantees offering a paid pilot; target ≥10% pilot interest.
2. Assumption: AI-generated effort certs / allowable-cost memos are defensible enough that a grants CPA would sign off. How to test: Have 3 nonprofit-CPA firms review 20 generated artifacts; target ≥80% “I’d accept this in a client file.”
3. Assumption: The CPA / fractional-CFO channel will resell or refer. How to test: Pitch 10 firms; target ≥3 willing to pilot as a client tool.
4. Assumption: Churn won’t be dominated by grantees losing funding. How to test: Track funding-loss vs dissatisfaction in first 6 months of pilots.

Risk flags

1. Regulatory risk (and timing): The same volatility that creates the opportunity (rule changes, EOs, threshold shifts) means the rule set needs constant maintenance; a major Uniform Guidance rewrite is upkeep, not catastrophe, but it’s ongoing cost.
2. Liability / trust: Selling “audit defense” invites blame if a customer still gets a finding. Position as documentation assistance with clear disclaimers; never imply attestation or legal advice.
3. Buyer caution: Nonprofits are slow, risk-averse buyers with thin budgets; the “I’ll just keep using spreadsheets” inertia is the real competitor, and the federal-funding pullback could shrink the very base you sell to.

14. Structured verdict

Score:                  74/100
Verdict:                GO
Confidence:             Medium
Best-fit builder:       Technical founder paired with a federal-grants-compliance practitioner
Time to revenue:        6–10 weeks (faster via CPA-firm pilots)
Capital to launch:      $15–30K (model API + domain SME time + landing/outreach)
Top 3 assumptions to validate first:
  1. Sub-$1M grantees pay $150–300/mo — 30 USASpending-sourced cold outreach, target ≥10% pilot interest
  2. Generated artifacts are CPA-defensible — 3 nonprofit-CPA firms review 20 artifacts, target ≥80% acceptance
  3. CPA/fractional-CFO channel resells/refers — pitch 10 firms, target ≥3 pilots
Kill criteria:
  - Abandon if <10% of 50 cold-outreach grantees show pilot interest after 3 weeks
  - Abandon if <60% of generated artifacts pass nonprofit-CPA review (the trust bar is unmeetable)
  - Abandon if a funded incumbent (Instrumentl/AmpliFund) ships post-award evidence generation before your v1

15. Next step — 1-week validation sprint

• Day 1–2: Pull a USASpending.gov list of 200 nonprofits/local govs with active federal awards in the $100K–$1M band. Hand-build 5 sample “obligation checklists” from their real public award abstracts to prove extraction works and to use as the outreach hook.
• Day 3–4: Cold email 50 of them with a one-page “your award’s 3 most likely audit findings” teaser + offer of a free obligation-checklist and a paid pilot. Simultaneously pitch 5 nonprofit-CPA firms on the channel deal.
• Day 5: Decide go/no-go. Go if ≥5 grantees (10%) reply with pilot interest and ≥1 CPA firm agrees to review generated artifacts. No-go if grantee interest is <10% or CPA reviewers say the outputs aren’t defensible.

Falsifiable outcome: a counted reply rate against a named list, plus a binary CPA-defensibility verdict — not “people seemed to like it.”