This guide covers the EPA drinking-water Consumer Confidence Report Rule (40 CFR 141.151), not the coal-combustion-residuals rule for power plants. If you landed here looking for CCR compliance under the Resource Conservation and Recovery Act for fly-ash impoundments, this is the wrong page — you want a coal-ash consulting firm.
"CCR software" is overloaded. Operators type it into a search bar meaning ten different things, and results mix free state template tools, paid SaaS, PDF-rendering macros, and vendors selling coal-ash reporting software to power plants. This guide is for the community water system operator producing a 2027-compliant Consumer Confidence Report.
The remainder walks the drafting process for the drinking-water CCR under the revised rule finalized in the Federal Register on May 24, 2024 (docket EPA-HQ-OW-2022-0260, 89 FR 45980), with specific attention to the direct-URL delivery workflow that replaces mail-a-PDF defaults for most utilities by 2027.
What CCR software actually needs to do
Five functional requirements separate a real CCR tool from a PDF-renderer. Every market gap comes from a product covering some and skipping others.
First, contaminant-table rendering. The tool must accept your detected-contaminant data, apply the standardized table structure from 40 CFR Part 141 Subpart O, and format running-average, range, MCL, MCLG, and likely-source columns consistently. Billing-system "CCR modules" usually do this passably.
Second, multi-source blending. Single-source is easy. Consecutive systems blending purchased and self-produced water need weighted averaging — where free templates break first.
Third, direct-URL delivery. The revised rule formalizes a direct-URL e-delivery pathway: the hyperlink must open the current CCR directly, not a homepage. The tool has to produce a hosted page at a stable URL, not a PDF attachment. This is the biggest gap between pre-2024 tooling and 2027.
Fourth, translation access. When a language group crosses the rule's population triggers, the utility must offer the report in that language. Software that treats translation as "export the PDF and mail it to a translator" fails this in practice.
Fifth, archive and parity. The prior three years must remain accessible, and channels (web, print, email) must carry equivalent content. Drift between channels is a primacy-audit failure waiting to happen.
Steps
The ten steps below are the actual drafting sequence for a 2027-compliant report. Work them in order. Each step names the data or decision involved, not the vendor — several steps can be satisfied by more than one product, and the vendor section is after.
Step 1: Pull your water-quality data
Start with lab results for the reporting year: every contaminant tested, every sample location, every detection and non-detection, in rule-required units (mg/L, µg/L, or pCi/L). Pull from your LIMS, your certified lab's portal, or the state primacy agency's SDWIS feed. If you use multiple sources, pull separately for each so blending is explicit. You also need the prior three years of CCRs for archive purposes and every sampling point mapped to its source. Missing data here is the most common cause of late CCRs.
Step 2: Map contaminants to the CCR tables
The rule prescribes which contaminants appear and in which order. Regulated contaminants go in the detected-contaminant table with MCL, MCLG (or action level), annual-average result, sampled range, violation yes/no, and likely source. UCMR (unregulated monitored) data goes in a separate table with its own framing. Software keys each sample result to the contaminant's regulatory identifier; manual mapping produces errors. EPA CCR iWriter has this wired in for the regulated list; commercial tools use the same list or extend it.
Step 3: Identify violations and health-effects language
Any violation during the reporting year — MCL exceedance, treatment-technique failure, monitoring-reporting violation, Lead and Copper action-level exceedance — must be disclosed with standardized health-effects language pulled verbatim from the rule's appendix. You cannot paraphrase. Software produces the exact language automatically so drafters don't accidentally edit it. If you had no violations, say so explicitly.
Step 4: Write the system-description section
Name the water source, describe treatment, summarize the source-water assessment required under the 1996 Safe Drinking Water Act Amendments, and identify the population served. The source-water assessment summary is the weakest part of outdated CCRs because operators copy prior-year language without checking for state updates. Software provides a template with required headings and pulls structured fields from your system record.
Step 5: Add required 2027 disclosures
The revised rule adds elements beyond the pre-2024 template: lead disclosure tied to the LCRR service-line inventory, PFAS reporting where the April 2024 NPDWR applies, and a plain-language readability statement. For the full list, see the revised 2027 CCR Rule summary and the 2027 compliance timeline.
Step 6: Translate to required languages
Check your service territory's language demographics against the rule's translation-access triggers. When a non-English-speaking population crosses the threshold, the CCR must be available in that language, and the direct-URL delivery has to route non-English speakers to the translated variant — not the English page with a "Translate this" button. Software that generates translated variants from the same source data is the workable answer; copy-pasting into machine translation breaks the parity requirement under the translation-access provisions of the revised rule.
Step 7: Choose your delivery method
The rule allows mail, bill-insert, email, and direct-URL electronic delivery, with direct-URL as the default for most systems by 2027. Mixed-channel delivery is permitted, but parity across channels is required. Paperless-billing customers generally want email with a direct URL; all customers must be able to request paper on demand. Systems serving more than 10,000 people must also meet the biannual distribution requirement.
Step 8: Set up the direct-URL host
Your CCR has to live at a permanently resolvable public URL — not a rotating PDF link, not a homepage link. "Permanent" means the URL stays valid as long as the utility exists, with each year addressable at a stable archive address. Most utilities lack web infrastructure that handles this cleanly, which is where CCR software earns its keep: it hosts the page, maintains the URL across years, and keeps the three-year archive the rule requires.
Step 9: Notify your customers
Once the report is hosted, notify your customer base. This is where the billing-system handshake matters: the email list lives in your CIS, not the CCR tool, and the notification must include the direct URL, a paper-on-request statement, and language-access information if applicable. The water utility billing software overview walks through how the two systems exchange a customer list.
Step 10: Archive and confirm delivery
The rule requires three prior years of reports to remain accessible and utilities to retain delivery records — which channel reached which customers and when. Software tracks email bounces, paper-copy requests, and archives each year automatically. At window close, the utility files a delivery certification with the primacy agency. Keep it — it is the artifact a primacy auditor asks for first.
CCR software vendors compared
The vendor landscape for CCR drafting splits into free state tools, commercial SaaS products, and billing-system add-ons. Here is the honest map.
EPA CCR iWriter is the EPA's free Word-based template tool (login at https://sdwis.epa.gov/ccriwriter). It prompts the operator, fills the detected-contaminant table from manual entry, and produces a report meeting the 1998 rule's baseline. Output is a .doc file — no direct-URL hosted page, weak multi-source blending, weak translation. Adequate for a small single-source system with no violations in a state that accepts the iWriter output. Several state primacy agencies publish their own versions:
- TCEQ (Texas) publishes a template and guidance alongside the state's Drinking Water Viewer, which feeds water-quality data for Texas community systems.
- Wisconsin DNR publishes CCR templates for Wisconsin community systems with pre-populated state-specific language for the source-water assessment summary.
- Several other primacy agencies (Maine DHHS, North Carolina DEQ, Pennsylvania DEP) publish state-specific templates of varying quality. All share the .doc/.pdf output limitation: no direct-URL hosting out of the box.
On the commercial side:
- CCRiWriter is a private product (not the EPA tool, despite the name) sold into some eastern-seaboard primacy states. Pennsylvania's DEP runs its own CCR portal and state templates remain the incumbent in several Mid-Atlantic and New England states, so penetration varies. Its drafting UI is dated but workable; weaknesses for a 2027 audience are limited direct-URL hosting, no multilingual support out of the box, and a procurement model that requires a demo call before pricing. See the CCRiWriter alternative write-up.
- 120Water scaled on LCRR service-line inventory work and launched a formal CCR product in early 2025. It is the closest thing to a full-stack drinking-water compliance platform, but it is priced for utilities above the small-system tier and bundles CCR inside a broader suite. The 120Water alternative page covers the tradeoff.
- 1water — our platform — is the agent-native CCR compliance tool we build. Published per-CCR pricing: Free trial (60 days), Starter $299/CCR one-time, Pro $699/CCR (or $99/mo), Full Service $1,499/CCR (or $149/mo). Tier drivers — state overlays, translation, delivery channels, compliance guarantee — are on the CCR software pricing page.
When free state tools are enough
| Factor | Free template OK | Commercial tool earns its keep |
|---|---|---|
| System size (served) | ≤ 3,300 | > 3,300 or near trigger |
| Source count | Single | Multi-source blending |
| Prior-year violations | None | Any MCL / TT / LCR ALE |
| Translation-access trigger | Not crossed | One or more crossed |
| Direct-URL delivery required 2027 | No (paper-only waiver) | Yes |
Free state tools are adequate when all of the "Free template OK" conditions hold. Many systems under 3,300 served fit this profile — iWriter plus a simple delivery channel (bill insert or paper mail) is the right answer. The small water system CCR compliance write-up expands on this segment.
When to buy a commercial tool
Commercial CCR software starts earning its keep the moment one of those conditions breaks. Multi-source blending requires weighted averaging across sources, which free templates don't do. A violation in the reporting year means you need standardized health-effects language applied automatically, not hand-typed. Translation-access triggers mean parallel-variant rendering, not a PDF run through machine translation. And direct-URL hosting — the default for most systems by 2027 — is not something free tools produce at all.
Rule of thumb: if you're under 3,300 served, single-source, and clean-compliance, stay free. Cross any one of those lines and price out a commercial tool against the audit finding you'll get stretching a free template past its limits.
FAQ
Do small utilities need CCR software?
Not always. Under roughly 500 connections with a clean compliance record, iWriter plus paper delivery once a year is legitimate and often right. Between 500 and 3,300 served, the math depends on whether you have violations, multiple sources, or translation triggers. Above 3,300 served, commercial software almost always pays for itself in staff time.
Does my state primacy agency provide a free tool?
Most do. Texas, Wisconsin, Maine, North Carolina, Pennsylvania, and many others publish state-specific CCR templates or portals. Call your primacy agency's drinking-water section before buying — you may find their template is adequate, or find a known gap (usually around direct-URL hosting or multilingual support) that justifies paid tooling.
Is EPA iWriter still supported for 2027?
EPA has not announced a withdrawal, but the tool was designed around the 1998 rule's delivery expectations. Using it for 2027 means supplementing on several dimensions: direct-URL hosting (iWriter doesn't produce one), translation variants (not built in), and the new disclosure elements the revised rule adds. The iWriter output remains a reasonable starting template; it is not a complete compliance workflow.
What does "direct-URL delivery" mean?
A hyperlink that opens the current CCR directly when a customer clicks it — not a homepage link requiring navigation, not a PDF attached to an email. The URL has to be stable across years, the page has to load the current report, and prior years must remain accessible at archive URLs.
How does the 2027 rule change what software needs to do?
Compared to the 1998 rule, the revised 2024 rule adds direct-URL e-delivery as a formalized channel, mandates readability standards, expands translation-access triggers, requires biannual distribution for systems serving more than 10,000, and introduces new disclosure elements (lead service lines, PFAS where applicable, source-water assessment updates). Legacy "CCR modules" in billing and management suites — built around the 1998 template — fall short on most of those changes. See the water utility management software overview and the 2027 compliance timeline and key dates.
What if my state has its own CCR electronic-delivery rules?
Some states add requirements on top of the federal rule — New Jersey is a notable example, with state-specific electronic-delivery language that interacts with the federal direct-URL requirement. If you are a New Jersey community water system, start with the revised CCR Rule 2027 New Jersey summary before picking software.
Sources
- U.S. EPA, "National Primary Drinking Water Regulations: Consumer Confidence Reports," final rule, 89 FR 45980, May 24, 2024. Docket EPA-HQ-OW-2022-0260. Accessed 2026-04-18.
- Electronic Code of Federal Regulations, 40 CFR Part 141 Subpart O — Consumer Confidence Reports. Accessed 2026-04-18.
- U.S. EPA, "How Water Systems Comply with CCR Requirements" (includes iWriter). Accessed 2026-04-18.
- U.S. EPA, Revised Lead and Copper Rule — LCRR service-line inventory tie to CCR lead disclosure. Accessed 2026-04-18.
- Texas Commission on Environmental Quality, CCR guidance and Drinking Water Viewer. Accessed 2026-04-18.
- Wisconsin DNR, Consumer Confidence Reports. Accessed 2026-04-18.