Where did they get the database that tells them if "the applicant poses a risk of harm to anyone"? And why don't they use that for everything? Also, if you do

Where did they get the database that tells them if "the applicant poses a risk of harm to anyone"? And why don't they use that for everything? Also, if you do pose a risk of harm to someone, does that person get a gun?