Business verification
Prepare sample intake or connect company and beneficial-owner provider review through your organization.
Current intake scope
Business verification is a six-page sample intake: overview, business, people/ownership, documents, review, and status. It distinguishes the US, Abu Dhabi mainland, and ADGM.
The sample checklist is not a determination of legal requirements. Registry checks, identity review, screening, and provider decisions are not connected.
Prepare the request
- Business: describe the entity, jurisdiction, address, activity, and intended payment use.
- People: identify the representative, natural-person owners, and controlling persons.
- Documents: select sample registration, address, ownership/control, and authority-to-act metadata.
- Review: resolve missing information and acknowledge authority before local preparation.
- Status: distinguish preparation from provider receipt, review, decision, and credential issuance.
Data stays in this workspace session
Drafts live in memory. Reloading or leaving KYB clears them. Inputs retain sample file name/type/size; document contents are not read or uploaded.
The sample export sets verified: false, credentialIssued: false, and providerSubmission: not_sent. Preparation does not unlock payments or issue an on-chain credential.
Connect company and owner verification
Organization → Verification connects the organization API to Sumsub. Owner/Admin starts a tenant-bound company application and generates a ten-minute secure provider link. Company details, ownership/control information, documents and individual KYC are collected by the provider. An Auditor can read minimal status; Operator/Viewer cannot access these records. The separate /kyb/ sample remains unsubmitted.
Each company and linked person must complete the configured review. Company GREEN alone does not approve incomplete UBO KYC. RETRY or awaitingUser requests supplementation; open the secure flow for the actual requests. Missing owners, unsupported structures and changed levels require review instead of inferred approval.
Validity is bounded by the earliest required provider review date and operator policy. Refresh cannot extend the original expiry. Deactivation/deletion events and explicit local revocation close the case; old GREEN cannot reopen it. Stale/provider-unavailable records are not valid approvals. Start a fresh application after expiry or revocation.
Authenticated raw-body webhooks only invalidate status. The service fetches current provider data, binds client/environment/levels and fences concurrent owner changes or revocation. Minimal case snapshots are encrypted; provider links and browser sessions stay in memory. Backups revoke all restored cases.
The connector needs an operator-contracted Sumsub account, configured KYB/KYC levels, owner-only secrets/encryption keys and a reachable HTTPS callback. Development used local provider fixtures, with no real company/person review. Sandbox decisions do not establish legal identity. This feature issues no on-chain credential and does not enforce KYB inside permissionless settlement contracts.
The latest adapter review added provider deleted-flag revocation, signed company-structure invalidation and TLS enforcement. Actual-provider qualification is still blocked: account configuration, authorized existing cases and a real HTTPS webhook journey have not been supplied. Controlled response tests are not real company review.
US and Abu Dhabi rule preparation
Open Rules for date/jurisdiction/relationship-based component preparation. Seven source-checked candidates cover US federal FICA and potential NEC reporting for 2025/2026, explicitly classified UAE standard VAT, and distinct mainland/ADGM statutory gratuity candidates. Exact fiat minor-unit arithmetic and rational service fractions are exported with sources, assumptions, inputs and catalog hashes.
Preview is explicitly unapproved. Reviewed evaluation requires an Ed25519 signature of the exact catalog/rule and an independently received reviewer-policy digest. Key/review dates and supplied revocations are checked. No professional reviewer or trusted key is bundled; current consolidated-source gaps require comparison before operational approval.
Changing facts clears old results. Local report verification recomputes calculation integrity separately from current review acceptance; facts and reviewer qualification remain externally established. No salary/fiat conversion, payment authorization, full tax liability or statutory filing is inferred.
US state/local taxes, federal income withholding, special worker/payee classes, corporate tax and pension/savings substitutions need additional reviewed rules. ADGM is a separate employment regime; unsupported dates/classifications stay unresolved. Organization → Tax drafts now prepares cited documents from these reports and literal selected-receipt bindings. Its optional AI arranges verified IDs, while independent review still requires the operator-pinned current signed rule policy.
A fresh source check matched four of six exact official document hashes and recorded two retrieval failures. No independent reviewer policy or external signed review was supplied. Source bytes, current legal applicability and professional review are distinct checks; no tax-provider or filing acceptance is implied.