For company customers
This article provides a comprehensive summary of the required fields, document types, identity verification requirements, and applicable conditions for onboarding company customers to our platform.
To onboard a company to the BVNK platform, submit the following information.
Overview
Requirements differ along two dimensions:
-
Jurisdiction: the BVNK entity that contracts with the customer:
- US — System Pay Services (US), Inc., a Delaware-incorporated company (NMLS ID 2531294), registered as a Money Services Business with FinCEN and licensed as a money transmitter in various US states.
- EU — System Pay Services (Malta) Ltd (C66961), authorised by the Malta Financial Services Authority (MFSA) as an Electronic Money Institution and as a Crypto-Asset Service Provider under MiCA (Regulation (EU) 2023/1114).
-
Onboarding model:
- BVNK-Managed: you provide documents and structured data, BVNK performs ID&V.
- Self-managed: you perform ID&V and pass verification metadata + risk attestations to BVNK.
The applicable onboarding model depends on the type of business and the licensing setup of the Embedded Partner. Contact the BVNK Solutions team to confirm which model applies to your integration.
For the technical integration, payload structures, and endpoint reference, see the companion API Integration Guide.
Business entity information
- BVNK-Managed
- Self-managed
Company profile
| Field | US | EU | Validation / why we collect it |
|---|---|---|---|
Legal Entity Name company.name | ✅ | ✅ | Verified against business registry records. Must match formation documents exactly. |
Registration Number company.registrationNumber | ☑️ | ✅ | Cross-referenced with the relevant national business registry. Optional for US if EIN is provided. |
Entity Type company.entityType | ✅ | ✅ | Determines downstream document and ownership disclosure requirements. See the Appendix for the list of supported entity types. |
Incorporation Date company.incorporationDate | ✅ | ✅ | Entities incorporated <2 years ago may trigger additional scrutiny (business plan, SoW, supporting invoices). |
Industry company.industryReference | ✅ | ✅ | UUID from Industry API (NAICS supported). Determines whether vertical-specific requirements apply. Refer to available Industry reference codes. |
Tax ID company.taxNumber | ✅ | ☑️ | Mandatory for US entities (EIN). Verified against IRS records. |
Tax Residence Country company.taxResidenceCountryCode | ✅ | ❌ | Mandatory for US entities. Establishes US tax nexus and triggers US-specific associate requirements. |
Registered address
| Field | US | EU | Validation / why we collect it |
|---|---|---|---|
Street Address address.addressLine1 | ✅ | ✅ | Verified against business registry. |
City address.city | ✅ | ✅ | Part of full address verification. |
Post / Zip Code address.postalCode | ✅ | ✅ | Part of full address verification. |
State / Province address.stateCode | ✅ | ❌ | Required for US addresses. |
Country address.countryCode | ✅ | ✅ | Decline if in a controlled or prohibited jurisdiction. To get the list of countries, use the Fetch Country Codes endpoint. |
Operational Address company.operationalAddress | ☑️ | ☑️ | Required if different from registered address. |
Business profile
The businessProfile object captures business context, CDD data, and nature-of-business information at customer creation.
| Field | US | EU | Validation / why we collect it |
|---|---|---|---|
Description businessProfile.description | ✅ | ✅ | Brief narrative of business activities. Used by Compliance to assess consistency with declared industry. |
Website businessProfile.website | ✅ | ✅ | Reviewed for risk indicators, consistency with declared activity, and exposure to prohibited content. |
Regulated Status businessProfile.isRegulated | ✅ | ✅ | Triggers requirement for AML Policy and Proof of Regulatory License if true. |
Source of Funds businessProfile.sourceOfFunds | ✅ | ✅ | Structured enum. Documentary evidence may be requested during compliance review. See the Appendix for the list of supported values. |
Intended Use of Account businessProfile.intendedUseOfAccount | ✅ | ✅ | Screened for high-risk purposes (e.g. third-party money transmission). Must align with declared business model. See the Appendix for the list of supported values. |
Monthly Expected Volume businessProfile.monthlyExpectedVolumes | ✅ | ✅ | Volume range provided as a string enum (e.g. FROM_0_TO_10K). See the Appendix for supported values. A UUID-based reference via the Volumes API (company.monthlyExpectedVolumesReference) will replace this field in a future release. |
Previously required for business customers in v1. Deprecated in v2. All business context is now captured via the structured businessProfile fields above.
Associates
Associates are individuals linked to the business.
Business customers must include associated natural persons. The following minimum roles must be declared:
- One Authorised Signatory / Representative
- One Director (EU) or Control Person (US)
- At least one and all UBOs above the applicable threshold (25% for onboarding and CDD, 10% for EDD)
Associate roles
The following values are accepted in the associate roles field. Each associate must be assigned at least one role.
| Role | Requirement | Validation / why we collect it |
|---|---|---|
Authorised Signatory REPRESENTATIVE | ✅ At least one | Person legally authorised to bind the company and execute agreements. If not a director, evidence of signing authority is required (Board Resolution, PoA, or Articles provision). |
Director / Control Person DIRECTOR | ✅ At least one | EU: verified against the company registry. US: person with significant management control. Sanctions, PEP, and adverse media screening applied. |
UBO / Beneficial Owner BUSINESS_OWNER | ✅ At least one above threshold | CDD threshold: ≥25%. EDD threshold: ≥10%. If no individual above threshold, the most senior executive must be designated as Person with Significant Control. |
Account Representative ACCOUNT_REPRESENTATIVE | ❌ | Operational point of contact for the partnership. |
The same person can hold multiple roles, for example, Authorised Signatory + UBO + Director.
Personal information (all associates)
| Field | US | EU | Validation / why we collect it |
|---|---|---|---|
First Name firstName | ✅ | ✅ | Must match government-issued ID exactly. Used for sanctions and adverse media screening. |
Last Name lastName | ✅ | ✅ | Must match government-issued ID exactly. |
Date of Birth dateOfBirth | ✅ | ✅ | Used for identity matching and screening disambiguation. |
Nationality nationality | ☑️ | ✅ | US: required for Control Persons. EU: all nationalities including dual must be declared. Screened against prohibited nationality lists. |
Country of Birth birthCountryCode | ☑️ | ✅ | US: required for Control Persons. Used for sanctions screening. |
Country of Residence address.countryCode | ✅ | ✅ | To get the list of countries, use the Fetch Country Codes endpoint. |
Email Address emailAddress | ✅ | ✅ | Primary communication channel for verification flows. |
Residential Address address | ✅ | ✅ | Full address required. Must be a physical residential address. |
State / Province address.stateCode |