Compliance

KYB Requirements

Last updated: 1 March 2026

Know Your Business verification is completed once, before your GitHub organisation is linked and procurement records can be recorded. Gather the documents below before you start; complete submissions are typically decisioned within one to two business days.

Entity records

  • Certificate of incorporation or business registration certificate
  • Trade or operating licence, where your jurisdiction issues one
  • Taxpayer identification number (TIN) certificate
  • Memorandum and articles of association, or equivalent constitutional document

Ownership and control

  • Register of shareholders or ownership schedule showing all holders above 25%
  • Board or director register naming current directors and officers
  • Signed declaration of ultimate beneficial ownership
  • Group structure chart where the applicant sits under a parent entity

Individual identity

  • Government-issued photo identification for each director and 25%+ owner
  • Liveness check completed through our identity-verification partner
  • Proof of residential address dated within the last three months

Tripartite master agreement

  • Signed tripartite master agreement between the supplier entity, the Western corporate client, and Verispect Ltd
  • One or more underlying client contracts, MSAs, or statements of work
  • Two recent invoices previously issued to the client under the agreement
  • Declared monthly procurement volume and expected client jurisdictions

workflow-channel linkage

  • Administrator access to link your GitHub organisation for webhook verification
  • Confirmation that only public activity metadata (commit SHAs, PR links, timestamps) will be shared — no source code is ever transmitted or read
  • List of repositories in scope for delivery-marker verification

Settlement details

  • Formal local bank Foreign Currency Retention Account details in the entity's name
  • Confirmation that the account holder name matches the verified entity

Document acceptance criteria

Upload colour scans or clear photographs in PDF, JPG, or PNG format, under 10 MB per file. All four corners must be visible, text must be legible, and documents must be unexpired. We do not accept redacted ownership records, screenshots of portals, or documents in a language other than English without a certified translation.

After approval

On approval your organisation's GitHub linkage is activated, the tripartite master agreement is countersigned, and Compliance Passport recording is enabled immediately. We re-verify records periodically and whenever ownership, directors, or declared volume change materially — keep your records current to avoid holds on final-mile clearing.