Start your 14-day free trial

KYB controls

KYB control map and evidence file

Which API call and field supports each control in a KYB policy, with the limits, and what to store for each check. Informational, not legal advice: the decision stays with your compliance process.

KYB control map

Match each control in your KYB policy to a call, the credits it costs, the field that evidences it and the gap to cover elsewhere.

ControlCall and creditsEvidence fieldLimit and gap
Entity identity and statusGET /companies/search1 creditGET /companies/{id}1 creditid, company_number, status, stage, register, updated_atRegister record and status for every live country; sole traders are not served in several. Germany, Italy, India, Austria and Greece hold LEI-registered entities, not the national register.
Directors and officersGET /companies/{id}No extra creditsappointmentsSpain, France, the United Kingdom, Norway and Poland (Polish natural persons are masked by the register itself). Elsewhere none: pair with a registry extract.
Beneficial owners (UBO)GET /companies/{id}No extra creditsappointments[].is_beneficial_ownerUnited Kingdom only, from the PSC register. National UBO registers such as Spain’s RBR or France’s RBE are not queried.
Sanctions screeningPOST /sanctions/screen3 credits a namestatus, hits, best_match_scoreBeta. Seven sources and a threshold you set. A clear result means no hit at or above it; it is not a certification.
PEP screeningGET /sanctions/screen?include_pep=true3 credits a namepepBeta, Spain only, with no relatives or close associates: on its own it does not meet a PEP obligation.
Adverse mediaNot offered—Not offered. Pair with a dedicated screening vendor.
Identity of natural persons (KYC)Not offered—Not offered: no identity documents and no liveness checks.
InsolvencyPOST /insolvency/check2 credits an itemstatus, noticesCorporate notices only, in sixteen markets. In some other countries insolvency shows in the company status instead of as notices.
Ongoing monitoringPOST /monitor0 creditswebhookEvery live country except France and Chile. Alerts on status change, dissolution, a sanctions match (beta) and register changes; the number of monitored companies depends on the plan.
Record-keepingevery responseNo extra creditsX-Request-Id, X-Credits-Cost, updated_atThe API does not store your decision. Keep the evidence file below; the dashboard exports a company file as JSON.

Retention-ready evidence file

For each check, keep what lets you replay and defend it later. The API gives you part of it in every response; the rest comes from your side.

KeepWhere it comes from
The request: method, path and parametersYour system.
Request idThe X-Request-Id response header.
Credits chargedThe X-Credits-Cost response header.
When you retrieved itYour clock. The response body carries no retrieval time today; the dashboard export adds fetched_at.
Register and last update of the recordThe register and updated_at fields on the record, with the attribution the response carries.
The response bodyStore it whole. For tamper evidence, hash it (SHA-256) when you store it; we do not add a hash today.
The decision, who took it and whenYour system. The API supplies evidence; the decision is yours.
The limits that appliedThe limits in the control map above, such as UK owners only or sanctions in beta.

A sample evidence file with placeholder values.

{
  "_note": "Sample with placeholder values. Replace each with what you stored for the check.",
  "check_id": "kyb-000123",
  "retrieved_at": "2026-01-15T09:30:12Z",
  "request": {
    "method": "GET",
    "path": "/companies/search",
    "params": {
      "country": "GB",
      "company_number": "00000000",
      "limit": 1
    }
  },
  "response": {
    "x_request_id": "<value of the X-Request-Id header>",
    "x_credits_cost": "1",
    "body_sha256": "<SHA-256 you computed over the stored response body>"
  },
  "record": {
    "id": "<record id>",
    "register": "<register named on the record>",
    "updated_at": "<updated_at on the record>",
    "status": "<status on the record>"
  },
  "limits_applied": [
    "Beneficial owners: UK register only",
    "Sanctions screening: beta"
  ],
  "decision": {
    "outcome": "pass | review | reject",
    "decided_by": "<your analyst id>",
    "decided_at": "2026-01-15T09:41:00Z"
  }
}

Retention

Keep the file for the period your policy and the law that applies to you require. The EU anti-money-laundering rules most often cited ask for five years (AMLD5, Article 40); check the rule for your case.

Customer dashboard screenshot: a printable KYB summaryCustomer dashboard screenshot: a printable KYB summary
The dashboard prints these checks as a dated KYB summary with the source and date of each. Sanctions screening is beta, and a name screen is not a clearance. Open it in the dashboard

Questions compliance teams ask

Does Prometiam make the KYB decision?

No. It supplies registry evidence, insolvency notices and screening results as JSON. Your compliance process decides, and this page is not legal advice.

Is sanctions screening enough for a sanctions control?

It is in beta. A clear result means no hit at or above your threshold on the active lists; it is not a certification. Keep your own procedure around it.

Which countries return beneficial owners?

Only the United Kingdom, from the PSC register. For other countries use the national UBO register or another provider.

Can we show an auditor what we checked?

Store the evidence file for each check: the request id, the time, the record fields, the response body and your decision. The request id also appears in your dashboard request log.