What is the Prometiam Company Data API?

A commercial REST API that unifies EU + UK company registry data — Spain (BORME), France (BODACC), the United Kingdom (Companies House), Ireland (CRO), Poland (KRS), and Norway (Enhetsregisteret) — under one schema, with daily updates, sanctions and US export-control screening (EU, UN, OFAC, UK OFSI, French Registre des gels, plus the US Consolidated Screening List), and corporate-event monitoring. Authentication is a Bearer rk_live_ API key.

Is there a free tier for the Prometiam API?

Yes. The Free tier provides 1,000 calls per month and includes the search, records, and coverage scopes across all six live countries. No credit card required to receive an rk_live_ API key.

How much does the Prometiam API cost?

Public tiers: Free (€0, 1,000 calls/month), Starter (€9.99/mo, 10,000 calls/month with people, company events, and sanctions monitoring), Professional (€29.99/mo, 100,000 calls/month with full scopes including sanctions screening and 100 watchlists), Scale (€99.99/mo, 1,000,000 calls/month), and Enterprise (custom). Monthly quotas count successful requests only; paid plans include a 10% overage buffer.

Which countries does the API cover?

Six countries are live. Spain (BORME) is fully live with daily updates. France (BODACC), the United Kingdom (Companies House), Ireland (CRO), Poland (KRS), and Norway (Enhetsregisteret, from Brønnøysundregistrene) are also covered via the same endpoints. The country parameter is ?country=ES, ?country=FR, ?country=GB, ?country=IE, ?country=PL, or ?country=NO. Spain, France, the UK, and Norway include officers and directors; Ireland and Poland are company-level (Poland adds NIP, REGON, PKD code, and capital), and directors and UBO are not yet included for IE/PL. Norway has no corporate-event gazette, so the company-event endpoints return nothing for NO.

Which company identifiers does the API accept?

Spain: ?vat= (NIF, 9 chars starting with a letter, e.g. A28015865). France: ?siren= (9 digits) or ?siret= (14 digits). United Kingdom: ?company_number= (8 chars; numeric for England & Wales/Scotland; alphabetic prefixes such as SC, NI, OC, LP, FC, OE for special types).

How fresh is the data?

Spanish (BORME) and French (BODACC) data is updated daily. UK Companies House is updated monthly with daily deltas. Irish (CRO) company data is refreshed daily. Norwegian data is refreshed daily from Brønnøysundregistrene (Enhetsregisteret, open data under the NLOD licence). The /coverage endpoint returns the latest_filing date per country.

How does authentication work?

Every request requires a Bearer token via the Authorization header: Authorization: Bearer rk_live_your_api_key. Keys are provisioned via the free signup and tied to a tier (rate limits), a list of scopes, and a list of allowed countries.

Where is the data hosted?

In the European Union (AWS eu-central-1, Frankfurt). No data leaves the EU. Aligned with GDPR and ISO 27001; SOC 2 Type II is in progress.

How does Prometiam compare to Creditsafe, Iberinform, Pappers, and OpenCorporates?

Prometiam ships a single REST endpoint covering Spain (BORME), France (BODACC), the UK (Companies House), Ireland (CRO), Poland (KRS), and Norway (Enhetsregisteret) with daily updates, transparent public pricing from €9.99/month, sanctions and US export-control screening across six sources (EU, OFAC, UN, UK OFSI, French gels, plus the US Consolidated Screening List) with daily refresh and scored fuzzy matching, and explainable risk fields. Most competitors fragment by country, hide pricing, or charge much more for comparable coverage.

Prometiam API documentation

REST API for official company data in Spain, France, the United Kingdom, Ireland, Poland and Norway. Base URL: https://api.prometiam.com/functions/v1/risk-api

Authentication

Every request needs a bearer API key: Authorization: Bearer rk_live_.... Keys are created at https://www.prometiam.com/signup (free tier: 1,000 calls a month, no credit card). Most read endpoints accept ?country=ES|FR|GB|IE|PL|NO; the default is ES.

Endpoints

GET /search — Search insolvency / risk notices
GET /records/{id} — Get insolvency notice by ID
GET /companies/search — Search companies
GET /companies/{id} — Get company by ID
POST /companies/lookup — Resolve up to 100 companies in one call
POST /sanctions/screen — Screen up to 50 names in one call
POST /insolvency/check — Check up to 100 counterparties for insolvency notices
GET /people/search — Search people by name
GET /people/{id} — Get person by ID
GET /notices/{id} — Get registry gazette notice
GET /company-events/search — Search corporate events
GET /company-events/records/{id} — Get corporate event by ID
GET /company-events/timeline — Corporate event timeline
GET /sanctions/screen — Screen a name against sanctions lists (BETA)
GET /sanctions/entity/{id} — Get sanctions entity detail
GET /directors/network — Director network graph
GET /coverage — Dataset coverage statistics
GET /account — Account info and usage
GET /vat/{vatNumber} — Validate an EU VAT number (VIES)
GET /lei/{lei} — Look up a Legal Entity Identifier (GLEIF)
GET /lei/{lei}/relationships — GLEIF Level 2 ownership (who owns whom)
GET /lei/search — Search the GLEIF LEI register by name
GET /monitor — List monitored companies
POST /monitor — Subscribe a company to monitoring
GET /monitor/{id} — Get a monitor + alert history
DELETE /monitor/{id} — Stop monitoring a company

Errors and limits

Errors return a JSON body of the shape {"error":{"code":"...","message":"...","status":N}}. 401 means a missing, malformed or revoked key; 403 means the key lacks the scope for that endpoint; 429 means a rate or quota limit was hit. Rate limits by plan are 10, 60, 300 and 600 requests per minute. Monthly quotas count successful requests only.

Machine-readable specification: https://www.prometiam.com/openapi.json — Postman collection: https://www.prometiam.com/prometiam.postman_collection.json (30 requests covering every endpoint; set the api_key variable and send) — run it without downloading: https://app.getpostman.com/run-collection/56913391-c22df6ad-ad87-43cf-b3a3-0bddb12bebf7

Query Parameters

Parameter	Type	Required	Description
country	string	yes	One of FR, DE, GB, AT, CH, NO, FI, US, NL
name	string	no	Company name (fuzzy match)
company_number	string	no	Registry number as printed on the notice, exact match (SIREN for FR, Companies House number for GB, org number for NO). Pair with country
limit	integer	no	1–100, default 20
cursor	string	no	Pagination cursor from the previous response

GET /procurement/buyers — list by score

Parameter	Type	Required	Description
country	string	no	ES (default) or FR
model	string	no	competition (default) or counterparty — the score that orders the list
min_score	integer	no	1–10, keep buyers at or above this score
name	string	no	Buyer name, matched anywhere (min 3 characters)
region	string	no	Region name, matched anywhere
limit	integer	no	1–100, default 20
cursor	string	no	Keyset cursor from pagination.next_cursor (score_id)

Optional sections — ?include=

Value	Adds
risk_flags	Risk flags on the company. registry_compliance (ES, GB, IE, NO): the register's own signal that the company has stopped meeting its filing duties, with signal (sheet_closed, strike_off_proposed, accounts_overdue, strike_off_listed, forced_dissolution) and as_of — a compliance signal, not an insolvency or a dissolution. tax_debt (Spain): AEAT large tax-debtor entries, with amount_eur, severity, reference_date, published_date and a link to the official source
insolvency	Insolvency proceedings linked to the company
procurement	Top public-procurement awards
lei	Matching GLEIF LEI record
all	Every optional block above

Query Parameters

Parameter	Type	Required	Description
name	string	yes	Person name (normalised pattern match). Minimum 2 characters
country	string	no	ES (default), FR, GB, or NO. IE/PL are company-level and return no people
limit	integer	no	1–100, default 20
cursor	string	no	Pagination cursor from previous response

Query Parameters

Parameter	Type	Required	Description
company_name	string	one of two	Company name (normalised pattern match)
company_number	string	one of two	Registry registration number (exact match)
event_type	string	no	dissolution, director_change, capital_change, new_incorporation, name_change, address_change, liquidation, merger, demerger, status_change, insolvency
date_from	string	no	Event date range start (YYYY-MM-DD)
date_to	string	no	Event date range end (YYYY-MM-DD)
limit	integer	no	1–100, default 20
cursor	string	no	Pagination cursor from previous response

Query Parameters

Parameter	Type	Required	Description
company_number	string	one of two	Registry registration number (exact match, recommended)
company_name	string	one of two	Company name (normalised pattern match)
limit	integer	no	1–200, default 50

Query Parameters

Parameter	Type	Required	Description
name	string	yes	Name to screen (person, company, or vessel)
threshold	integer	no	Minimum match score 30–100, default 80. Lower it (50–60) to catch typos and spelling variants
list	string	no	Comma-separated list filter: EU, OFAC, UN, OFSI, FR_GELS
entity_type	string	no	person, company, or vessel
dob	date	no	Disambiguator (YYYY-MM-DD). Excludes entities with a different known date of birth; entities with unknown DOB are never excluded
country	string	no	Disambiguator. Matches against listed country/nationality; entities with unknown country are never excluded
active_only	boolean	no	Default true. Set false to include delisted entities
include_pep	boolean	no	Set true to also screen against politically exposed persons. Results come back in a separate pep block so they never mix with sanctions hits — see the note below
pep_min_tier	string	no	national, regional or local — only return PEP hits at or above that tier. Omit it and you get every hit, including people with no recorded office
group	string	no	Set entity to fold hits into one row per listed person or company, with a sources array carrying each listing (OFSI, OFAC, EU, UN…) and a lists summary. The default keeps one row per listing; meta.distinct_entities is reported either way
limit	integer	no	1–100, default 20

Query Parameters

Parameter	Type	Required	Description
since	date	no	YYYY-MM-DD or ISO timestamp, default 30 days ago
list	string	no	Comma-separated list filter
change_type	string	no	listed, delisted, relisted, or renamed
limit	integer	no	1–500, default 100

Path Parameter

Parameter	Type	Required	Description
vatNumber	string	yes	Full VAT number including the 2-letter country prefix, e.g. IE6388047V or DE811569869. Spaces and punctuation are ignored.

Error Handling

Status	Code	Description
400	validation_error	Missing or invalid parameters (e.g. no search term, invalid country)
401	unauthorized	Missing, invalid, or expired API key
403	forbidden	Key has no access to the requested country
403	upgrade_required	The scope is not in your plan, or your free trial allowance for it is used up. The body names the plan that includes it (included_in), its price, upgrade_url and, when relevant, trial_allowance. Free keys get 25 calls a month on each of sanctions screening, people search and company events; allowed calls carry meta.trial_allowance with used, limit and resets_on
404	not_found	Record or endpoint not found
429	rate_limit_exceeded	Per-minute or daily limit exceeded — check Retry-After header (seconds)
429	quota_exceeded	Monthly quota exhausted (incl. 10% paid-tier grace) — resets at month start; upgrade or contact support
409	idempotency_key_in_progress	A request with this Idempotency-Key (batch endpoints only) is still running — see Retry-After
422	idempotency_key_reuse	This Idempotency-Key was already used with a different request body — use a new key
500	internal_error	Server error — safe to retry with exponential backoff

Rate Limits & Quotas

Tier	Requests/month	Requests/min	Requests/day (fair use)	Watchlists	Price
Free	1,000	10	200	—	EUR 0/mo
Starter	10,000	60	2,000	10	EUR 9.99/mo
Professional	100,000	300	20,000	100	EUR 29.99/mo
Scale	1,000,000	600	200,000	1,000	EUR 99/mo
Enterprise	Custom	Custom	Custom	Custom	Contact sales

Frequently asked questions

What is the Prometiam Company Data API?: A commercial REST API that unifies EU + UK company registry data — Spain (BORME), France (BODACC), the United Kingdom (Companies House), Ireland (CRO), Poland (KRS), and Norway (Enhetsregisteret) — under one schema, with daily updates, sanctions and US export-control screening (EU, UN, OFAC, UK OFSI, French Registre des gels, plus the US Consolidated Screening List), and corporate-event monitoring. Authentication is a Bearer rk_live_ API key.
Is there a free tier for the Prometiam API?: Yes. The Free tier provides 1,000 calls per month and includes the search, records, and coverage scopes across all six live countries. No credit card required to receive an rk_live_ API key.
How much does the Prometiam API cost?: Public tiers: Free (€0, 1,000 calls/month), Starter (€9.99/mo, 10,000 calls/month with people, company events, and sanctions monitoring), Professional (€29.99/mo, 100,000 calls/month with full scopes including sanctions screening and 100 watchlists), Scale (€99.99/mo, 1,000,000 calls/month), and Enterprise (custom). Monthly quotas count successful requests only; paid plans include a 10% overage buffer.
Which countries does the API cover?: Six countries are live. Spain (BORME) is fully live with daily updates. France (BODACC), the United Kingdom (Companies House), Ireland (CRO), Poland (KRS), and Norway (Enhetsregisteret, from Brønnøysundregistrene) are also covered via the same endpoints. The country parameter is ?country=ES, ?country=FR, ?country=GB, ?country=IE, ?country=PL, or ?country=NO. Spain, France, the UK, and Norway include officers and directors; Ireland and Poland are company-level (Poland adds NIP, REGON, PKD code, and capital), and directors and UBO are not yet included for IE/PL. Norway has no corporate-event gazette, so the company-event endpoints return nothing for NO.
Which company identifiers does the API accept?: Spain: ?vat= (NIF, 9 chars starting with a letter, e.g. A28015865). France: ?siren= (9 digits) or ?siret= (14 digits). United Kingdom: ?company_number= (8 chars; numeric for England & Wales/Scotland; alphabetic prefixes such as SC, NI, OC, LP, FC, OE for special types).
How fresh is the data?: Spanish (BORME) and French (BODACC) data is updated daily. UK Companies House is updated monthly with daily deltas. Irish (CRO) company data is refreshed daily. Norwegian data is refreshed daily from Brønnøysundregistrene (Enhetsregisteret, open data under the NLOD licence). The /coverage endpoint returns the latest_filing date per country.
How does authentication work?: Every request requires a Bearer token via the Authorization header: Authorization: Bearer rk_live_your_api_key. Keys are provisioned via the free signup and tied to a tier (rate limits), a list of scopes, and a list of allowed countries.
Where is the data hosted?: In the European Union (AWS eu-central-1, Frankfurt). No data leaves the EU. Aligned with GDPR and ISO 27001; SOC 2 Type II is in progress.
How does Prometiam compare to Creditsafe, Iberinform, Pappers, and OpenCorporates?: Prometiam ships a single REST endpoint covering Spain (BORME), France (BODACC), the UK (Companies House), Ireland (CRO), Poland (KRS), and Norway (Enhetsregisteret) with daily updates, transparent public pricing from €9.99/month, sanctions and US export-control screening across six sources (EU, OFAC, UN, UK OFSI, French gels, plus the US Consolidated Screening List) with daily refresh and scored fuzzy matching, and explainable risk fields. Most competitors fragment by country, hide pricing, or charge much more for comparable coverage.

Prometiam API documentation

Authentication

Endpoints

Errors and limits

Query Parameters

GET /procurement/buyers — list by score

Optional sections — ?include=

Query Parameters

Query Parameters

Query Parameters

Query Parameters

Query Parameters

Path Parameter

Error Handling

Rate Limits &amp; Quotas

Frequently asked questions

Rate Limits & Quotas