What counts as due diligence on a supplier?

At minimum: confirm the legal entity exists and is active, screen its name and officers where the registry holds them against sanctions lists, and check for corporate insolvency notices. The EU's Corporate Sustainability Due Diligence Directive and most internal third-party-risk policies ask for that same baseline. Prometiam is not legal advice on whether a given relationship satisfies either one — it supplies the identity, status, sanctions and insolvency checks the file needs to show it happened.

Can I run this against a few thousand suppliers at once?

Yes. POST /companies/lookup and POST /insolvency/check each take up to 100 items per call, and POST /sanctions/screen takes up to 50 names. Every item counts as one request against your plan. A batch larger than what is left on your plan is refused up front with 429 batch_exceeds_quota, and the response's max_items_now says how many fit right now. Sanctions screening also needs the Professional-tier scope; the other three batch endpoints run on any tier.

Does this cover beneficial ownership, not just officers?

Only for the UK, through the Persons with Significant Control register on the company profile. Spain, France, the UK and Norway all return officers and directors, but a director is not a beneficial owner. Ireland and Poland are company-level: no officers yet, for either purpose. For a supplier with a Legal Entity Identifier, GET /lei/{lei}/relationships adds GLEIF's Level 2 direct and ultimate parent.

Which countries actually have insolvency coverage for a supplier check?

Spain's concursal notices are on GET /search. France, the UK and Norway are covered corporate-only through POST /insolvency/check, alongside six countries where Prometiam holds no company registry at all: Germany, Austria, Switzerland, Finland, the US and the Netherlands. Ireland and Poland have no insolvency-notice coverage in either endpoint yet.

How do I keep checking a supplier after onboarding?

Two ways. POST /monitor subscribes a company and pushes a signed webhook on status changes, dissolution and new sanctions matches, for Spain, Ireland and Poland. For Spain, France and the UK, a daily GET /company-events/search sweep against your own supplier list catches capital_change, director_change, dissolution and the rest. Norway has no corporate-event stream, so a Norwegian supplier is covered by re-running the lookup and screening steps on a schedule instead.

Supplier Due Diligence API

Procurement and vendor-management teams onboard a supplier once and rarely check it again. Prometiam covers the whole loop — resolve, verify, screen and monitor — for suppliers registered in Spain, France, the UK, Ireland, Poland and Norway, through one REST API and one key.

The pattern

Five steps, run over a supplier list instead of one row at a time. Resolve a vendor list in bulk with POST /companies/lookup (up to 100 items, by company_number, NIF, SIREN, VAT number or a fuzzy name with match_score). Pull each profile with GET /companies/{id}?include=risk_flags,insolvency,lei for status, dissolution_date, officers where the registry holds them, Spain's AEAT large-debtor flag, and any LEI. Screen the legal name and its officers with POST /sanctions/screen (up to 50 names, a Professional-tier scope, beta). Check for corporate insolvency with POST /insolvency/check (up to 100 items, corporate only, nine markets) and Spain's concursal notices with GET /search. Then keep watching: POST /monitor pushes a signed webhook for Spain, Ireland and Poland, and a daily GET /company-events/search sweep covers Spain, France and the UK.

What it does not cover

Ireland and Poland are company-level, so there are no officers to screen and no insolvency notices to check for a supplier registered there. Norway has no corporate-event stream. Beneficial ownership is the UK's Persons with Significant Control register only — every other registry returns officers and directors, not beneficial owners. Sanctions screening is beta. Prometiam does not return a credit score, financial statements, ESG data, or public-procurement and contract-award history, and it is not legal advice on whether a check satisfies the EU's Corporate Sustainability Due Diligence Directive or your own third-party-risk policy — it supplies the identity, status, sanctions and insolvency checks that policy usually asks for.

Pricing fit

POST /companies/lookup, GET /companies/{id} and POST /insolvency/check all run on the same base scope as a company search, so a 2,000-supplier book is 2,000 + 2,000 + 2,000 = 6,000 requests inside the Starter tier (EUR 9.99/month, 10,000 calls) on its own. Sanctions screening needs the Professional tier (EUR 29.99/month, 100,000 calls) regardless of book size — it is the one step gated by scope rather than volume, and where full sanctions and export-control screening actually turns on. Batch items count one request each; a batch bigger than what is left on the plan is refused up front with 429 batch_exceeds_quota and max_items_now.

Scope limits, stated plainly

Country	Officers to screen	Insolvency notices	Push webhook	Daily sweep
Spain	Yes	Yes — concursal, `GET /search`	Yes	Yes
France	Yes	Yes — `POST /insolvency/check`	No	Yes
United Kingdom	Yes	Yes — `POST /insolvency/check`	No	Yes
Ireland	No — company-level	No coverage yet	Yes	No
Poland	No — company-level	No coverage yet	Yes	No
Norway	Yes	Yes — `POST /insolvency/check`	No	No — no event stream

Frequently asked questions

What counts as due diligence on a supplier?: At minimum: confirm the legal entity exists and is active, screen its name and officers where the registry holds them against sanctions lists, and check for corporate insolvency notices. The EU's Corporate Sustainability Due Diligence Directive and most internal third-party-risk policies ask for that same baseline. Prometiam is not legal advice on whether a given relationship satisfies either one — it supplies the identity, status, sanctions and insolvency checks the file needs to show it happened.
Can I run this against a few thousand suppliers at once?: Yes. POST /companies/lookup and POST /insolvency/check each take up to 100 items per call, and POST /sanctions/screen takes up to 50 names. Every item counts as one request against your plan. A batch larger than what is left on your plan is refused up front with 429 batch_exceeds_quota, and the response's max_items_now says how many fit right now. Sanctions screening also needs the Professional-tier scope; the other three batch endpoints run on any tier.
Does this cover beneficial ownership, not just officers?: Only for the UK, through the Persons with Significant Control register on the company profile. Spain, France, the UK and Norway all return officers and directors, but a director is not a beneficial owner. Ireland and Poland are company-level: no officers yet, for either purpose. For a supplier with a Legal Entity Identifier, GET /lei/{lei}/relationships adds GLEIF's Level 2 direct and ultimate parent.
Which countries actually have insolvency coverage for a supplier check?: Spain's concursal notices are on GET /search. France, the UK and Norway are covered corporate-only through POST /insolvency/check, alongside six countries where Prometiam holds no company registry at all: Germany, Austria, Switzerland, Finland, the US and the Netherlands. Ireland and Poland have no insolvency-notice coverage in either endpoint yet.
How do I keep checking a supplier after onboarding?: Two ways. POST /monitor subscribes a company and pushes a signed webhook on status changes, dissolution and new sanctions matches, for Spain, Ireland and Poland. For Spain, France and the UK, a daily GET /company-events/search sweep against your own supplier list catches capital_change, director_change, dissolution and the rest. Norway has no corporate-event stream, so a Norwegian supplier is covered by re-running the lookup and screening steps on a schedule instead.