Entity verification is not one checklist applied blindly to every company. A Delaware C-Corp, a member-managed LLC, and a foreign subsidiary can all look legitimate at first glance while presenting very different verification risks. This guide gives you a reusable, structure-specific checklist for KYB verification, startup entity due diligence, and business identity verification by entity type. Use it before onboarding a company, wiring funds, approving a deal workflow, or relying on a founder’s claims about ownership and authority.
Overview
If your workflow involves founders, investors, vendors, portfolio companies, SPVs, or cross-border affiliates, the practical question is usually not whether to verify an entity. It is what to verify for this entity structure, in this jurisdiction, for this transaction.
That distinction matters because business identity verification is really a bundle of related checks:
- Existence: Does the entity legally exist, and is it active or in good standing where relevant?
- Identity: Do the name, registration number, address, and formation details match reliable records?
- Authority: Is the person acting for the entity actually authorized to do so?
- Ownership and control: Who owns or controls the entity, directly or indirectly?
- Risk: Are there sanctions, AML, fraud, or adverse media concerns tied to the business or its principals?
For KYB verification, the documents and registry records you collect should reflect the legal structure in front of you. A Delaware C-Corp often requires more attention to officers, board approvals, and capitalization context. An LLC often requires more attention to the operating agreement, manager powers, and member control. A foreign subsidiary adds another layer: local registration plus proof of connection back to the parent.
This article is designed as a checklist you can return to whenever your workflow changes. It is especially useful for investor verification teams, operations leads, compliance owners, and anyone building identity verification for businesses into onboarding or diligence processes.
For broader background, see KYC vs KYB vs AML: A Practical Guide for Funds and Platforms and Business Identity Verification Documents: What to Collect and When.
Checklist by scenario
Use the scenario below that most closely matches the entity you are reviewing. In practice, many teams start with a common intake form, then branch into a structure-specific checklist once the entity type is confirmed.
1. Delaware C-Corp verification checklist
A Delaware C-Corp is a common startup structure, but that familiarity can create shortcuts. Do not assume a standard venture structure means the records are complete, current, or aligned.
Verify the core entity record:
- Exact legal name, including punctuation and suffix.
- State of incorporation and formation date.
- Registration or file number, if available.
- Status in the incorporation jurisdiction.
- Principal business address and mailing address.
- Tax identification details where appropriate for your workflow.
Collect foundational documents:
- Certificate of incorporation or equivalent formation document.
- Recent good standing evidence if your process requires current status confirmation.
- Bylaws.
- Board consents or resolutions relevant to the transaction.
- Incumbency or officer list if available.
Confirm authority:
- Who is signing on behalf of the corporation?
- Is that signer an officer with authority under the bylaws or board resolutions?
- If the transaction is material, is there evidence of board approval?
- If shares, options, or financing representations matter, do the approvals line up with the claimed transaction history?
Check ownership and control:
- Current cap table or a reliable ownership summary.
- Major stockholders, control persons, and beneficial owners where required.
- Whether any holding company or nominee structure sits above the entity.
- Whether founder ownership claims match the cap table and governing approvals.
Run risk screening:
- AML screening and sanctions screening on the entity and relevant natural persons.
- PEP screening where your risk framework requires it.
- Adverse media or litigation review as a risk signal, not as a stand-alone conclusion.
- Document fraud detection checks if records appear inconsistent or altered.
What often matters most for Delaware C-Corps: alignment between the state record, governing documents, board authority, and the ownership story being presented in the deal.
If your review touches financing authority or signatory power, pair this with Board Consent, Signatory Authority, and Entity Authorization Checklist and How to Verify a Startup Cap Table During Due Diligence.
2. LLC verification checklist
An LLC verification checklist should start with one basic question: who has power to bind the company? The answer is often less obvious than it is for a corporation.
Verify the core entity record:
- Exact legal name and formation jurisdiction.
- Status in the state or country of formation.
- Principal address and any registered office details relevant to your records.
- Formation date and registration identifier.
Collect foundational documents:
- Articles or certificate of organization.
- Operating agreement, including amendments.
- Member or manager resolutions, if the transaction requires specific approval.
- Any certificate or schedule identifying current members and ownership percentages.
Confirm management model:
- Is the LLC member-managed or manager-managed?
- If manager-managed, who are the managers and what are their powers?
- If member-managed, which members must consent to the action at issue?
- Does the operating agreement restrict transfers, financing, or signature authority?
Check ownership and beneficial ownership:
- Current members and percentage interests.
- Any intermediate holding entities between the LLC and the ultimate beneficial owners.
- Whether any trust, nominee, or special-purpose entity needs to be traced further.
- UBO verification where required by your compliance framework.
Run risk screening:
- Screen the LLC and its controlling persons.
- Apply sanctions screening and AML screening to natural persons with significant ownership or control.
- Review whether the LLC is newly formed, inactive, or has a mismatch between stated activity and documentation.
What often matters most for LLCs: the operating agreement is central. If you skip it, you may miss who actually controls the entity, whether a signer can bind it, and whether ownership claims are accurate.
3. Foreign subsidiary verification checklist
Foreign subsidiary verification is less about collecting one more certificate and more about proving the relationship among three things: the local entity, the person acting for it, and the parent group that claims to own it.
Verify the local entity record:
- Exact registered name in the local jurisdiction.
- Local registration or company number.
- Status, registration date, and registered office.
- Any local tax, branch, or commercial registry identifiers relevant to the transaction.
Establish the parent-subsidiary relationship:
- Share register, ownership certificate, or equivalent local evidence.
- Group structure chart provided by the company.
- Parent entity records showing ownership of the subsidiary, directly or through intermediates.
- Consistency between the structure chart and formal records.
Confirm local authority:
- Who is the local director, manager, or authorized signatory?
- Does local law or the company’s constitutional documents require more than one signature?
- Is there a board resolution, shareholder resolution, or power of attorney supporting the action?
- Are translations needed for reliable review?
Check compliance and risk context:
- Sanctions screening for the subsidiary, parent, and relevant controllers.
- PEP screening where state ownership, politically exposed relationships, or regulated industries create higher risk.
- Industry-specific licensing or restrictions if the subsidiary operates in a regulated sector.
- Cross-border document authenticity concerns, including altered extracts or stale registry records.
What often matters most for foreign subsidiaries: proving control across borders without relying only on a self-prepared org chart. The local record may confirm existence, but not necessarily the ownership chain you need for beneficial ownership verification or transaction authority.
For a broader view of registration records across jurisdictions, see How to Verify Corporate Registration Records Across Major Startup Jurisdictions.
4. A practical minimum dataset for any entity type
If you need a repeatable intake standard before branching into structure-specific review, collect these fields first:
- Full legal name.
- Entity type.
- Formation jurisdiction.
- Registration number.
- Formation date.
- Business address.
- Nature of business.
- Name and role of primary contact.
- Names of controlling persons.
- Ownership summary.
- Evidence of authority for the signer.
That minimum dataset is often enough to trigger the right next step in a verification API or manual review queue.
What to double-check
The highest-value verification work usually happens after the first pass. This is where you compare records against each other instead of reading each one in isolation.
Name consistency
Look for mismatches between the legal name on formation documents, the signature block, the banking details, the investor portal profile, and the website footer. Small differences can be harmless, but they can also indicate an affiliate substitution, outdated documentation, or a fabricated record set.
Status recency
A company that existed last year may not be in good standing today. If your workflow depends on current legal status, make sure the evidence is recent enough for the transaction. For recurring onboarding, define internal freshness rules instead of relying on ad hoc judgment.
Authority versus title
Do not treat a job title as proof of authority. “Founder,” “CEO,” “Managing Member,” or “Director” may not be enough on its own. Check the governing documents and approvals that actually authorize the act in question.
Ownership chain completeness
Beneficial ownership verification often fails in the gaps between entities. If an investor or founder says a parent company owns the operating company, ask what owns the parent. Continue until you reach the natural persons or a clearly understood control structure.
Document integrity
Review whether scans are cropped, metadata is inconsistent, pages are missing, signatures appear reused, or dates do not line up. Document verification is not only about whether a file exists. It is about whether the file is coherent and fit for reliance.
Workflow evidence
If you are verifying entities at scale, preserve an audit trail showing what was collected, what was checked, when it was checked, and what exceptions were approved. This matters for internal accountability and for future reviews. See How to Design an Audit Trail for Identity and Business Verification.
Common mistakes
Most entity verification failures are not dramatic. They are ordinary shortcuts that compound into bad decisions.
- Using one universal checklist for every entity type. This is the fastest way to miss LLC authority issues or foreign subsidiary ownership gaps.
- Relying only on founder-provided documents. Company-supplied materials are useful, but they should be checked against independent records where possible.
- Skipping beneficial ownership verification because the company is venture-backed. A familiar financing profile does not replace UBO verification where it is required.
- Confusing registration with authorization. A validly registered entity still may not have approved the transaction in question.
- Ignoring stale records. Old good standing evidence, outdated operating agreements, and pre-reorganization cap tables are common sources of error.
- Treating the parent company as a substitute for the subsidiary. In cross-border setups, the contracting entity and the group brand are not always the same legal person.
- Collecting documents without assigning risk outcomes. Verification should lead to a clear result: approved, approved with conditions, escalated, or rejected.
If you are building or refining a process, it can help to compare your controls against Red Flags in Startup Verification: A Due Diligence Warning Signs List and Verification API Evaluation Checklist for Regulated Onboarding Flows.
When to revisit
A good entity verification process is not set once and forgotten. Revisit your checklist when the underlying inputs change, especially before seasonal planning cycles or when your onboarding tools and workflows change.
Update your review when:
- A company changes entity type, converts, or reorganizes.
- An LLC amends its operating agreement or management structure.
- A corporation closes a financing round that changes control, officers, or authority.
- A foreign subsidiary is inserted into or removed from a group structure.
- Your business expands into new jurisdictions or regulated use cases.
- You adopt a new verification API, investor portal, or document workflow.
- Your risk team changes thresholds for AML screening, sanctions screening, or beneficial ownership verification.
A practical action plan:
- Define your common intake dataset for all entities.
- Build three branching checklists: Delaware C-Corp, LLC, and foreign subsidiary.
- Map each document request to a verification purpose: existence, authority, ownership, or risk.
- Set freshness rules for registry checks and supporting records.
- Define escalation triggers for mismatched names, unclear ownership, missing approvals, and cross-border inconsistencies.
- Maintain an audit trail for every approval and exception.
- Review the checklist at least whenever your process, tooling, or target jurisdictions change.
If your workflow extends into investor or private market onboarding, you may also want to bookmark Private Market Onboarding Checklist for LPs, Founders, and SPVs and Digital Identity Verification for Investor Portals: Features, Risks, and Requirements.
The core takeaway is simple: entity verification works best when it reflects legal structure, not just document collection. If you adapt your KYB verification checklist to the entity in front of you, you will catch more authority issues, reduce fraud risk, and create a cleaner, more reliable business onboarding process.