A contract, a proforma invoice or a set of wire instructions arrives with a U.S. entity name on it, and the question is always the same: is this company real, is it solvent, and is it who it says it is. Buyers and partners outside the United States usually assume that company due diligence here works the way it does at home — one national register, one search, one authoritative record. It does not. There is no national company registry in the United States, no federal company file, and, after the FinCEN final rule of 11 August 2026, no federal record of who owns a U.S. entity.
What exists instead is a set of separate record systems — fifty states plus the District of Columbia, court dockets, lien indexes, licensing boards and sanctions lists — never designed to be read together. Verification means assembling evidence across them and knowing which pieces actually prove something. What follows is the terrain: where the records live, what each one establishes, what it quietly fails to establish, and where these files go wrong.
Company Due Diligence Without a National Registry
U.S. companies are creatures of state law. A corporation or an LLC exists because a document was accepted by a state office — the Secretary of State in most states, but also the Division of Corporations, the Corporation Commission or the Department of State depending on where you are. Each runs its own index with its own search logic, naming conventions and fee schedule. What one state calls a certificate of good standing, another calls a certificate of existence and a third a certificate of status.
The federal government does not incorporate ordinary businesses. The IRS issues Employer Identification Numbers but publishes no directory of taxpayers, and the SEC knows only companies that register securities. The one federal system that might have changed this is now closed. FinCEN’s beneficial ownership database under the Corporate Transparency Act was never public; a March 2025 interim final rule limited reporting to foreign reporting companies, and on 11 August 2026 FinCEN made that permanent, exempting U.S. companies and U.S. persons and directing FinCEN to delete information it reasonably believes relates to them. Foreign reporting companies must still report their foreign individual beneficial owners. Establishing who really controls the company is therefore a private evidentiary exercise, not a lookup.
Two distinctions cause most of the confusion. Registration is not regulation: accepting a filing is a clerical act, and the state does not audit what was filed or check that the officers named exist. And the federal Customer Due Diligence Rule at 31 CFR 1010.230 binds covered financial institutions — banks, brokers and dealers in securities, mutual funds, and futures commission merchants and introducing brokers — not ordinary operating companies. That is a narrow exemption, not a general one: sanctions screening under OFAC is a separate, strict-liability obligation reaching every U.S. person and business.
What Each Source Proves — and What It Does Not
The map below is the real one. Read as a group, these records support a defensible conclusion; read individually, they are routinely over-interpreted. The useful question is never «did it come back clean» but «what does this document actually assert».
| Source | What it establishes | What it does not establish |
|---|---|---|
| Secretary of State, state of formation | Existence, legal name, entity number, formation date, status, registered agent | Solvency, operations, ownership, signing authority |
| Certificate of good standing | That filings and fees were current on the date printed | Anything after that date; financial condition |
| Foreign qualification | That the entity registered where it trades, and its agent there | That it qualified everywhere it should have |
| EIN and federal tax status | A federal tax identity; for exempt organizations, IRS recognition | Tax compliance or standing with the IRS |
| UCC filings | Secured creditors, blanket liens, described collateral, filing dates | Unsecured debt, trade payables, total leverage |
| Federal and state court dockets | Litigation, judgments, bankruptcy filings, injunctions | Private settlements, arbitration, sealed matters |
| Industry licensing bodies | Authorization for a regulated activity; discipline on record | Anything outside that regulator's remit |
| OFAC and sanctions lists | Whether the party, or an owner behind it, is designated | A clean result where ownership is unknown |
| Federal agency records via FOIA | Contracts, permits, correspondence and enforcement records | Immediate answers; nine exemptions apply |
Three of those rows deserve a plain warning. Active status proves that fees were paid and reports filed, nothing more. A registered agent is usually a commercial service acting for thousands of entities, so that address tells you where service of process goes, not where anyone works. A website with a virtual-office address is marketing, not evidence of operations. None of this justifies walking away on its own; all of it justifies continuing to ask, which is why the exercise turns on the documents a complete corporate file should contain.
What the Official Guidance Does Not Tell You
The state of formation and the state of operations are usually different, and the second one has teeth. Formation in Delaware, Wyoming or Nevada with real activity in California, New York or Florida is ordinary, not suspicious. What matters is foreign qualification: an entity transacting business in a state without registering there faces back fees and penalties and, in many states, cannot maintain an action in that state’s courts until it cures the defect. That affects whether your counterparty can enforce its contracts at all.
The signing entity is frequently not the entity you negotiated with. Groups routinely run a dozen similarly named LLCs: an operating company, an IP holder, a payroll entity, a contracting shell. Entity names are unique only within one state, so the same name can exist in a dozen indexes with unrelated owners. The name on the letterhead, in the signature block, on the invoice and on the wire instructions has to be the same legal entity, in the same state, under the same entity number. Reconciling those four is the highest-yield step in company due diligence, and the one most often skipped.
Corporate history breaks search continuity in ways the status page hides. Name changes, conversions, mergers, administrative dissolution and later reinstatement live in the filing history, not on the summary screen; an entity dissolved for two years and reinstated last month reads as active today. Some states index only current names, so a search against the name you were given misses the record entirely. «No record found» is more often the wrong index or the wrong name than proof of nonexistence.
UCC searching is technical, and a careless search returns a false clean. Article 9 indexes filings against the debtor’s exact legal name, and filings against a registered organization belong in the state where it is organized, not where the collateral sits. A search run in the operating state, against a trade name, or against a name missing an «Inc.», comes back empty while a blanket lien over all assets sits on file elsewhere. Before extending credit, that is the difference between a decision and a guess.
Sanctions exposure does not stop at the named list, and federal records are not available on demand. OFAC’s 50 Percent Rule blocks entities owned 50 percent or more, directly or indirectly, in the aggregate, by blocked persons, even where the entity itself is named nowhere. A clean match against the SDN list is therefore not a clean result unless you know the ownership behind the name, and no federal registry will supply it. Separately, how the FOIA request process actually works is a request with statutory timelines and nine exemptions, not a live database: a file needing federal records has to open with them.
The Most Common Mistakes and What They Cost
The failures we are asked to repair are rarely exotic. They are the same handful of shortcuts, each with a predictable price.
- Verifying the entity name but not the signing entity. The record checked was the well-known operating company; the contract was signed by a similarly named affiliate with no assets. The cost is a judgment against an empty box.
- Relying on a screenshot the counterparty sent. A certificate image is a picture, and pictures are edited in minutes. Records have to come from the issuing office, dated, and read against the filing history.
- Searching only the state where the office is, not the state of formation. This produces both errors at once: «no record found» read as fraud when the entity is legitimate in Delaware, and a clean search in an irrelevant index read as clearance.
- Treating an aggregator database as authoritative. Commercial corporate records search products resell state data on a refresh cycle and merge legally distinct entities. A company can be dissolved for months while the aggregator still shows it active.
- Skipping sanctions because «we are not a bank». The CDD Rule does not reach ordinary operating businesses, but OFAC does. Sanctions liability is strict, applies regardless of sector or intent, and the 50 Percent Rule extends it to entities on no list at all.
The compounding cost is what clients feel most. A file assembled badly has to be rebuilt from scratch, because there is no way to tell which findings can still be trusted. Onboarding stalls, a bank asks for the record set again, an agreement sits unsigned, and the same money is spent twice. A due diligence report that ties every finding to its source exists so the work survives the first challenge to it.
How Compliance Officers Resolves It for You
We run these files continuously, so we already know which office answers which question, where the search logic will betray you, and which records are worth paying for. You do not chase Secretary of State offices in four states, argue with a docket interface or draft a FOIA request. You give us the counterparty and the transaction; we return an assembled, sourced answer.
- Corporate existence and status in the state of formation, with the filing history read in full — amendments, name changes, conversions, dissolutions, reinstatements — not just the current screen.
- Footprint verification: foreign qualification where the company actually operates, registered agent analysis, and reconciliation of the trading name against the entity that will sign and be paid.
- Encumbrances and disputes: UCC filings searched in the correct jurisdiction under the correct debtor name, plus federal and state dockets, judgments and bankruptcy records.
- Regulatory and sanctions position: industry licensing where the activity is regulated, and OFAC screening applied with the 50 Percent Rule in mind rather than as a name match.
- Federal records where they matter, requested through FOIA at the start so the statutory timelines run in parallel.
The output is one report, in English, written so a credit committee, a bank or a court can follow it: every finding attributed to the record it came from, every date stated, every gap named as a gap rather than smoothed over. Where the evidence supports a conclusion we say so; where it does not, we say that too and tell you what would resolve it.
Everything is handled remotely, wherever you and the counterparty are located. Zero paperwork for you, zero errors, zero unnecessary delays. If you are weighing a first order, a distribution agreement, an acquisition or an onboarding decision, contact us to evaluate your case.
Frequently Asked Questions
Is there one website where I can look up any U.S. company?
No. Records are held state by state; there is no national registry and no public federal ownership record. To check if a company is legitimate you identify the state of formation, work that index, then corroborate against liens, dockets, licensing and sanctions data. That assembly is the actual work, and it is what we deliver as a single document.
Does an "active" status or a certificate of good standing mean the company is solvent?
It does not. Active status means fees were paid and reports filed; a good standing certificate confirms that only on the date printed on it. Neither says anything about cash, debt, liens or litigation. Solvency signals come from UCC filings, judgments and bankruptcy records read together, which we pull alongside the corporate record.
How long does verification of a U.S. company take?
Straightforward corporate and status verification is fast. Timing extends when the company operates in several states, when the filing history includes name changes or reinstatements, when court records need real review, or when federal records are sought through FOIA, which carries statutory timelines outside anyone’s control. We tell you at the outset which parts set the schedule.
Am I legally required to run this if I am not a financial institution?
The Customer Due Diligence Rule at 31 CFR 1010.230 applies to covered financial institutions, not to ordinary operating businesses. Sanctions law is different: OFAC obligations apply to all U.S. persons and businesses on a strict-liability basis, so screening is not optional for anyone. Beyond that, verification is commercial self-protection, and often a condition your own bank imposes. We scope it to your exposure.
What does it cost to verify a U.S. company?
It depends on scope: how many states are involved, whether court and UCC searches are needed, whether the ownership chain has to be established, and whether federal records are requested. State and government office fees vary by jurisdiction. Rather than quote a generic figure, contact us to evaluate your case and we will define the scope your decision requires.
The company was formed only weeks before our deal. Is that a red flag?
It is a fact that needs an explanation, not an automatic disqualification. Single-purpose vehicles formed for one transaction are normal. The question is whether the explanation holds against everything else: who signs, who holds the assets, who guarantees performance, and whether an established parent stands behind it. Recent formation plus a virtual address and no employees is a different matter. We test which one you have.
Do you need to know whether the U.S. company in front of you is real, solvent and who it claims to be?
Compliance Officers runs the verification end to end: zero paperwork for you, zero errors, zero unnecessary delays.
Phone and WhatsApp: +1 305 647 3000
