Vendor and supplier due diligence
Before you send an advance to a company you found online, it is worth knowing whether that company exists and whether the identifier they gave you actually belongs to them.
No subscription. You are charged per check, and only after the subject has consented.
Who this is for
Procurement teams, finance functions and business owners contracting with unfamiliar suppliers anywhere in India.
The problem
Fabricated GSTINs and shell entities are a genuine fraud surface in India. A supplier sends a registration number on a letterhead, it looks plausible, and nobody checks it until an advance has already gone out. The number may be invented, or it may be real but belong to an entirely different company.
How it works
- 1Enter the supplier’s name with their GSTIN or CIN.
- 2The GSTIN check digit is computed offline, which catches an invented number with certainty and costs nothing.
- 3The identifier is checked against an independent corporate register to confirm which entity it actually belongs to.
- 4You get a report showing whether the identifier matches the name you were given, and whether that entity is active.
What is included
- GSTIN check-digit validation, which proves a number is not fabricated
- PAN and GSTIN cross-verification, since a GSTIN contains its holder’s PAN and a mismatch is a hard contradiction
- Corporate registry lookup by CIN or GSTIN, returning the registered legal name, status and jurisdiction
- Detection of an identifier registered to a different entity than the one named
- Sanctions and watchlist screening on the entity
What is not included
Said plainly, because a background check that quietly omits something is worse than one that names its limits.
- Live GST filing status and returns history, which needs a licensed GST provider we have not yet connected.
- Financial statements, credit ratings and litigation history.
- Coverage of every Indian company. The corporate register we use holds roughly 382,000 Indian entities, mostly those active in financial markets, so many legitimate small companies are simply absent. Not being found is not evidence of not existing, and the report says so.
Common questions
How do I know a GSTIN is genuine?
A GSTIN carries a published check digit computed from the preceding fourteen characters. If it does not compute, the number was mistyped or invented, and that can be established offline with certainty in milliseconds. A correct check digit does not prove the registration is active, which is a separate question.
What if the identifier belongs to a different company?
That is exactly what this catches, and it is the most common way a supplier misrepresents itself. If the CIN you were given is registered to a different legal name, the report flags it as needing attention and tells you which entity it actually belongs to.
Do I need the supplier’s consent to check a company?
Company registration data is public, but our flow asks for consent regardless. It keeps one consistent standard across the product, and a supplier who is who they say they are has no reason to object.
Can I check many suppliers at once?
Yes, through CSV upload or the API. Each entity is checked separately and reported individually.
Run your first check
Raise a request in under a minute. The subject consents on their own phone, and nothing is looked up until they do.
Related
Available across India
The consent framework and DPDP obligations apply nationwide, and the sources we check are national rather than state-specific.