Vendor and supplier due diligence
Before you send an advance to a company you found online, it is worth knowing whether that company exists and whether the identifier they gave you actually belongs to them.
No subscription. You pay per check, and only after the person has agreed to it.
Who this is for
Procurement teams, finance functions and business owners contracting with unfamiliar suppliers anywhere in India.
The problem it solves
Fabricated GSTINs and shell entities are a genuine fraud surface in India. A supplier sends a registration number on a letterhead, it looks plausible, and nobody checks it until an advance has already gone out. The number may be invented, or it may be real but belong to an entirely different company.
How it works
- Enter the supplier’s name with their GSTIN or CIN.
- The GSTIN check digit is computed offline, which catches an invented number with certainty and costs nothing.
- The identifier is checked against an independent corporate register to confirm which entity it actually belongs to.
- You get a report showing whether the identifier matches the name you were given, and whether that entity is active.
What you get, and what you do not
Stated with equal weight. A background check that quietly leaves something out is worse than one that names its limits.
Included
- GSTIN check-digit validation, which proves a number is not fabricated
- PAN and GSTIN cross-verification, since a GSTIN contains its holder’s PAN and a mismatch is a hard contradiction
- Corporate registry lookup by CIN or GSTIN, returning the registered legal name, status and jurisdiction
- Detection of an identifier registered to a different entity than the one named
- Sanctions and watchlist screening on the entity
Not included
- Live GST filing status and returns history, which needs a licensed GST provider we have not yet connected.
- Financial statements, credit ratings and litigation history.
- Coverage of every Indian company. The corporate register we use holds roughly 382,000 Indian entities, mostly those active in financial markets, so many legitimate small companies are simply absent. Not being found is not evidence of not existing, and the report says so.
Where each answer comes from
| Check | Source | Limit |
|---|---|---|
| GSTINFormat test | Published GSTIN check-digit algorithm, computed offline | A correct check digit does not prove the registration exists or is active. |
| Corporate registerLive | GLEIF global LEI register | The register holds about 382,000 Indian entities, mostly those active in financial markets. Not being found is not evidence of not existing. |
| PANFormat test | Published PAN structure rules, computed offline | A well-formed PAN is not a verified one. Nothing confirms it belongs to this person. |
| Sanctions and watchlistsLive | Didit AML screening, with UN and EU lists as fallback | International designations only. It does not cover Indian criminal records. |
| News mentionsLive | GDELT global news index | Name-based, so it can include unrelated people with the same name. Every mention needs reading, not counting. |
| MCA directorshipsNot connected | MCA21 via a licensed provider | Not connected. Reports mark it NOT AVAILABLE rather than clear. |
Common questions
How do I know a GSTIN is genuine?
A GSTIN carries a published check digit computed from the preceding fourteen characters. If it does not compute, the number was mistyped or invented, and that can be established offline with certainty in milliseconds. A correct check digit does not prove the registration is active, which is a separate question.
What if the identifier belongs to a different company?
That is exactly what this catches, and it is the most common way a supplier misrepresents itself. If the CIN you were given is registered to a different legal name, the report flags it as needing attention and tells you which entity it actually belongs to.
Do I need the supplier’s consent to check a company?
Company registration data is public, but our flow asks for consent regardless. It keeps one consistent standard across the product, and a supplier who is who they say they are has no reason to object.
Can I check many suppliers at once?
Yes, through CSV upload from your dashboard. Each entity consents and is checked separately, and reported individually. The API covers consent capture only; it never runs checks or returns findings.
Related services
Available in every state and union territory, because the sources are national. Verification by state.