borrower_id identifies the API borrower, while subject_id identifies its business or person entity returned by Get borrower. Related-party observations carry their own authorized subject IDs.
Retrieve the results
Use the existing endpoint scopes and source entitlements. Related-person access must remain associated with the authorized business or consumer purpose. A configuration change or new source result creates a new record; it does not overwrite an earlier assessment. The source providers are not separate public AMLOK APIs or borrower-configurable integrations.
For example, retrieve
GET /v1/data/records?borrower_id=bor_synthetic&resource_type=verification_assessment, follow all pages, and save the returned data-change cursor. The pagination guide defines snapshot and cursor expiry. A result must include all authorized source observations without silent truncation. Large original reports and provider payloads use their evidence/data records and document references rather than embedding file bytes in the assessment.
Read status before values
statusdescribes assessment completeness.outcomedescribes verification, not creditworthiness or a lending decision.- Each section has its own
status,reason,explanationandcoverage. An empty section never proves there were no risks or no owners. - Each check has an execution
stateand anoutcome. Pending, failed, skipped and not-requested checks are not passes. Keep original source decisions and any override with its reason and timestamp. field_comparisonspreserves submitted and observed values, normalization, match scores and thresholds.not_submitted,not_checkedandsource_unavailablediffer fromnot_matched.- A registry candidate, active registration, identity document or extracted name does not independently prove a verified business, a verified owner or good standing.
- Sections are required, and scalar fields are nullable where their sources may omit them. Each null observation field has a
missing_fieldsentry with its relative JSON pointer and reason. Unknown is never converted to zero, false or a clean result.
Ownership and corporate records
People and legal entities can both own shares.relationships records roles such as director, agent for service, officer, parent and signatory. One party can have several roles; a service agent is not automatically a director or owner.
economic_share and voting_share are separate fractions from 0 to 1. A source value of 2.366% voting shares becomes voting_share: "0.02366"; it does not establish economic ownership. Preserve the original wording in reported_interest. Ranges keep their lower and upper bounds. Indirect effective_share requires a fully evidenced chain; missing parents or ownership information leave it null with an unresolved reason. Do not force partial holdings to total 100% or assume that a corporate shareholder is the ultimate natural-person owner.
ownership_resolution states the ownership basis and unresolved subjects. Known/unknown fractions use the same explicit denominator, reconcile to one when both are supplied, and remain null when the source does not support a denominator. Complete ownership requires all required interests and chains to be resolved, not merely all returned rows processed.
Registry facts retain multiple registration numbers, countries and subdivisions, legal forms, names, address roles, annual-return years and filing dates. Active registration and overdue returns can coexist. corporate_structure retains share classes, voting, dividend, redemption and liquidation provisions, transfer restrictions, director limits and sourced articles. Documents may contain facts absent from the JSON report; those extracted facts carry document/page provenance and a document_extracted basis.
Screening and provider scores
Screening returns all authorized candidate hits, the datasets actually searched, source freshness, reported and returned counts, and review disposition. A potential name match is not a confirmed sanctions match, a finding of fraud or proof of wrongdoing. Confirmed matches and false positives require documented review provenance.no_match requires a completed screening, complete coverage of the explicitly requested scope, zero reported/returned hits and a screening timestamp. Failed sources, missing datasets and unknown coverage produce inconclusive or not_screened. A source’s subscription billing date is never used as a rescreening timestamp.
Provider scores retain their original numeric value, rating, scale, direction and method when known. Unknown bounds remain null. Identity similarity, business risk ratings, liveness confidence and fraud indicators are not interchangeable and are not AMLOK default probabilities. A TIN/EIN/BN/VAT check confirms only the stated identifier/name or format result; it does not prove taxes were paid or that there is no tax debt.
Evidence, access and source-specific fields
Every populated observation has a source, basis, observation/retrieval time and exact evidence or data-record reference. Field-specific provenance preserves differences and conflicting observations instead of silently selecting a convenient value. Source URLs are only public registry references; controlled files use AMLOK document IDs. Download authorization and source licensing are rechecked when accessed.source_payload on the existing Data API preserves permitted provider-native detail. supplemental_facts holds allowlisted scalar facts with names, types, meanings, units and source paths when a stable shared field does not apply. These are not permission bypasses: the same purpose, licensing, redaction and retention rules apply to normalized fields, source payloads, reports and exports.
Personal identifiers are masked by default; full disclosure requires explicit entitlement and purpose. Identity/compliance attributes are not implicit inputs to lending eligibility or capacity metrics. Default responses exclude raw biometric templates and capture media, credentials and secret session URLs, cross-customer identities, private personal social profiles, and unnecessary protected characteristics. Liveness and face checks return their results and evidence references. Original identity documents remain subject to document-specific authorization; a result reference never grants access by itself.