Middesk
Middesk is a business identity platform that verifies companies rather than people and takes that verification through to a decision. It draws on primary government sources first, with direct connections to the Internal Revenue Service and all fifty Secretary of State offices, then layers alternative sources and network signals across more than 400 data providers, covering business verification, taxpayer identification matching, beneficial ownership, sanctions screening and ongoing monitoring.
Middesk Agents pull data, cross reference sources and document findings for customer identification, due diligence, enhanced due diligence and merchant risk, while machine learning models detect risk patterns and ownership networks for fraud prevention. Further products supply entity data for underwriting and file state and federal registrations on a client's behalf. Institutions set rules for straight through approval and send the remainder to human review.
Middesk names customers including Rho, Toast, Mercury, Brex, Ramp, Plaid and Rippling, states that it verifies 7 million businesses a year, and has an announced integration with Backbase's engagement banking platform. Coverage is built on United States sources.
Capability Axes
Capability grades
15 of 15 axes rated · 9 graded A or B
Registry connections and a deterministic verification interface were the original business, and they would still run without models. Models carry the newer step from data to a resolved decision: agents investigate customer identification, due diligence and merchant risk, and detection models find risk patterns and ownership networks.
Three tiers are published: clear cut decisions run instantly on configurable thresholds, agents reason through cases needing judgment, and edge cases go to the institution's team with the data, the agent's reasoning and a recommended action. The banking page applies the same split, approving low risk applications automatically and routing complex ones to review with context assembled.
Every outcome carries a timestamp, attribution to the supporting source and an explainable result, so a reviewer can reconstruct why a business was approved or flagged. False positive and false negative rates for shell and synthetic detection, and any validation method, are unpublished.
Rho grew from 300 to 400 applications a month to more than 2,000, with a 43 percent gain in address validation accuracy and a fivefold rise in onboarding capacity, though no period or measurement method is given. Toast, Mercury and Brex appear among other named customers, alongside a claim of 7 million businesses verified each year.
Network signals layered in where primary sources fall short suggest learning across the customer base, useful against coordinated fraud rings and the reason their boundary matters. What a signal is built from, whether contribution is a condition of use and whether one lender's applications inform a competitor's decisions are not stated.
The privacy policy of November 2, 2025 reaches the service: Middesk Inc. acts as controller for verification and registered agent work and lists what it collects, Social Security and employer identification numbers among it. For a sole proprietor the business record and the person are one record, yet recipients are listed only by type and retention has no fixed period.
SOC 2 Type II compliance against the security, availability and confidentiality criteria is claimed on the security page and homepage. Neither a report request route nor a trust portal or penetration testing statement is published, though the firm holds beneficial ownership records for banks.
Customer identification, due diligence and enhanced due diligence run as distinct workflows, with Office of Foreign Assets Control screening, taxpayer identification matching and uniform commercial code filings built in. No license is needed for verification, while the registration product files with state and federal agencies and acts as registered agent.
Shell company and ownership network models that catch coordinated rings will also catch legitimate clusters, such as family businesses at one address or firms sharing a registered agent, and a false flag costs a real business an account or a loan. Verifying sole proprietors and new formations where legacy tools return nothing is product design, with no error rate by business type, size or ownership structure published.
A business that fails verification can lose an account or a loan, and the decision record lets an institution contest the outcome. Service levels, warranties and a correction obligation are unpublished, and the firm describes no route for a wrongly flagged business to reach it.
An orchestration layer, task specific sub agents and purpose built detection models describe the arrangement, but whose models do the work is never said. Built in house and called externally are not separated, and no subprocessor is named.
Inbound, direct connections reach the Internal Revenue Service and all fifty Secretary of State offices, alongside more than 400 data providers. Outbound, the interface has public developer documentation, an announced Backbase integration for banks and credit unions and a Docusign App Center listing.
Hosting is described only as a cloud interface and web application, with no provider, region or single tenant option named. With United States sourced data the residency pressure is modest for now.
Sales holds the pricing: the homepage links to no rate card, tier or unit of charge. Verification calls, agent investigations and registration filings would naturally price on different units, which leaves the annual cost hard to estimate.
Financial technology, banking and lending lead the named buyer segments, with separate material for verification, fraud prevention and registration. Coverage is United States only, with international described as forthcoming, so a lender onboarding businesses abroad needs a second vendor today.
Product updates
Material product, regulatory, evidence and commercial changes at Middesk, each verified against a live source and tagged to the capability axis it bears on. Funding rounds and awards are not product changes and are not logged.
Middesk removed the identifier_assessments array from Business Risk assessment responses. An assessment now carries only the overall verdict, score, level and business level risk dimensions, and email risk becomes its own email_risk order. Integrations that read the per identifier scores need to drop that dependency.
Middesk updated its verification agents: the Address Verification and Address Type Risk agents now pull Google Street View imagery from several angles, read exterior signage against the applicant's business name and classify the property as a storefront, office, industrial site, residence, mail drop or vacant land, with the images and assessment embedded in the review panel and audit PDFs. A new Document Verification agent, in early access for select customers, screens uploads such as IRS letters, formation filings, leases and bank statements for tampering and reconciles them against verified records. Teams can now set which agents run automatically and the confidence thresholds that force human review, P95 turnaround fell from about two minutes to one, and a unified audit trail links each finding, decision and action.
Alternatives to Middesk
Vendors in the same categories as Middesk whose profiles look most alike, each with a line on what the product does. Similar is not the same: check that each one does the job you need. No vendor pays for placement.
Elliptic provides blockchain analytics and crypto financial crime compliance to banks, crypto businesses, payment firms, regulators and law enforcement, scoring wallets and transactions in…
Trulioo verifies both people and businesses through one platform, reaching 195 countries by orchestrating more than 450 global and local data sources behind a single integration, and…
Duna is a business identity platform for regulated companies, automating know your business, know your customer, customer due diligence and anti money laundering checks during onboarding.
Flagright sells a financial crime compliance platform to payment processors, digital banks, banks, credit unions, brokerages, crypto and remittance firms, covering real time transaction…
GBG is a London listed identity verification, location intelligence and fraud prevention group headquartered in Chester and founded in 1989, with subsidiaries including Acuant, IDology and Loqate.
Jumio sells identity verification, biometric authentication, risk signals and AML screening to banks, fintechs, lenders, payment companies and other regulated businesses.
The index publishes no overall score or ranking. See what we assess and the methodology.
Pricing
Vendor-published figures are labeled as such. Figures labeled “Estimated” are derived from third-party sources and have not been confirmed by the vendor.
No pricing data has been verified for this vendor. Pricing information will be published here once confirmed through vendor disclosure or third-party estimation.