Business KYC Requirements

This page is the field-level reference for every attestation that may appear on a business compliance review — both review-level attestations and the per-associated-person attestations uploaded against each UBO / control person. For the end-to-end flow (creating a review, uploading documents, creating associated persons, submitting, polling status) see the Business Compliance Review guide.

Each section below is one attestation. The header states whether the attestation is REQUIRED or CONDITIONALLY REQUIRED, the conditional sections lead with what triggers the requirement, and every section ends with a table describing each field — its JSON name, type, whether it is required or optional, and any input limits enforced by the API.

The requiredAttestations array on the review reflects the same rules described here. If the API response and this guide ever disagree, trust the API.

Tier overview

Business reviews use two tiers: us_standard (USD-only payouts, reduced documentation) and full (full KYB with UBO ownership and proof-of-address documents). The tiers share an identical core; full adds two additional review-level document attestations and one additional per-associated-person attestation.

---

Review-level attestations

businessIdentification — REQUIRED

Legal identity of the business.

businessTaxInfo — REQUIRED

Business tax identification number and type.

businessAddress — REQUIRED

Registered (legal) address, with an optional separate operating address.

businessContactInfo — REQUIRED

Business phone number and email.

businessDetails — REQUIRED

Website, legal structure, incorporation date, industry, free-text description, and intended use of Mural.

businessOperations — REQUIRED

Money-movement profile, geographic reach, and high-risk-activity flags.

businessFinancialInfo — REQUIRED

Primary income source, annual revenue band, and estimated monthly transaction volume.

businessFormationDocuments — REQUIRED

One or more uploaded formation document references (e.g. articles of incorporation). Upload each file via the Generate Upload URL endpoint first and reference the returned documentId here.

businessUboOwnershipDocuments — REQUIRED (full only)

Required for the full tier only. Omit on us_standard.

One or more uploaded UBO ownership document references (e.g. shareholder registry, cap table).

businessProofOfAddressDocuments — REQUIRED (full only)

Required for the full tier only. Omit on us_standard.

One or more uploaded business proof-of-address document references.

businessFlowOfFundsDocument — CONDITIONALLY REQUIRED

Required when businessOperations.transmittingCustomerFunds is true. Businesses that hold or transmit customer funds must attach a flow-of-funds document describing how money moves through the business. For all other businesses this attestation may be omitted.

A single uploaded flow-of-funds document reference.

businessAssociatedPersons — REQUIRED

Links the review to the organization's previously-created associated persons (UBOs and the control person). Each ID must reference an existing associated person for the organization, and at least one referenced person must have the CONTROL_PERSON relationship.

---

Associated-person attestations

Uploaded against each associated person via the Upload Associated Person Attestations endpoint. Every associated person referenced from businessAssociatedPersons must have the full required set uploaded before the review can be submitted.

associatedPersonPersonalInfo — REQUIRED

associatedPersonContactInfo — REQUIRED

associatedPersonResidentialAddress — REQUIRED

The country supplied here drives whether associatedPersonProofOfAddress becomes required for this person on full.

associatedPersonTaxInfo — REQUIRED

associatedPersonIdentityDocument — REQUIRED

Government-issued identity document for the associated person. Same discriminated-union shape as the individual review — see Government ID object.

associatedPersonProofOfAddress — CONDITIONALLY REQUIRED

Required only on the full tier. On us_standard this attestation may be omitted for every associated person.

One or more uploaded proof-of-address document references for this associated person.

---

Shared objects

Name object

Used wherever a name field appears (on associatedPersonPersonalInfo).

Address object

Used wherever a registeredAddress, operatingAddress, or address field appears.

Government ID object

The governmentId field on associatedPersonIdentityDocument is a discriminated union over 28 document variants. Every variant shares the same base shape; only the ID-number field and the document-reference field(s) differ per variant.

Common shape across every variant:

Single-sided variants (one documentId field): passport, internalPassport, travelDocument, citizenshipCertificate, panCard, nbiClearance.

Double-sided variants (front + back documentId fields): driversLicense, nationalId, stateId, passportCard, permanentResidenceCard, visa, residencePermit, voterId, healthInsuranceCard, workPermit, consularId, foreignId, myNumberCard, longTermPass, ofwId, postalId, sssId, umid, municipalId, tribalId, keypassId.

For the complete per-variant schema (exact field names, country examples, etc.) see the AssociatedPersonIdentityDocumentAttestation entry in the API reference.