Identity Verification as Board Business: A Readiness Review for Owner-Managed Firms

Identity verification at Companies House is no longer a novelty. The registered email address requirement has been in place since the early part of the Economic Crime and Corporate Transparency reforms, and verification of directors and people with significant control has moved from a voluntary option to an expectation that most companies have now met at least once. What has not changed, in my experience of working alongside owner-managed firms, is where the work sits. It is usually assigned to whoever files the confirmation statement, treated as an administrative step, and understood by the board only when somebody outside the company asks a question the register cannot answer.

That is the wrong way round. Verification is a personal status with corporate consequences. Once granted, it follows the individual across appointments, so a single verification can serve several companies. But the company's ability to file, to bank and to demonstrate good standing depends on every in-scope person holding that status, and on the record the company keeps matching the record it submits. The gap between those two is where trouble accumulates quietly.

Who is actually in scope

The obvious answer is directors, and that is correct. The less obvious answer includes people with significant control, including those whose interest arises through a trust or a corporate chain, and anyone acting on the company's behalf in a filing capacity. Advisers who submit filings as authorised agents take on their own obligations, which is a separate matter but one that intersects with the company's.

The practical test for a board is not to ask who is a director on paper. It is to ask who, at any point in the last three years, has exercised control or signed on behalf of the company, and then to check whether each of those individuals holds a verified status today. Appointments made mid-year for a single purpose, non-executive directors who joined for a funding round, and family members holding shares through a structure all have a habit of being overlooked.

A second, more mundane detail causes a surprising share of failures: the name. Verification is matched against identity documents, and the name submitted to Companies House must correspond. Middle names omitted at incorporation, a maiden name still on the register, a variation in spelling between a passport and a filing — each of these turns into a rejection, a delay and a second round of correspondence. It is worth a twenty-minute check against the actual documents rather than the internal contact list.

The register you keep versus the register that is filed

Companies are required to maintain their own statutory registers, and the health of those registers is a reasonable proxy for whether verification is under control. Three tests are worth applying.

First, look at resignations. Officers who left two or three years ago frequently remain on the register of directors because the notification was never filed, or was filed by one party and not recorded by another. An unverified former director can hold up a filing just as effectively as a current one.

Second, look at the PSC register and ask whether it still describes the ownership that exists. Transfers between family members, a small share issue to a key employee, or a reorganisation of a holding company can each change who meets the control thresholds without anyone thinking to revisit the register.

Third, look at the group perimeter. Dormant subsidiaries, non-trading entities held for a property or a legacy contract, and companies acquired in a small bolt-on deal are the places where verification is most often incomplete. They are also the entities nobody thinks about until a lender's due diligence team produces a schedule and asks about each one in turn.

The registered email address deserves the same scrutiny. It must be an address at which the company can be reached, and it must be monitored. Where a firm has supplied its accountant's inbox as the registered address, that is often perfectly workable — but only if there is an agreed process for forwarding statutory correspondence onwards and a named individual responsible for reading it. I have seen a company learn about correspondence for the first time from its bank rather than from its own inbox.

Where the handoffs fail

Most owner-managed firms do not verify in isolation. Formation agents, accountants and company secretarial providers are involved, and the failure modes are consistent across all three.

• Assumed cover. Each adviser believes another has dealt with a given individual, and nobody confirms it in writing.
• The single-purpose entity. A subsidiary or dormant company is left outside the exercise because it has no trading activity and therefore, in the mind of the person responsible, no obligations.
• Verified, but not recorded. The individual completes verification through their adviser, the status exists, but the company's own record of who has verified and when is never updated. The information sits in a portal rather than in the company's own papers.
• The new appointment. A director appointed in the current year is not added to the verification schedule because the schedule was built before they arrived.

None of these is dramatic. Each of them is a scheduling problem, and scheduling problems are cheap to fix before a deadline and expensive to fix after one.

Where the failure actually surfaces

Compliance breaches are rarely felt at the point of breach. They surface elsewhere.

In banking, mandated periodic reviews of business accounts now routinely require confirmation of the officer and ownership structure. A mismatch between what the bank holds and what Companies House shows will stall an account review at the least convenient moment.

In public sector tenders, standard selection questionnaires ask about directors, beneficial ownership and compliance history. An incomplete or inconsistent register is a clarification request at best and a scored weakness at worst.

In succession and exit, a buyer's lawyers will reconcile the statutory registers against the filed record as a matter of course. Unverified or unrecorded officers appear as defects on a completion checklist, and defects invite price adjustments and warranties.

A one-hour readiness review

Set aside an hour with the person who files and one director. Work through the following in sequence.

1. Pull a current register of directors and the PSC register, and compare both against the Companies House public record.
2. List every individual currently in scope, and mark against each name whether verification is complete, in progress, or unaddressed.
3. Repeat the exercise for each subsidiary in the group, however dormant it appears.
4. Check names against primary identity documents, including middle names and any former names.
5. Confirm the registered email address is one the company genuinely monitors, and name the individual responsible for it.
6. Identify who is due to file next, and whether the filing can proceed today without a hold.
7. Write down which adviser is responsible for which individual, and confirm it with them by email.
8. Diarise a review three months before the next confirmation statement, not three weeks.

Making it routine

The firms that have handled this well have done one thing in common: they made verification a condition of appointment rather than an afterthought. A new director is added to the schedule on the day they join, in the same way they are added to the payroll and the insurance policy. The confirmation statement becomes a checkpoint rather than a discovery.

That is a small governance habit with an outsized return. It keeps filing straightforward, keeps the bank comfortable, and means that when a tender panel or a prospective buyer asks the question, the answer is already in the file.