Customer Record

Getting Started

Customer Record

The customer record is where you can manage all of the data, documents, certificates, and integrations for your customers. 

Each customer record has 4 different sections; Data, PDF, Docs, and Integrations. Documentation on each of these sections can be found to the left. 

Request Completion & Request Signature

You can request the completion or signature of your customer by clicking the “paper plane icon” in the top right-hand corner of the page. 

Export Data

You can export data via CSV or JSON by clicking the 3 ellipses in the top right-hand corner of the page. 

Update the Status

You can update the status of a customer by choosing a status from the dropdown menu at the top of the left-hand sidebar. There are 11 statuses in total.

Customer Data

The data section within the customer record is where you will create and edit field values. 

Left-hand sidebar

Search bar

You can search for fields within the data section by typing into the search bar. When you click on the field within the left-hand sidebar it will highlight the field in the middle section. 


There are 11 statuses in total. You can manually update the status. 


You can add notes by hitting the notepad icon


The data will be broken down into categories.  Typically, this will be personal, business, banking, industry specific, and other. 

Middle Section


Field Label

This was decided on the correlated Template


You can manually fill this in or allow your customer to enter these values on the digital application


This is the field type and was decided on the correlated Template


This will show a flashing green circle if this field is mapped to the PDF

Customer PDF

Customer Record PDF

The PDF view is typically used to enter values that are not on the Data view within the Customer Record. You can enter agent/office information, pricing information, and other values necessary to complete the application. 

After you click on the field within the PDF you will be able to edit/udate the field value on the left-hand sidebar. 

Always hit save before exiting. 


You can save or print the PDF by clicking on the Print button in the top right-hand corner. 

Customer Docs

Customer Record Docs

In the Docs section of the Customer Record you will find a few different types of documents. 

Generated Documents

These are documents created and uploaded by Under after your customer has completed and/or electronically signed the application. 

Electronic Signature Certificate

Under will provide you with an electronic signature certificate with all signers

  • First Name
  • Last Name
  • Email 
  • IP Address
  • Date and Time of signature

Supporting Documents

Documents requested by your company on the correlated Template and uploaded by the customer during the application process.

Uploaded Documents

Documents uploaded by your or your company

Google Maps Integration

Customer Record Google Maps Integration

Under utilizes the Google Maps API for geolocation services. When the user allows location services within their browser, Under will return the latitude and longitude of the user’s location. 


You can utilize the Google Maps integration by hitting the “+ Create” button and scrolling to the bottom of the left-hand sidebar. At the bottom you will see the Google Maps icon. By dragging this icon to the top left-hand corner of the Form you have turned on this geolocation service. When you customer allows the browser to track them you will see the map of their location within the customer record.

Twilio Integration

Customer Record Twilio Integration

Twilio - Lookup v2 and Auth are triggered automatically when the Twilio phone field is inserted into an end-user form. This is triggered when the end-user enters their phone number and hits next. Once they enter the 6 digit multi-factor authentication code the Lookup and Auth products send and receive data. Identity is triggered after the end-user submits their application OR the Under user manually presses the button to run Identity cross-referencing the end-user data. 

Required Fields for Lookup

  • Personal Phone Number

Required Fields for Identity

  • First Name
  • Last Name
  • Date of Birth
  • Address
  • Business Phone

Auth Requires the user to verify their phone number during the application process


  • If UC has Twilio on the first card, we will automatically run Twilio Auth
  • After an EU Submits we will automatically run Verify to cross-referencesome text
    • Name
    • Address
    • Date of Birth
  • If EU doesn’t submit but we have the informationsome text
    • UC can hit Verify to cross-reference 
  • UC will have an option to run Lookup on other phone numberssome text
    • Business
    • Customer Service

Sample Responses

What do we present to user

Plaid Integration

Customer Record Plaid Integration

Under utilizes Plaid to allow users to connect their bank account. We currently utilize the Auth, Database Insights, Balance, and Transactions tools from Plaid. 


Auth allows you to request a user's checking or savings account information, making it easy for you to initiate credits or debits. For example, your app might allow users to accumulate a credit balance that they can cash out to a bank account, or it might allow users to pay you using their bank account information. With Auth, a user can provide this information in a frictionless way, simply by authenticating into their bank account.

Note that Auth can only be used with checking or savings accounts. Auth cannot be used with other depository accounts, such as money market accounts. Credit-type accounts, including credit cards, cannot receive payments directly via electronic interbank transfers, and Auth data cannot be used to set up credit card payments.

Database Insights

Database Insights (beta) can increase conversion by providing instant account verification without requiring users to link a bank account via credentials. End users choosing the manual Database Insights path will not be required to log in to their financial institution and instead can enter their account and routing number manually.

Database Insights verifies account and routing numbers by checking the information provided against Plaid's known account numbers, leveraging Plaid's database of over 200 million verified accounts. If no match is found, Plaid will check the account number format against known usages by the institution associated with the given routing number. Database Insights will provide a verification status of 'pass', 'pass with caution', or 'fail' and a set of attributes that contributed to that status, such as whether a match was found or whether Plaid fell back to checking account number formats.

Database Insights does not verify that the user has access to the bank account,


Balance is Plaid's product for receiving real-time Balance information via /accounts/balance/get. This real-time Balance data can be helpful when checking to see if an account has sufficient funds before using it as a funding source for a money transfer. Balance is available for use exclusively in combination with other Plaid products, such as Auth for money movement or account funding use cases or Transactions for personal finance use cases.


Transactions data available via /transactions/sync includes transaction date, amount, category, merchant, location, and more. Transaction data is lightly cleaned to populate the name field, and more thoroughly processed to populate the merchant_name field. By default, Under gathers the last 90 days' worth of transactions.

KYC Integration

Customer Record KYC Integration

Phone, Address, and Email Verification

Under utilizes Ekata, owned by Mastercard, to verify phone numbers and personal addresses. Under utilizes Idology to verify email addresses as well as providing a cross-references for phone and address verification. 

Phone Responses

  • Carrier Informationsome text
    • Identify the company that provides voice or data services for a given phone number.
  • Phone Validity Checksome text
    • Phone numbers are determined to be real or not real, with a valid area code.
  • Country Detailssome text
    • Access the country calling code, country code, and country name associated with the phone number.
  • Prepaid Account Checksome text
    • Indicate whether the phone number is associated with a prepaid account.
  • Velocitysome text
    • How often a number has been observed in Ekata’s Identity Network—a network consisting of over 200 million monthly, anonymized real-world queries—over the past 90 days.
  • Popularitysome text
    • How many merchants have transacted with this phone number in the past 90 days.

Address Responses

  • Network Signalssome text
    • Five signals derived from the Ekata Identity Network that provide insight into how a provided address is being used online (e.g. how often it is used, the number of businesses it has been used at, how often it has been used with other identity elements, and the first and last time the address was used.)
  • Geocoordinatessome text
    • Latitude and longitude data points for calculating distances from other reference points.
  • Normalized Addressessome text
    • Consistently formatted addresses for your models and rules-based systems.
  • Unique Identifiersome text
    • Unique identifier (UUID) that can be used to perform velocity calculations.

Global email verification

  • Analyze multiple email attributes, including domain, syntax, age of the account and originating country, for deeper insights into a user.

Credit Risk Assessment and Management

Under utilizes ID Analytics, owned by Lexisnexis, to assess credit risk

ID Analytics ID Score

Range: 0 - 1000

  • 0 - 500: green, low fraud risk
  • 500 - 700: light to bright yellow, not worth decisioning on - a signal but not enough in and of itself, low-medium fraud risk
  • 700 - 850: orange, highly questionable - medium-high fraud risk
  • 850 and above: red, high fraud risk
  • 950 and above: bright red, very high fraud risk

Returned Reason Codes

The Returned Reason Codes table displays the reason codes returned whether or not they were used in decisioning. Here is a link to a list of reason codes. 

Hardware and Device Data Verification

Under utilizes Iovation, owned by Transunion, for device verification. Iovation identifies trustworthy customers through a combination of advanced device identification, shared device reputation, device-based authentication, and real-time risk evaluation.

KYB Integration

Customer Record KYB Integration

Required Data

  • Requiredsome text
    • Business Namesome text
      • The legal name of the Business you are verifying. This should be the name the Business has registered with the U.S. IRS or the Secretary of State in their state of incorporation.
    • Business Addressessome text
      • A list including the physical addresses of a business. For larger companies, this commonly includes the address of their headquarters (HQ) location.
  • Taxpayer Identification Numbersome text
    • A unique 9-digit number that is used by the IRS to identify a business entity
    • Must be passed to conduct TIN verification
  • Optionalsome text
    • Peoplesome text
      • A list of people associated with the business
    • Business Structuresome text
      • If you want to check against a Sole Proprietorship or LLC

*The more data provided the higher the accuracy

Results of a Business Verification

  • Name / TIN Verificationsome text
    • Verifies that the submitted Business name and Tax ID combination match.
  • Secretary of State Filing Retrievalsome text
    • Searches all 50 Secretary of States and D.C. to uncover state registrations and the "footprint" of a Business. Based on state availability, each record may provide a rich dataset including entity name, registration date, entity type, registered addresses, and corporate officers.
  • Detailed Address Analysissome text
    • Aggregates all known addresses retrieved from both state filings and web presence, displaying them with both street and satellite images. Assesses deliverability and type (eg, P.O. Box, commercial, residential) of each address.
  • Business Namessome text
    • Collection of all developed business names linked to a business with a matching of the submitted name
  • Officerssome text
    • All listed officers found in the business Secretary of State Filings with an associated role
  • Web Presence / Validationsome text
    • Searches for Business across popular search engines to display the most relevant results and all social profiles. Validates submitted web addresses to extract relevant business details.
  • Consolidated OFAC Screeningsome text
    • Searches government watchlists to determine Business sanctions status, applying advanced matching logic to reduce false positives.
  • Profilessome text
    • Searches for the business on various websites to find the company's online presence. Currently, only Facebook and Google Places are supported.
  • Taskssome text
    • A detailed summary of all searches, flagging risk factors based on results across screenings and developed entity information.

Taxpayer Identification Number (TIN)

All valid business entities will have an EIN issued by the IRS. The Federal government requires a legal entity to have an EIN to pay employees and to file business tax returns. To be considered a Partnership, LLC, Corporation, S Corporation, Non-profit, etc., a business must obtain an EIN when incorporating. EINs do not expire. Once an EIN has been issued to an entity, it will not be reissued. Each EIN is unique to a business and persists over time.

List of TIN Types

  • Social Security Number (SSN)
  • Employer Identification Number (EIN)
  • Individual Taxpayer Identification Number (ITIN)
  • Taxpayer Identification Number for Pending U.S. Adoptions (ATIN)
  • Preparer Taxpayer Identification Number (PTIN)


  • Sole Proprietorship
  • Partnership
  • Limited Liability Company (LLC)
  • Corporation
  • Non-profit

Verifying EINs against submitted people for SoleProp & Small LLC

Based on IRS documents, some small businesses like single-member LLCs have EINs that match against an officer's name instead of the registered business name. Middesk has an optional feature to verify if the submitted EIN matches the person's name in the case that it failed to match with the business name. Contact your account manager or if you would like to opt-in, and see our reference for additional information.

TIN Verification Responses

  • Success: Foundsome text
    • The IRS has a record of the submitted TIN and Business Name combination
  • Failure: Mismatchsome text
    • We believe the submitted TIN is associated with a different Business Name
  • Failure: Not Foundsome text
    • The IRS does not have a record for the submitted TIN and Business Name combination
  • Failure: Duplicatesome text
    • TIN/name failure - Duplicate request
  • Failure: Unavailablesome text
    • TIN/name failure - IRS is unavailable
  • Failure: Not Issuedsome text
    • TIN has not been issued by the IRS. There is often a delay after formation for the IRS database to process TINs for new businesses.

Secretary of State Filing Responses

  • Success: Activesome text
    • X of Y filings found are Active
  • Warning: Partially Unknownsome text
    • X of Y filings have no status provided
  • Warning: Partially Inactivesome text
    • X of Y filings found are inactive
  • Failure: Inactivesome text
    • The business has no Active Secretary of State filings
  • Failure: Not Registeredsome text
    • The business has no Secretary of State filings

  • Success: Submitted Activesome text
    • The business is Active in the state of the submitted Office Address
  • Warning: Submitted Unknownsome text
    • The submitted state does not make filing status available
  • Failure: Submitted Inactivesome text
    • The business is Inactive in the state of the submitted Office Address
  • Failure: Submitted Not Registeredsome text
    • The business is not registered in the state of the submitted Office Address

Secretary of State Documents

  • Uploaded into the Customer Record of the state provides these documents

Business Name

Legal Name

An entity's legal name is meant to uniquely identify the business in a given state. Each state may have requirements around valid entity names (e.g., requires the use of alphabetical characters) or the use of suffixes (e.g., LLC, Inc.). Most states do not allow an entity to register with a name already in use, and some states require an entity name to reflect the operations of the business.

While states guard against duplicative names, each state acts independently when forming entities. Therefore, many business entities have the same name as a separate business in another state. In this case, it is critical to understand the domestic and foreign jurisdictions of each state, and how and when each filing was made.

Doing Business As (DBAs)

A company is said to be "doing business as" a name when the business operates under a name different than its legal, registered name. These names are also referred to as "assumed", "fictitious", or "trade" names.

State and local governments usually require companies to register these alternate names through a DBA filing, allowing the company to legally operate under a separate trade name.

Business Name Responses

  • Success: Verifiedsome text
    • Match identified to the submitted Business Name
  • Warning: Similar Matchsome text
    • Similar match identified to the submitted Business Name
  • Failure: Unverified some text
    • Unable to identify a match to the submitted Business Name
  • Failure: Alternate Namesome text
    • We believe the submitted TIN is associated with “name”

Office Address Responses

  • Success: Verifiedsome text
    • Match identified to the submitted Office Address
  • Warning: Approximate Matchsome text
    • Identified an address within 0.2 miles of the submitted Office Address
  • Failure: Unverifiedsome text
    • Unable to identify a match to the submitted Office Address
  • Success: Commercialsome text
    • Submitted Office Address is a Commercial property
  • Warning: Residentialsome text
    • Submitted Office Address is a Residential property
  • Success: Deliverablesome text
    • The USPS is able to deliver mail to the submitted Office Address
  • Success: Undeliverablesome text
    • The USPS is unable to deliver mail to the submitted Office Address

People Responses

  • Presidentsome text
    • Usually the legally recognized highest rank of corporate officer
  • Treasurersome text
    • Responsible for accounting and handling corporate funds
  • Secretarysome text
    • Handles corporate records and may also handle corporate stock and the stock transfer book
  • Membersome text
    • The formal name for an LLC owner
  • Ownersome text
    • The only one (or one in a few) managing business operations
  • Registered Agent some text
    • An individual or corporation, who may or may not be part of the business entity, who is designated to receive correspondence from the Secretary of State


Websites are rich sources of information about corporate entities and help verify the legitimacy of a business. Thanks to common web design practices, there are very frequently a minimum set of pages on a company's corporate website, each of which may contain a wealth of data:

  • Home: Provides information like business overview, services provided, product features, nature of business, and client lists.
  • Contact: Provide information like phone numbers, addresses, office locations, and hours of operation.
  • Products or Services: Provide specifics on goods or services offered.
  • Privacy Policy: Provide data such as addresses, entity names, and critical legal considerations. These are critical to assess when a business is collecting sensitive user data.
  • Terms of Service: Provide details such as entity names, addresses, and critical legal considerations. These are critical to consider when a business is entering into agreements with its customers and partners at scale.

In sum, reviewing this minimum set of pages can help build a deeper picture of the business entity and help establish the credibility of associated businesses.

Website Responses

  • Success: Onlinesome text
    • Website was Online when the business record was ordered
  • Failure: Offlinesome text
    • Website was Offline when the business record was ordered
  • Success: Verifiedsome text
    • Successfully found entity details on the submitted Website
  • Warning: Unverifiedsome text
    • Unable to find entity details on the submitted Website
  • Failure: Parking pagesome text
    • The website has been purchased but has no content

Watchlist Responses

  • Success: No Hitssome text
    • No Watchlist hits were identified
  • Failure: Hitssome text
    • X Watchlists hit(s) have been identified

List of Watchlists

Entity List (EL)

Bureau of Industry and Security

Denied Persons List (DPL)

Bureau of Industry and Security

Military End User (MEU)

Bureau of Industry and Security

Unverified List (UVL)

Bureau of Industry and Security

ITAR Debarred (DTC)

State Department

Nonproliferation Sanctions (ISN)

State Department

Capta List (CAP)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Foreign Sanctions Evaders (FSE)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Non-SDN Menu-Based Sanctions (NS-MBS)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Non-SDN Iranian Sanctions (NS-ISA)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Non-SDN Chinese Military-Industrial Complex Companies List (NS-CMIC)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Non-SDN Palestinian Legislative Council List (PLC)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Specially Designated Nationals (SDN)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Sectoral Sanctions Identifications List (SSI)

Department of the Treasury Office of Foreign Assets Control (OFAC)

Watchlist Configuration Options

Middesk also offers several configuration options to reduce false positives, including:

  • Date of Birth Filter for Submitted People
  • Entity and Individual Name Fuzzy Match Tolerance
  • Selecting specific federal agencies and watchlist lists to run business names and individuals against each business

Watchlist Parameter Tolerance

The parameters of the Watchlist tolerance or matching threshold can be adjusted to either Low, Medium, or High for entity and individual names in the dashboard settings:

  • Low: This parameter allows for an edit distance of zero, which will be a strict match to the exact name of a given entity/individual in the watchlist to produce a hit.  An exact match is defined as when any of those business and/or people names (or an alias of each name) contain words that are present in any of the names of an entity found in any of the watchlists.
  • Medium: This parameter allows for an edit distance of one, which means a watchlist hit will be surfaced if the search term differs from a name of a given entity in the watchlist by one character/letter.
  • High: This parameter will be the most risk-averse option, however, this setting will likely result in more false positives by relaxing the fuzzy matching parameters.

Adverse Media

Adverse Media provides a complete search on the business and people names within seconds, complete with insights to help you assess the level of risk and remove subjectivity from the process. These insights include:

  • Risk Levelsome text
    • Indicates the low, moderate, or high level of risk associated with the overall business
  • Risk Categorysome text
    • Identifies risk categories (e.g., Narcotics, Organized Crime, Terrorism, etc.) for searched business or person names, assigning a risk score to each category
  • Media Sourcessome text
    • Direct links to news and media sources where the searched name was found, including the source name, title of article, and URL
  • Sentimentsome text
    • Determines whether the source is positive, neutral, or negative in sentiment
  • Name Match Scoresome text
    • Indicates how likely the identified adverse media belongs to the business or person in question

Middesk Scores Threshold

Middesk’s unique Adverse Media insight surfaces a business's overall risk by aggregating the risk level and category of each name searched. The risk level is determined by the highest-risk media source found, so a business with one or more high-risk sources will receive an overall high-risk score.

The levels for risk thresholds are defined as:

  • Low Risk = <33%
  • Moderate Risk = 33 - 66%
  • High Risk = >66%



In the public court of law, bankruptcy filings are important references when taking on balance sheet risk. Each bankruptcy provides details about all aspects of the case proceedings; these details include:

  • Debtor: the individual or entity that owes money to another party.
  • Trustee: the individual responsible for the bankruptcy and all case proceedings
  • Court: the court in which the hearing takes place, including the office number, district, and case number.
  • Chapter: the chapter in the collection of types of court cases that Bankruptcy falls into
  • Updates: a sequence of events for the case; it includes a description of the update, a reference to the update, and the event date.


Middesk customers in the lending and financing spaces may perform due diligence on entities as part of their underwriting process. The Liens Search product covers UCC liens along with Federal and State Tax liens.

  • Debtor: the individual or entity that owes money to another party.
  • Secured Party: the entity to whom money is owed.
  • Filing Date: the date when the UCC1 was filed.
  • Lapse Date: the date when the UCC1 will lapse.
  • File Number: the file number of the UCC1 from which the data is sourced.
  • Status: whether or not the lien is active.

Raw Responses

Credit Check Integration

Customer Record Credit Check Integration

Partner - iSoftPull

Setting up an account

Soft Credit Pull

Hard Credit Pull

Intelligence Report

CRM Integration

Customer Record CRM Integration


Customer Record

Data Required

Data Pushed