Companies House identity verification, inside the AML check you were doing anyway
FigsFlow is Companies House identity verification software for ACSP-registered practices. It reads every director and PSC from the register, shows who is unverified and when each one is due, and verifies them to the Companies House standard β in the same capture that satisfies your own customer due diligence. One check, two regimes, two separate statuses.
The twelve-month transition that opened on 18 November 2025 closes this autumn. Due dates are individual, not a single deadline.
281 reviews from
G2 reviews
Google reviews
Verified reviews
Watch one director get verified once, and counted twice
Ninety seconds: open a client company, pull its officers and PSCs from the register, see who is unverified, run one capture, and watch two statuses update β the Companies House one and the due-diligence one β without doing the check twice.
Nobody decided to leave them unverified.
Four sources each looked fine on their own.
The client list holds companies, not the people behind them. The register is right, and answers one company at a time. Some directors verified themselves through GOV.UK One Login and never mentioned it. Some assume you have already done it, because you do everything else. Every one of those answers was reasonable, and together they leave you unable to name a single person who is due this month.
"Nobody could tell me who was still unverified."
Where it sits
Two regimes, one capture, two statuses
Verification is not a separate errand. It is one capture inside the check you were already running, and it updates two statuses that stay separate afterwards.
- Read officers and PSCs
- See who is unverified
- Capture once
- Two statuses update
- Personal code recorded
- Filed
One track. It forks once, and the two ends never rejoin
Companies House identity verification and money-laundering customer due diligence are different regimes. Verification is fixed and the same for everyone; due diligence is risk-based and varies by client. They are never the same status. But they can share the same five minutes of work β and a standard KYC check does not by itself satisfy the Companies House standard, so the capture has to be built to meet it.
Verification is one read of the client record three other modules are already keeping.
Onboarding suiteVerification due
-
Director Β· Company 1Overdue
-
PSC Β· Company 211 days
-
Director Β· Company 334 days
-
PSC Β· Company 458 days
-
Director Β· Company 596 days
The unverified list
Who needs verifying, and when is each one due?
Every director and PSC across the whole client book, each with their own date. Directors key off the confirmation-statement date. PSCs who are not directors key off a fourteen-day window in their birth month. PSCs who are also directors key off the confirmation statement. One list, sorted by what is closest.
Not a single deadline. gov.uk is explicit that existing directors and PSCs verify by their individual due dates within the transition.
Illustrative · one row per person per due date, across the whole client book
Eleven-character code · recorded once
Two evidence trails · never merged into one green tick
The differentiator
Verify once. Use twice.
The capture that satisfies Companies House is the same capture that evidences the identity limb of your customer due diligence. Run it once. Two statuses update, two evidence trails fill, and nobody photographs the same passport twice in a fortnight.
The two statuses stay visibly distinct on the record. That matters at a supervision visit: the regimes are different, they are evidenced differently, and a page that collapsed them into one tick would be telling you something that is not true.
Worth saying plainly. A standard KYC check does not by itself satisfy the Companies House standard. The capture must meet that standard to count for both.
Where the people come from
Officers, PSCs and company details — read from the register itself
Not from a form somebody filled in. Search once, accept the match, and the people arrive on the record with their roles — which is what makes a verification population possible without opening four hundred records by hand. When the register changes, the record knows.
Illustrative · the company and its people are fictional
Straight answer
And who actually files it?
One eleven-character personal code, issued to the person, covering every role they hold in every company. Record it once — including a code obtained elsewhere, through GOV.UK One Login or another provider. It is sensitive personal data, and it is stored and handled as such.
What is live as at a date, and what is not available, is stated on the panel rather than implied. Nothing on this page describes a filing capability in the present tense until the submission mechanism is confirmed.
Seen enough? Bring your client list and we will show you your own due dates.
Book a demoA separate verification tool, or the same five minutes
Verification software that lives outside your client records makes you find the client twice, capture the identity twice and file the evidence in two places. The regimes are genuinely different. The work does not have to be.
A standalone verification tool
- 01Look the company up again
- 02Re-enter the people
- 03Capture the identity
- 04Download the evidence
- 05Save it somewhere your AML file can reach
Verification on the client record
- 01The people are already there, from the register
- 02One capture
Two statuses, kept distinct. One evidence trail, filed against the client you already hold.
Who uses it
What this looks like at your size
Pick the shape of your practice.
Thirty companies, maybe fifty people behind them, and no realistic way to hold fifty due dates in your head. The tracker is the whole product at your size.
What you’ll see0:00 / 1:48
- 0:00Thirty companies. Fifty people behind them
- 0:30The register already knows every one of their roles
- 1:02Four people are due inside the next six weeksNobody had to open thirty records
- 1:26You capture once, and the due date clears itself
Preview clock — no video source set
You are almost certainly already AML-supervised, so ACSP registration is a form rather than a project — and verification becomes billable work you can quote for.
What you’ll see0:00 / 2:04
- 0:00You are already AML-supervised. That is the hard part
- 0:34ACSP registration is a form, not a qualification
- 1:04The agent number goes on once and the flow unlocksVerification becomes billable work
- 1:36One capture clears the due date and the CDD identity limb
Preview clock — no video source set
Six hundred people across four hundred companies, each with an individual due date. This is the size at which a spreadsheet stops being a reasonable answer.
What you’ll see0:00 / 2:18
- 0:00Four hundred companies. Six hundred people behind them
- 0:38Building the list by hand means opening four hundred records
- 1:12The tracker sorts the whole book by whichever date is closestThree overdue, eleven inside a month
- 1:48You work the top of the list instead of the whole book
Preview clock — no video source set
Who may conduct a verification, who may file it, and whether the evidence survives a Companies House audit of your ACSP records.
What you’ll see0:00 / 2:30
- 0:00Several offices, one ACSP registration
- 0:42Who may conduct a verification, and who may not
- 1:20Every capture carries who did it, when, and on what evidenceDocumented, not remembered
- 2:02The record a Companies House audit of your ACSP file would ask for
Preview clock — no video source set
ACSP status · your stack
You need to be an ACSP — and you probably already qualify
Conducting verification for clients requires registration as an authorised corporate service provider, which requires anti-money-laundering supervision. Every FigsFlow customer is already AML-supervised, so this is a registration rather than a qualification. Record the firm’s agent number once and the flow unlocks.
gov.uk: ACSPs are entities undertaking AML-supervised activity — company formation agents, solicitors, accountants, chartered secretaries — and their checks must meet the same level of assurance as those who verify directly with Companies House.
- Microsoft 365
- Outlook
- SharePoint
- Companies House
- Irish CRO
What this does not do yet
Proof
Built inside a working UK practice
Built where the confirmation-statement dates are real and the due dates are somebody’s actual problem.
A quote from an ACSP-registered practice and one verifiable number are reserved here and will be published only with written agreement. Named practice references and review-platform ratings are not shown on this page yet.
What a verification costs, and what you can charge
Per-check cost, and whether it draws on the same credit pool as AML checks β to confirm before publishing. Inform Direct publishes Β£4 + VAT per biometric identity check and Β£5 + VAT including address verification; those are the numbers a buyer is comparing against.
Related modules
Where this connects
Verification is a read of four other things. These are them; the rest of the platform sits around them on the same shared record.
AML and client due diligence
The other regime, on the same client record.
See the AML moduleRisk assessment and scoring
What the ownership picture governs, once the people are known.
See the risk moduleOnboarding suite
Where a new client’s first verification happens.
See the onboarding moduleAudit trail and evidence
Where the ACSP evidence is kept, dated and attributed.
See the audit trail moduleResources
See it in practice
Case studies, short films and writing on identity verification as part of the check you were already running.
The four hundred records nobody opened
How one practice built its verification population without touching the client list by hand.
Read the case studyRegistering as an ACSP in an afternoon
What an already AML-supervised firm actually had to do, and what it did not.
Read the case studyCharging for verification
What changed when identity verification became quoted work rather than absorbed work.
Read the case studyQuestions
What practices ask before they switch
Bring your client list. We will show you your own due dates
No scripted demo and no invented companies. Bring the real list and we will read the register against it and show you which directors and PSCs are unverified and which dates are closest.
Running the due diligence alongside it?
