Legal Identity and Existence for VMC and CMC Certificates

This is a shared requirement between EV TLS certificates and VMC/CMC, so the requirements are governed by the EV Guidelines.

 

Validating the legal identity and existence of the applicant organization is a critical step in issuing Verified Mark Certificates (VMCs) and Common Mark Certificates (CMCs).

This ensures that only legitimate, verifiable entities can display their logos in email clients under the BIMI standard.

This article outlines the validation process for different types of organizations and the sources used to confirm their legal status.

 

Legal Identity Validation by Entity Type

The validation process varies depending on the type of organization applying for the certificate. 

Private Organizations

• Legal Existence: Must be incorporated and in good standing with the relevant government agency. 
• Legal Name: Must match the name in the certificate request.
• Registration Number: Must be obtained from the official registry.
• Registered Agent: Identity and address must be verified.

Government Entities

• Legal Existence: Must be recognized as a government body in its jurisdiction.
• Entity Name: Must match the certificate request.
• Founding Documentation: May include legislative acts or government records.

Business Entities (e.g., Sole Proprietors)

• Legal Existence: Must be registered with a government agency.
• Principal Individual: Identity must be verified, often through face-to-face (F2F) validation.

Non-Commercial Entities (e.g., International Organizations)

• Legal Existence: Must be recognized by international law or a signatory government.
• Verification Sources: May include founding charters or confirmation from a member state.

 

Verification Sources

Validation Specialists use the following trusted sources to confirm legal identity:

• Qualified Government Information Source (QGIS): Official government databases.
• Qualified Independent Information Source (QIIS): Reputable third-party business directories.
• Qualified Tax Information Source (QTIS): Government tax records.
• Verified Professional Letter (VPL): A letter from a licensed attorney or accountant confirming the entity’s details.

 

Face-to-Face (F2F) Verification

The Identity of the signer must be confirmed through a secure F2F process:

• Validation will send a link for a Video ID verification
• Video ID uses AI and liveness checks to validate the individual and the government-issued photo ID.
• Reviewed by a Validation Specialist for final approval.*

*The Validation Team may request an in-person Zoom call if the automated Video ID session is inconclusive.

 

Assumed Name (DBA) Validation

If the organization operates under a “Doing Business As” (DBA) name:

• The assumed name must be verified through a government source or a Verified Professional Letter.
• The DBA must be valid and registered in the jurisdiction of the applicant.

 

Physical Address Verification

The applicant’s physical address must be:

• A real business location (not a P.O. box or mail drop).
• Verified using a QGIS, QIIS, QTIS, or a Verified Professional Letter.
• Located in the country of incorporation or validated separately if outside.