Skip to main content
PATCH
/
v3
/
businesses
/
{vendor_data}
/
update-status
curl
curl -X PATCH 'https://verification.didit.me/v3/businesses/company-123/update-status/' \
  -H 'x-api-key: YOUR_API_KEY' \
  -H 'Content-Type: application/json' \
  -d '{"status": "BLOCKED"}'
{
  "didit_internal_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "vendor_data": "company-123",
  "status": "BLOCKED",
  "updated_at": "2026-03-15T10:30:00Z"
}

Documentation Index

Fetch the complete documentation index at: https://docs.didit.me/llms.txt

Use this file to discover all available pages before exploring further.

​
Overview

Moves a Business entity between ACTIVE, FLAGGED, and BLOCKED. See entity lifecycle for the full state machine.

​
When to use it

  • Block a sanctioned or confirmed-fraudulent business.
  • Flag a business pending manual review.
  • Unblock after remediation.
  • Propagate external signals from your own compliance systems.

​
Notes

  • Valid values: ACTIVE, FLAGGED, BLOCKED.
  • Passing a reason string is recommended — it is persisted and surfaced in the audit log and webhook payload.
  • BLOCKED businesses have all new Business Verification (KYB) sessions auto-declined and all new transactions auto-declined, including when they appear as counterparty.
  • Emits business.status.updated with previous_status, status, and reason.

​
Enforcement

StatusNew Business Verification (KYB) sessionsTransactions involving this business
ACTIVENormal flowNormal flow
FLAGGEDRouted to IN_REVIEWMay auto-escalate via rules
BLOCKEDAuto-declinedAuto-declined

​
Permissions

Role must grant update-status:businesses.

Authorizations

​
x-api-key
string
header
required

Path Parameters

​
vendor_data
string
required

Your unique identifier for the business (free-form string, NOT a UUID).

Body

application/json
​
status
enum<string>
required

New lifecycle status. BLOCKED also adds the vendor_data to the system blocklist.

Available options:
ACTIVE,
FLAGGED,
BLOCKED

Response

Business status updated. Full business record returned.

Full business detail. Extends BusinessListItem with metadata and comments.

​
didit_internal_id
string<uuid>

Didit's stable internal UUID for this business.

​
vendor_data
string | null

Your unique identifier for this business (passed when creating sessions). This can be null when no vendor identifier was supplied.

​
display_name
string | null

Custom display name set by you

​
legal_name
string | null

Official legal name from registry or manual entry

​
registration_number
string | null

Company registration or incorporation number

​
country_code
string | null

Country of incorporation (ISO 3166-1 alpha-2, e.g. GB, US).

​
region
string | null

ISO 3166-2 subdivision code (e.g. CA, NY for US states).

​
effective_name
string | null

Best available name: display_name if set, otherwise legal_name

​
status
enum<string>

Current status of this business

Available options:
Active,
Flagged,
Blocked
​
session_count
integer

Total number of verification sessions for this business

​
approved_count
integer

Number of approved sessions

​
declined_count
integer

Number of declined sessions

​
in_review_count
integer

Number of sessions in review

​
features
object

Map of feature name to latest status, e.g. {"KYB_REGISTRY": "Approved", "KYB_AML": "Approved"}

​
features_list
object[]

Same as features but as an array of {feature, status} objects

​
last_session_at
string<date-time> | null

Timestamp of the most recent session

​
first_session_at
string<date-time> | null

Timestamp of the first session

​
last_activity_at
string<date-time> | null

Timestamp of the most recent activity (status change, session update, etc.)

​
tags
object[]

Tags assigned to this business

​
created_at
string<date-time>
​
metadata
object

Custom metadata JSON you attached to this business

​
comments
object[]

Activity log and comments for this business

​
updated_at
string<date-time>