Security and compliance
Company data your audit trail can stand on
Topograph retrieves company data from the official register when you ask and attaches the register's own document, with its source and date. Your team can show where every fact came from, backed by an audited security programme.
- ISO 27001:2022
- SOC 2 Type 2
- GDPR
- Independent pentests
Authoritative data
Not just data, but the evidence behind it
Two modes through the same API. Prefill keeps onboarding fast. Verification goes back to the official register and returns the register's document alongside the data.
| PrefillFast | VerifyAuthoritative | |
|---|---|---|
| Source | Faster sources, aggregated ahead of time | The official register, queried when you ask |
| Speed | Instant | Live from the register |
| Output | Structured company data | Structured data, plus the register's document and the source of every field |
| Best for | Signup forms, search, pre-filling onboarding | Verification, review, audit files |
Coverage
What you retrieve with Topograph
The company itself, the people who run it and the people who own it, each with its source kept in the record.
Company details
Legal name, legal form, registration number, status, registered address, share capital and industry activity, mapped to international standards so records stay comparable across countries.
Directors and representatives
Everyone the register lists as authorised to act for the company: local title, translation and standard role. Auditors, supervisory-board members and registered agents, where published.
Shareholders
Direct holders and their stakes, as shown in the register or filings. For corporate holders, the ownership chain is traced across borders, with the source kept at each step.
Beneficial owners
Declared UBOs from the national register and ownership reconstructed from shareholdings, shown separately. Control outside ownership appears only where declared.
Declared vs. reconstructed ownershipProvenance
What an analyst sees
Every field shows its source and whether it came live from the register. If a register doesn't publish something, the record says so.
| Field | Value | Source |
|---|---|---|
| Legal form and status | SAS · Active | Infogreffe · 23 Sep 2026 |
| Legal representative | Président, appointed 14 Mar 2023 | Infogreffe · 23 Sep 2026 |
| Direct shareholder | Holding company 60%, two individuals 20% each | Filed shareholder list · 23 Sep 2026 |
| Capital | Not published by this register | Stated in the record, not left blank |
Illustrative record.
Declared at the register
Retrieved from the national beneficial ownership register and attached as the source document, with the date we pulled it.
- Individual A (born 1974, French)45%
- Individual B (born 1981, Belgian)25%
Source: Extrait RBE · 23 Sep 2026
Reconstructed from shareholdings
Calculated from the published shareholder chain, with each link traced back to its own register.
- Individual A, via holding45%
- Individual B, direct20%
- Individual C, via holding15%
Source: register record of each company in the chain
Where the declaration and the reconstruction differ, we show both side by side: a declared filing is not the same thing as an analysis of shareholdings.
By country
How it varies by register and country
Registers publish different things. Check a country before you write it into a procedure.
What comes back in France
- Directors and representativesYes
- ShareholdersVPartly
- Declared beneficial ownersYes
V comes back in Verify, not in Prefill.
Documents
- pdfExtrait RNE
- pdfK-Bis
- pdfStatuts
- pdfComptes sociaux
- pdfExtrait du registre des bénéficiaires effectifs
Documents
Documents, as the register issues them
Ordered from the issuing register at the moment you ask, certified where the register issues a certified version, delivered as PDF and dated. Not copies supplied by the company being checked.
| Document | What it evidences | Local names |
|---|---|---|
| Trade register extract | Existence, legal form, office, representatives | Extrait Kbis, Aktueller Abdruck, Uittreksel Handelsregister |
| UBO extract | Declared owners and the extent of each interest | Extrait RBE, Transparenzregister, CRBR extract |
| Articles of association | Governance, signing powers, share structure | Statuts, Satzung, Statuto |
| Annual accounts | Financial position as filed | Jahresabschluss, Comptes annuels, Bilancio |
| Register history | Appointments, transfers, capital changes | BODACC, Chronologischer Abdruck, Moniteur belge |
| Good standing | Filing obligations kept up to date | Confirmation statement, Certificat constatator |
Monitoring
Monitoring company changes
Daily
We check the register for changes to the companies you monitor, daily in most countries. Differences that only come from formatting are not reported.
What triggers a notice
A change to the company's status, ownership, directors, address, capital, name or activity, or its removal from the register.
What happens next
You get a webhook naming what changed. From there, you can order the updated data and the register's document on demand.
Security
Security and data protection
Every report, policy and the subprocessor list is available in the Trust Center, without a call.
ISO 27001:2022
Information security management audited annually by an accredited body.
SOC 2 Type 2
Controls tested over time by an independent auditor, not at a single date.
GDPR
Data hosted in the EU, with the subprocessor list published in the Trust Center.
Penetration testing
Independent testers probe the API and app, with the attestation in the Trust Center.
Encryption
Encrypted in transit and at rest, including every stored document.
Continuous control monitoring
Controls monitored continuously across cloud, data, people and operations.
Availability. Our status page shows both our availability and the registers' availability, so you can see where an incident occurred.
FAQ
Test it against a file you have already built
Send us ten companies from a recent review. We will return what the registers hold for each one, with the documents and the gaps, so you can compare it with the work your team did by hand.