A licensed CPA confirms your investors are accredited. We add identity, sanctions, and entity checks in the same flow, and write the verified result straight into your CRM. Your brand on it, not ours.
Verification and a signed CRM webhook are live today. The full developer REST API and native per-CRM connectors are in early access — we're onboarding a small group of sponsors now.
Accreditation is a paperwork chase. Tax returns, net-worth letters, redactions — collected by email and tracked in a spreadsheet.
Your bank and fund admin want more. Identity and sanctions screening on every investor — usually a second vendor, a second flow.
Entities need their own check. LLCs, trusts, and SPVs require business verification and beneficial-owner review — a third system.
Then someone re-keys it by hand. When it's finally done, "verified" gets typed into your CRM manually, one investor at a time.
A licensed CPA's letter — defensible reasonable-steps evidence under Rule 506(c), not a self-cert checkbox.
Government-ID scan plus a liveness selfie, in about a minute — no separate onboarding app.
OFAC and global watchlists, with optional ongoing monitoring — a match flags for CPA review, never an auto-decline.
For entity investors: official registry confirmation plus beneficial-owner identification.
Your logo, your domain, your fund name on the flow and the emails. Investors see you, not us.
When an investor clears, their record is stamped Accredited / KYC / AML / KYB — verified, automatically. No re-keying.
Drop your branded verification link into your investor flow, or start verifications programmatically from your own system.
Accreditation plus whichever checks you turn on — identity, AML, and KYB for entities — in a single branded experience.
A licensed CPA signs off, and the verified status flows back into that investor's record automatically. You watch it on your dashboard.
Rule 506(c) requires you to take reasonable steps to verify each investor is accredited. A licensed CPA's signed letter is exactly the third-party, professional evidence the SEC's safe harbor contemplates — a self-certification checkbox is not. Every letter is reviewed and signed by a licensed CPA, and every certificate is independently verifiable.
CPA-signed accreditation with identity, sanctions, and entity checks, on a co-branded link with a live dashboard. You can run investors through it today.
A signed verification.completed event pushed to your endpoint the moment the CPA signs — wire it to Zapier, your CRM, or your own system. Turn it on in your dashboard. See the docs →
A developer REST API to create and query verifications programmatically, plus native per-CRM connectors, are in early access. We're onboarding a small group of design-partner sponsors who want to shape which we build first.
When an investor you cover clears, we POST a signed verification.completed event to your HTTPS endpoint — so your CRM or portal updates the moment the CPA signs, with no polling. Turn it on in your sponsor dashboard: paste an endpoint URL, copy the signing secret, and send yourself a test event.
{
"id": "evt_ANV-4K2P-9QX7-M3TD.completed",
"event": "verification.completed",
"version": "2026-08-18",
"livemode": true,
"created": "2026-08-17T15:04:22.000Z",
"data": {
"certificate_id": "ANV-4K2P-9QX7-M3TD",
"status": "verified",
"investor": {
"name": "Jordan A. Rivera",
"email": "jordan@example.com",
"city": "Austin",
"state": "Texas",
"type": "individual"
},
"basis": "Net Worth",
"verification_date": "2026-08-17",
"expiration_date": "2026-11-15",
"checks": {
"identity_verified": true,
"sanctions_screened": true,
"business_verified": false
},
"deal": "Cedar Point Multifamily Fund II",
"sponsor_slug": "cedarpoint",
"certificate_url": "https://accreditednow.org/verify-certificate?id=ANV-4K2P-9QX7-M3TD"
}
}The payload is certificate-level and privacy-safe — it never contains the investor's documents, financials, or resume token. Events for a given case are sent only to the sponsor that owns it.
X-AccreditedNow-Event — the event type, e.g. verification.completed.X-AccreditedNow-Delivery — a stable idempotency key, unique per certificate + event. Dedupe on this; the same event may arrive more than once.X-AccreditedNow-Signature — t=<unix-seconds>,v1=<hex-hmac>.Compute an HMAC-SHA256 over `${t}.${rawBody}` using your signing secret, and compare it to v1 with a constant-time check. Verify against the raw request body, before JSON parsing, and reject a timestamp older than five minutes.
const crypto = require('crypto');
function verify(rawBody, header, secret) {
const p = Object.fromEntries(header.split(',').map(kv => kv.split('=')));
const fresh = Math.abs(Date.now() / 1000 - Number(p.t)) < 300;
const expected = crypto.createHmac('sha256', secret)
.update(p.t + '.' + rawBody).digest('hex');
const a = Buffer.from(expected), b = Buffer.from(p.v1 || '');
return fresh && a.length === b.length && crypto.timingSafeEqual(a, b);
}2xx within a few seconds. A non-2xx or a timeout triggers a bounded retry (short backoff); persistent failure is surfaced in your dashboard.X-AccreditedNow-Delivery id — dedupe on it so a retry never double-writes.livemode is false for dashboard test events and true for real verifications.Design-partner sponsors get priority onboarding, a direct say in the first CRM integrations we build, and founder-level pricing locked in. If you're raising under 506(c) and tired of stitching this together yourself, tell us a little and we'll set up a short call.
Prefer email? Reach us at info@accreditednow.org.
Related pages
Developer & API documentation · Embed verification in your platform