AU Entity Intelligence API Reference
Base URL: https://api.techcompass.com.au —
Status: Live, May 2026 —
See main reference for authentication details.
About this Dataset
The AU Entity Intelligence API combines two authoritative Australian government registers to deliver entity verification, company status checking, and KYC risk signals for any Australian business in a single API call.
Australian Business Register (ABR)
The ABR is maintained by the Australian Taxation Office (ATO) and is the single authoritative source for Australian Business Number (ABN) data. It covers every entity — companies, trusts, partnerships, sole traders, and government bodies — that holds an ABN.
Each ABN record includes: entity type, GST registration status, registered trading names, state/postcode, and ABN history. Tech Compass refreshes ABR data hourly via the ABR Web Services API under authorisation ABNL27735.
Licensing: Commercial redistribution permitted under Australian Government Linked Data licence.
ASIC Company Register
The Australian Securities and Investments Commission (ASIC) maintains the legal register of all companies incorporated under the Corporations Act 2001. It is the authoritative source for a company’s legal status, ACN, registered address, company type (Pty Ltd, Ltd, etc.), and deregistration or strike-off status.
Tech Compass ingests the full ASIC Company Register bulk dataset — over 4 million current and historical records — updated weekly every Tuesday. Licensed under CC BY 3.0 AU via data.gov.au.
Combined KYC Signals
Every ABN lookup returns a kyc block that cross-references ABR and ASIC records to produce a composite risk score. Signals flag: entities in external administration, companies with strike-off pending, ABN/ASIC status mismatches, and non-active entities with active ABNs. These signals reduce manual review time for KYC, AML, and supplier onboarding workflows.
Use Cases
- Automated supplier onboarding — verify ABN, GST status, and legal entity name before payment
- AML/CTF customer due diligence — confirm entity is a registered legal person
- Credit risk assessment — flag entities in administration or with strike-off pending
- Beneficial ownership research — retrieve ACN and cross-reference ASIC officer records
- Portfolio monitoring — detect status changes across a watchlist of entities
Authentication
All AU endpoints require an API key with the au_entity product scope:
Authorization: ApiKey tc_live_<your_key>
Obtain a key at signup. Keys without au_entity scope receive HTTP 403.
Response Structure
AU endpoints return the standard envelope with additional AU-specific data_lineage fields:
{
"data": { ... },
"kyc": {
"overall_risk": "LOW",
"is_active_legal_entity": true,
"in_external_administration": false,
"strike_off_pending": false,
"is_gst_registered": true,
"abn_asic_mismatch": false,
"flags": null
},
"meta": {
"request_id": "a1b2c3d4-...",
"timestamp": "2026-05-10T00:30:00Z"
},
"data_lineage": {
"source": "ABR Lookup Web Services",
"source_url": "https://abr.business.gov.au/json/AbnDetails.aspx",
"retrieved_at": "2026-05-10T00:30:00Z",
"request_id": "a1b2c3d4-...",
"license": "ABR Web Services Agreement — ref ABNL27735. Commercial redistribution permitted.",
"source_asic_snapshot_date": "2026-05-06"
}
}
Endpoints
GET /v1/au/abr/{abn}
Look up an Australian Business Number. Returns ABR entity data, KYC signals, and the paired ASIC company record if available.
| Parameter | Type | Description |
|---|---|---|
abn | path | 11-digit ABN. Spaces are stripped automatically. |
curl https://api.techcompass.com.au/v1/au/abr/31632578342 \
-H "Authorization: ApiKey YOUR_API_KEY"
{
"data": {
"abn": "31632578342",
"abn_status": "Active",
"abn_status_effective_from": "2019-03-28",
"registered_name": "TECH COMPASS PTY LTD",
"entity_type_code": "PRV",
"entity_type_description": "Australian Private Company",
"business_names": [
{ "name": "valkurai", "effective_from": "", "effective_to": "" }
],
"gst_registered": true,
"gst_effective_from": "2019-03-28",
"state": "VIC",
"postcode": "3032",
"acn": "632578342"
},
"kyc": {
"overall_risk": "LOW",
"is_active_legal_entity": true,
"in_external_administration": false,
"strike_off_pending": false,
"is_gst_registered": true,
"abn_asic_mismatch": false,
"flags": null
},
"meta": { "request_id": "...", "timestamp": "2026-05-10T00:30:00Z" },
"data_lineage": {
"source": "ABR Lookup Web Services",
"source_url": "https://abr.business.gov.au/json/AbnDetails.aspx",
"retrieved_at": "2026-05-10T00:30:00Z",
"request_id": "...",
"license": "ABR Web Services Agreement — ref ABNL27735."
}
}
Errors: 401, 404, 422, 429, 503
GET /v1/au/asic/{acn}
Look up a company by Australian Company Number (ACN). Returns ASIC register data and KYC signals.
| Parameter | Type | Description |
|---|---|---|
acn | path | 9-digit ACN. Zero-padded automatically. |
curl https://api.techcompass.com.au/v1/au/asic/632578342 \
-H "Authorization: ApiKey YOUR_API_KEY"
Errors: 401, 404, 422, 429
GET /v1/au/entity/search
Search by company name, ABN (11 digits), or ACN (9 digits). Returns up to 20 matching entities.
| Parameter | Required | Description |
|---|---|---|
q | Yes | Search term: company name, ABN, or ACN (min 2 chars) |
curl "https://api.techcompass.com.au/v1/au/entity/search?q=tech+compass" \
-H "Authorization: ApiKey YOUR_API_KEY"
Errors: 401, 422, 429, 503
KYC Signals
Every response includes a kyc block. Risk is determined by combining ABR entity status and ASIC company register data.
| Field | Type | Description |
|---|---|---|
overall_risk | string | LOW, MEDIUM, or HIGH |
is_active_legal_entity | boolean | ABN Active and ASIC status is REGD |
in_external_administration | boolean | ASIC status indicates EXAD (external administration) |
strike_off_pending | boolean | ASIC status indicates SOFF (strike-off pending) |
is_gst_registered | boolean | ABN has active GST registration |
abn_asic_mismatch | boolean | ABN and ACN records refer to different entities |
flags | list|null | Additional risk flags (reserved for future use) |
Risk Determination Rules
| Risk Level | Conditions |
|---|---|
| HIGH | ASIC status EXAD (external administration) |
| MEDIUM | ASIC status SOFF (strike-off pending), or ABN/ASIC mismatch |
| LOW | ABN Active, ASIC REGD, no mismatches |
Error Codes
| HTTP | Meaning |
|---|---|
| 401 | Invalid or missing API key |
| 403 | API key does not have au_entity product scope |
| 404 | ABN or ACN not found |
| 422 | ABN must be 11 digits / ACN must be 9 digits |
| 429 | Rate limit exceeded |
| 503 | ABR upstream unavailable — retry after 30s |
Data Freshness
ABR data is refreshed hourly via our pipeline. On-demand lookups fetch live data from ABR and cache it. The data_lineage.retrieved_at timestamp shows when the record was last fetched from ABR.
ASIC company register data is sourced from the ASIC snapshot pipeline. The data_lineage.source_asic_snapshot_date field shows the date of the ASIC snapshot used.
australia-southeast1 Cloud SQL instance. Data never transits through US infrastructure.
Data Sources
| Source | Licence | Refresh |
|---|---|---|
| ABR Lookup Web Services | ABR Web Services Agreement ref ABNL27735 | Live lookup + hourly pipeline |
| ASIC Company Register | CC BY 4.0 | Weekly pipeline (Monday 23:00 UTC) — ingests each new monthly ASIC snapshot automatically |
About this API
What this API does
The Tech Compass AU Entity Intelligence API provides programmatic access to the Australian Business Register (ABR) and ASIC Company Register for entity verification, cross-source KYC signal computation, and data lineage documentation. It covers ABN lookup, ACN lookup, entity name search, and a KYC risk ruleset that detects external administration, strike-off pending, ABN-ASIC mismatches, and deregistered-but-active entities — all served from Australian infrastructure with immutable audit logging.
Who uses this API
- Compliance officers at Australian financial institutions performing entity KYC
- AML/CTF reporting entities under AUSTRAC obligations
- Fintech and neobank engineers building automated onboarding flows
- Credit risk teams verifying counterparty registration status before lending
- Legal and compliance teams performing due diligence in M&A transactions
- RegTech platforms embedding Australian entity data into compliance products
Key use cases
- ABN verification at onboarding — verify an Australian business's ABN, GST registration status, and entity type before onboarding
- Cross-source KYC — detect mismatches between ABR and ASIC data (e.g. active ABN but deregistered company)
- External administration check — identify businesses in liquidation, receivership, or voluntary administration before extending credit
- Strike-off monitoring — detect entities pending ASIC deregistration
- Entity name search — search by business name to find the correct ABN/ACN before a lookup
- Suppressed and replaced ABN handling — correctly handle ABNs that have been suppressed or superseded by a replacement entity
Applicable compliance frameworks
- APRA CPS 234 — third-party information security risk
- AU Privacy Act 1988 — data handling obligations
- ASIC Regulatory Guide 265 (RG 265) — entity identification obligations
- AU AML/CTF Act 2006 — AUSTRAC customer identification requirements for reporting entities
- APRA Prudential Standard APS 220 — credit risk management
Data sources
- Australian Business Register (ABR) — abr.gov.au — ABR Web Services Agreement ref ABNL27735
- ASIC Company Register — data.gov.au/data/dataset/asic-companies — CC BY 4.0
Frequently asked questions
- How current is the ABR data?
- ABR data is fetched live from the ABR Lookup Web Services API and cached. The pipeline also runs hourly to refresh existing records. The
data_lineage.retrieved_atfield shows when the data was fetched from the ABR. - How current is the ASIC Company Register data?
- ASIC publishes the company register as a monthly snapshot to data.gov.au. The Tech Compass pipeline runs weekly (Monday 23:00 UTC) and picks up each new monthly release automatically. The
data_lineage.snapshot_datereflects the ASIC publication date of the ingested snapshot. - What does
kyc.overall_risk = HIGHmean? - A HIGH risk signal means the entity is in external administration (EXAD) or deregistered while appearing active in the ABR. It does not necessarily mean the entity is fraudulent — it means the compliance risk is elevated and requires manual review before proceeding.
- Is every API call audited?
- Yes. An immutable audit log entry is written to Australian infrastructure before every response is returned. The
meta.request_iduniquely identifies this record. - What SLA is available?
- Professional and Enterprise tier subscribers receive SLA documentation on request. Contact [email protected].
Related APIs
- AU Financial Advisers API — ASIC Financial Advisers Register (screens the individual adviser registered under an AFSL)
- OFAC Sanctions Screening API — screen against the US Treasury SDN list (complements AU KYC for entities with US nexus)
- US Enforcement & Disciplinary API — FINRA BrokerCheck and SEC enforcement actions
- US Compliance API — SEC EDGAR company facts and Federal Reserve FRED economic data