Verifying Business Identity
My webapp keeps information regarding certain businesses when they use it (Under their full consent off course). One problem i have is that I have no clue how to validate whether the business using the app is the business they claim to be.
How do other startups who use similar data verify a business' identity?
-
if your webapp is just storing their information, why do you need to validate who they are? This is quite tricky to implement if you think about it. Using a real simple example: You sign up for a newsletter on a website using a fake email address. Apart from sending you a confirmation link, how does the website know that that's the "real" email address you use? – Ray 12 years ago
2 Answers
If you want to validate the business for some reason then I would suggest you at a minimum send a confirmation email to a business email address they provide. In other words not gmail.com or aol.com but a real business domain like ibm.com.
Now at a minimum you have a reasonable assurance that the person works for or is associated with the business that owns the domain.
Next if that domain has a website, does the website have a SSL certificate and if so what kind. If it is not one of the cheap certs (like GoDaddy), then the signing authority will have done the work to insure the validity of the business.
If on the other hand you have a client that doesn't have a domain name for their email and does not have a SSL cert, then you are undoubtedly dealing with a small company. In such a case perhaps you could ask them to send you ten cents via PayPal as a way to verify the identity of the sender. Not perfect but perhaps better than nothing.
I think this is a fruitless endeavour. It is very easy to hire people to pose as working for a company and then attempting to demo your product. I just don't see how you can be 100% sure, unless you've met them in their office.
