Somewhere in a server rack, a JSON response is deciding whether a brand-new LLC gets a bank account before lunch. That response usually comes from Middesk.
It is a Tuesday. A founder, three weeks into incorporation, hits "Open Account" at a neobank. She watches a spinner. Twelve seconds later: approved. Wired in. Card on the way. She thinks the bank did that. The bank did not. The bank made an API call to Middesk, asked the equivalent of "is this real?", and accepted the answer.
For most of modern commerce, that twelve-second interval was twelve days. Or twelve weeks. Lawyers, faxes, notarised PDFs, a man in a windowless office in Delaware. Middesk's bet, in 2018, was that a vast amount of that drudgery was actually a data problem in a trench coat.
The United States has roughly thirty million registered businesses. They live, technically, inside fifty different Secretary of State databases - some of which still charge for paper printouts. There is no national company registry, no equivalent of a Social Security Number for a business that everyone trusts. There is an EIN, which the IRS treats like a state secret. There is the Corporate Transparency Act, which complicates more than it clarifies.
If you are a bank, a payroll company, or a marketplace, you are legally required to know who you are doing business with. Until recently, this meant a compliance analyst, a stack of PDFs, and a quiet sense of dread. Fraudsters knew the seams. So did regulators. Everyone knew. Nobody had bothered to fix it, partly because the fix was unglamorous and partly because the data was scattered across the public sector like a yard sale.
Kyle Mack and Kurt Ruppel met at Checkr, the consumer background check company. Mack ran go-to-market as the team grew from five to three hundred. Ruppel ran engineering. They saw, from opposite ends of the org chart, the same recurring conversation: a customer would ask whether Checkr could verify the company, not just the person. The honest answer was no. The polite answer involved spreadsheets.
In late 2018 they left to build the polite answer's replacement. Y Combinator took them in the W19 batch. Sequoia, never accused of mistaking themselves for sentimentalists, wrote a seed check on the thesis that business identity was a category, not a feature. The bet was that the next decade of fintech would be choked at its onboarding layer, and somebody should be the plumbing.
What Middesk actually sells is a set of endpoints. The flagship is Verify: pass in a business name and an address, get back a structured record - legal entity status, officers, registration history, watchlist hits, web presence, the kind of evidence a compliance team would otherwise hand-assemble. Signal layers on real-time risk scoring for shell companies, synthetic identities, and the regulatory gray. TIN Match handles the IRS quietly. Tax Registration automates the otherwise-Kafkaesque process of registering for payroll tax in all fifty states. Assess turns the same dataset into a credit signal. In 2025, the company added Agent, an AI layer that runs the whole compliance workflow on top of Middesk's data.
The unfair advantage is not the API design, which is admittedly tidy. It is the data work underneath: Middesk's team has spent six years systematically wrangling Secretary of State filings into a single, queryable shape. The kind of work nobody writes a Medium post about. Exactly the kind of work that, once done, is very hard to redo.
You don't need to take Middesk's word for it. The clearest argument is the logo wall: Brex, Plaid, Mercury, Gusto, Affirm, Shopify, Rippling, Divvy, BlueVine, Dwolla. These are companies that, between them, define what a "modern" fintech experience feels like. Underneath the smooth product flow, a Middesk call is humming.
Source: TechCrunch, Crunchbase, Middesk blog. Bars scaled to round size, not valuation.
Mack and Ruppel describe the company's purpose in the plainest possible terms: make it easier for businesses to do business with each other. The phrase, drained of poetry, hides a sharper claim - that the friction between companies is a tax on the whole economy, and somebody should refund it. Middesk's product strategy bends toward that idea relentlessly. Every new endpoint is, in effect, another minute returned to a compliance analyst, or another fraud caught before the wire leaves.
That is also why Middesk's blog reads more like a textbook than a marketing channel. The KYB primer they publish is, plausibly, the most-bookmarked compliance explainer on the open web. It is also a useful Trojan horse: teach the market, become the market's vocabulary, then sell into the market.
The interesting question is not what KYB looks like in 2026. It is what it looks like in 2030, when an AI agent acting on behalf of a small business needs to open a vendor account at a marketplace owned by another AI agent. Identity, in that world, is the only thing standing between commerce and chaos. Middesk's 2025 Agent product is an early bet that the next decade of compliance is not a human reading a PDF, but a system reasoning over a verified business record - and that the record had better be ground-truth.
The bet is also defensive. Anyone who has tried to scrape fifty Secretaries of State will tell you - usually with feeling - that it is unhappy work. Middesk's lead is not algorithmic. It is custodial. They have been doing the unhappy work, on schedule, since 2018.
Return to the founder at her kitchen table. The spinner stops. The account opens. She has no idea that, behind her browser, a query has just touched a Secretary of State filing in Wyoming, an IRS record in Maryland, a watchlist out of Treasury, and a graph of incorporators going back to a Delaware C-corp she registered in 2022. She has no idea, because she shouldn't have to. That is the entire point.
The job is not done. There are still banks where opening a business account requires a notary and a prayer. There are still marketplaces shipping money to LLCs that are six weeks old and registered to a UPS Store. But the curve has bent. Middesk bent it. And the next time a stranger's company shows up on your platform asking to transact, the question - is this real? - increasingly has a real, machine-readable answer.