Establishing secure connection…Loading editor…Preparing document…

Business Identification and Risk Assessment Form

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS IDENTIFICATION AND RISK ASSESSMENT FORM

RECITALS

WHEREAS, Client Name: is engaging Service Provider Name: to provide services described herein; and

WHEREAS, the parties require an identification profile and a formal risk assessment to determine compliance, monitoring, and mitigation measures prior to commencement of services; and

WHEREAS, the Effective Date of this assessment is and the parties agree to be bound by the terms and certifications contained in this document.

BUSINESS IDENTIFICATION





RISK ASSESSMENT

Primary Business Activity / NAICS Description:

Risk Indicators (check all that apply):






SCOPE OF WORK

The Service Provider shall perform the identification, verification, monitoring, and reporting services described below. Specific deliverables, frequency, and acceptance criteria are set forth in this section.

PAYMENT TERMS

The Client shall compensate the Service Provider in accordance with the following terms.

Late payments shall incur interest and fees as set forth below.

TERM AND TERMINATION

This Agreement commences on Start Date: and, unless earlier terminated in accordance with this section, continues until End Date: .

Either party may terminate for convenience upon written notice to the other party delivered not less than days prior to the intended termination date. Either party may terminate immediately for material breach, insolvency, or if continued performance would violate applicable law.

CONFIDENTIALITY

For purposes of this Agreement, "Confidential Information" means non-public information disclosed by one party to the other that is marked confidential or, by its nature, should reasonably be understood to be confidential. Confidential Information includes business, financial, customer, compliance, and technical data, and risk assessment outputs.

Each receiving party shall (a) use Confidential Information solely for performance of its obligations under this Agreement, (b) protect Confidential Information with at least the same degree of care it uses to protect its own confidential information but no less than reasonable care, and (c) not disclose Confidential Information except to employees, contractors, or advisors who have a need to know and who are bound by confidentiality obligations at least as protective as those herein. The obligations in this Clause do not apply to information that is (i) publicly available other than by breach of this Agreement, (ii) known to the receiving party prior to disclosure, (iii) lawfully obtained from a third party not subject to confidentiality obligations, or (iv) required to be disclosed by applicable law or order of a court or regulator, in which case the receiving party shall (where legally permitted) provide prompt notice and limit disclosure to the minimum required.

Remedies for breach of confidentiality include injunctive relief and recovery of damages; the parties acknowledge that a breach may cause irreparable harm and that monetary damages alone may be inadequate.

GOVERNING LAW

This Agreement and any disputes arising out of or related to it shall be governed by and construed in accordance with the laws of the State of without regard to its principles of conflicts of law. The parties submit to the exclusive jurisdiction of the courts located in that state for all disputes.

ENTIRE AGREEMENT

This document, together with any attachments and any mutually executed statements of work, constitutes the entire agreement between the parties with respect to its subject matter and supersedes all prior and contemporaneous negotiations, proposals, agreements, and representations, whether written or oral. No amendment shall be effective unless in writing and signed by authorized representatives of both parties.

CERTIFICATION AND ACKNOWLEDGEMENTS

By signing below, the undersigned certifies that the information provided in this Business Identification and Risk Assessment Form is true, accurate, and complete to the best of their knowledge, and acknowledges that the Service Provider will rely on this information in performing identification, verification, and monitoring services. The undersigned further agrees to promptly notify the other party of any material changes to the information provided.

Client

Party Label:

By:

Date:

Service Provider

Party Label:

By:

Date:

Enter text✕

What the Business Identification and Risk Assessment Form Is

The Business Identification and Risk Assessment Form collects a company’s legal identity, ownership, tax and regulatory details, and risk indicators used to evaluate compliance and onboarding suitability. Typical fields include legal name, DBA, EIN or TIN, ownership percentages, beneficial owners, business activity description, geographic operations, AML/KYC disclosures, insurance and license details, and a risk-score section for internal review. Organizations use this form to document who they transact with, apply due diligence, and produce an audit record supporting approvals or escalations under internal policies and external law.

Why this Form Matters for Compliance and Decision Making

A consolidated intake form standardizes identity verification, documents risk factors, and creates a reproducible audit trail that supports regulatory checks, contractual decisions, and internal controls.

Why this Form Matters for Compliance and Decision Making

Who Typically Completes or Reviews This Form

Use role-based review and approval routing to ensure each discipline verifies the fields relevant to its remit before final acceptance.

  • Compliance officers and risk managers who evaluate AML, KYC, and sanctions exposure during onboarding and periodic reviews.
  • Procurement and vendor management teams responsible for supplier onboarding, insurance verification, and contract routing.
  • Legal and finance staff who confirm entity formation, beneficial ownership, and tax identification for contracting and reporting.

Core Sections to Include in a Professional Form

A complete Business Identification and Risk Assessment Form is structured to collect identity, ownership, regulatory documentation, risk indicators, approvals, and an audit trail so decisions are consistent and defensible.

Entity Details

Legal name, DBA, entity type, formation jurisdiction, and Employer Identification Number (EIN) or TIN for tax and verification purposes.

Ownership

List of owners and beneficial owners with ownership percentages, SSNs or TINs where required, and documentation for corporate shareholders or trusts.

Licenses & Insurance

State licenses, professional registrations, insurance policy numbers, coverage limits, and expiration dates to verify operational authority and financial protection.

Risk Indicators

Questions on sanctions exposure, politically exposed persons (PEPs), litigation history, bankruptcy, and adverse media to flag elevated risk.

Supporting Documents

Attachments such as formation documents, W-9, articles of incorporation, government IDs, proof of address, and certificates of insurance for recordkeeping.

Review & Approval

Designated approvers, signatory authority, risk score, mitigation steps, and date-stamped approvals to document decision and authorized exceptions.

Step-by-Step: Completing the Form End to End

Follow these steps to finish the intake and secure approvals with minimal rework.

  • 01
    Prepare Documents: Gather formation papers, W-9, IDs, and insurance certificates before starting.
  • 02
    Enter Data: Complete all required fields using the specified formats and attach supporting files.
  • 03
    Authenticate Signers: Use the chosen authentication method to confirm identity before signing.
  • 04
    Submit for Review: Route to approvers and capture approvals with timestamps and reviewer notes.

Typical Electronic Workflow for This Form

An electronic workflow reduces cycle time and preserves a tamper-evident audit trail from intake through approval and storage.

  • Upload: Sender uploads form and attaches required supporting documents.
  • Place Fields: Add data, signature, initial, and file-upload fields for each participant.
  • Assign Signers: Define signer roles and the required authentication level for each.
  • Audit Trail: System captures timestamps, IPs, and action logs for compliance records.

Online Form Configuration Checklist

Recommended settings for online completion and secure routing in an eSignature platform.

Field Configuration
Required Fields Mark legal name, EIN, signatures, and date as mandatory.
Authentication Use email + SMS code for medium risk; KBA or ID verification for high risk.
Conditional Logic Show ownership fields only when entity type requires beneficial owner disclosure.
Retention Policy Auto-archive completed forms to secure storage for mandated retention period.

Technical Requirements for eSubmission and Signing

Integrations with CRMs, document storage, and ERP systems improve data consistency and support automated post-signing workflows.

  • Document Formats: Support for PDF and DOCX with preserved formatting and attachments.
  • Authentication Options: Email link, SMS code, KBA, or government ID checks as needed.
  • Audit Trail: Capture timestamp, IP, and user actions for each signing event.

Key Deadlines and Timing Considerations

Some fields and supporting documents affect statutory reporting timelines; timely completion prevents filing penalties and operational delays.

W-9 Requests:

Provide a W-9 upon payer request; no fixed filing date for supply to payer.

1099-NEC:

Submit to recipients and IRS by Jan 31 for contractor payments reporting.

1099-MISC IRS Filing:

Paper returns due Feb 28; electronic filings due Mar 31.

Form 1040:

Individual taxpayer returns due Apr 15; extensions until Oct 15 with Form 4868.

I-9 Retention:

Retain I-9 for 3 years after hire or 1 year after termination, whichever is later (8 CFR §274a.2).

Common Mistakes to Avoid

  • Missing or incorrect EIN/TIN entries that trigger backup withholding or delay vendor setup and tax reporting.
  • Uploading illegible or mismatched supporting documents, such as formation papers that don’t match the entity name provided.
  • Insufficient signer authentication for high-risk entities, increasing exposure to fraud or regulatory noncompliance.
  • Failing to capture an auditable approval path and dates, weakening the defensibility of onboarding decisions.

Penalties and Legal Risks of Inaccurate Submissions

1099 Penalties: IRC §6721 penalties range $60–$330 per form depending on lateness.
Intentional Disregard: Intentional disregard of filing obligations carries $660+ per form with no cap.
I-9 Violations: I-9 paperwork fines range $281–$2,789 per violation (DHS-adjusted).
HIPAA Breach Risk: Unauthorized PHI disclosure can trigger penalties and corrective action under HIPAA.
Contractual Exposure: Incorrect signatory authority can void agreements or create personal liability.
Tax Withholding Risk: Incorrect TINs can cause mandatory 24% backup withholding on payments.

Comparing eSignature Plans for This Form (signNow First)

Pricing and features vary by vendor; this high-level comparison highlights entry pricing and key capabilities relevant to form completion and compliance.

signNow DocuSign Adobe Sign PandaDoc HelloSign
Starting Price $8/user/mo $15/user/mo $14/user/mo $19/user/mo $15/user/mo
Free Trial 7-day free trial Varies by vendor Varies by vendor Varies by vendor Varies by vendor
Bulk Send Yes Yes Yes Yes No
Audit Trail Yes Yes Yes Yes Yes
HIPAA Compliant Yes Yes Yes No No

Frequently Asked Questions and Troubleshooting

Answers to common questions about e-signing, legal validity, authentication, and recordkeeping for this form.


Need help? Contact support

be ready to get more
Join over 28 million airSlate SignNow users