Provider Due Diligence: Verifying a Company Before You Sign

iGaming Solutions Asia Editorial · August 10, 2026

Corporate identity, regulatory standing, security posture and references — a practical due-diligence routine for B2B vendors.

Directory listings, review scores and sales calls all describe a provider. Due diligence establishes whether that description is accurate. This routine takes a few hours and repeatedly prevents expensive mistakes.

Confirm who you are contracting with

The brand on the website is often not the contracting entity. Identify the legal entity name, registration number and jurisdiction, then confirm it in the relevant public company register. Check that the entity on the draft contract matches the one you researched, and note who signs.

Regulatory standing

Where a provider handles funds, establish which licences or registrations it holds, in which jurisdictions, and under which entity. Verify each on the regulator's own public register — not on the provider's marketing pages. Licence scope matters: authorisation in one country says nothing about the legality of a service in another.

Security posture

Ask for current certification reports or attestations rather than logos. Confirm the scope of any certification, since it may cover only part of the business. Ask about breach history, disclosure policy, data residency and subprocessors. A provider that answers these precisely is usually well run; vagueness here is informative.

Financial and operational stability

Where filings are public, read them. Ask how long the current service has operated, roughly how many merchants it serves, and what the support model looks like at your size. You want to know whether you will be a priority account or an anonymous one.

References you choose

Ask for references from merchants of similar size in your market — and ask each of them about a problem they experienced, not about satisfaction. The useful signal is how the provider behaves when something goes wrong.

Contract points that matter later

Termination rights and notice periods. Data export on exit. Liability caps relative to your volume. Change-of-terms provisions. Reserve and settlement terms in writing. Fee change notice periods.

Record what you verified

Keep a dated file of each check and its source. This is exactly the discipline iGaming Solutions Asia applies to its own listings: every field we publish is tied to a source and a date, and anything unverified is marked as such rather than estimated.

due diligence
compliance
vendor selection