ISO 25500-3:2026

International
Standard
ISO 25500-3
First edition
Supply chain interoperability and
2026-11
integration —
Part 3:
Verification of trading entity
identity
Interopérabilité et intégration dans la chaîne
d'approvisionnement —
Partie 3: Vérification de l'identité de l'entité commerciale
Reference number
© ISO 2026
All rights reserved.
This ISO publication is protected by copyright and is owned by ISO and/or its licensors.
The content of this ISO publication is provided under licence, not sold. Use is subject to the applicable licence terms issued by ISO,
an ISO member body, or an authorized third-party distributor.
Except as required for implementation or expressly permitted by a separate licence, no part of this ISO publication may be
reproduced, distributed, modified, used, or made available in any form or by any means – electronic or mechanical, including
photocopying, scanning, recording, or posting on internal or external digital platforms.
Any use beyond the scope of the granted rights is prohibited and may result in legal action.
ISO copyright office
CP 401 • CH-1214 Vernier, Geneva
Phone: +41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland
ii
Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Trading entity identity: verification, resolution, and search processes . 2
4.1 General .2
4.2 Verify: Request and reply for IBID verification .2
4.2.1 Request for IBID verification .2
4.2.2 Reply to request for IBID verification .2
4.3 Resolve: Request and reply to the request for resolution of an IBID or IBRN to other
data associated with the trading entity .2
4.3.1 Request for IBID or IBRN resolution .2
4.3.2 Reply to request for IBID or IBRN resolution .3
4.4 Search: Request and reply for IBID or IBRN or ALEI search through legal name .3
4.4.1 Request for IBID, IBRN, or ALEI through legal name search .3
4.4.2 Reply to request for IBID, IBRN, or ALEI through legal name search .3
5 Conformance . 3
Annex A (informative) Document identification . 4
Bibliography . 5

iii
Foreword
ISO (the International Organization for Standardization) is a worldwide federation of national standards
bodies (ISO member bodies). The work of preparing International Standards is normally carried out through
ISO technical committees. Each member body interested in a subject for which a technical committee
has been established has the right to be represented on that committee. International organizations,
governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely
with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.
The procedures used to develop this document and those intended for its further maintenance are described
in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types
of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the
ISO/IEC Directives, Part 2 (see www.iso.org/directives).
ISO draws attention to the possibility that the implementation of this document may involve the use of (a)
patent(s). ISO takes no position concerning the evidence, validity or applicability of any claimed patent
rights in respect thereof. As of the date of publication of this document, ISO had not received notice of (a)
patent(s) which may be required to implement this document. However, implementers are cautioned that
this may not represent the latest information, which may be obtained from the patent database available at
www.iso.org/patents. ISO shall not be held responsible for identifying any or all such patent rights.
Any trade name used in this document is information given for the convenience of users and does not
constitute an endorsement.
For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions
related to conformity assessment, as well as information about ISO’s adherence to the World Trade
Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www.iso.org/iso/foreword.html.
This document was prepared by Technical Committee ISO/TC 184, Automation systems and integration,
Subcommittee SC 5, Interoperability, integration, and architectures for enterprise systems and automation
applications.
A list of all parts in the ISO 25500 series can be found on the ISO website.
Any feedback or questions on this document should be directed to the user’s national standards body. A
complete listing of these bodies can be found at www.iso.org/members.html.

iv
Introduction
The effectiveness, efficiency, and security of a supply chain can be increased through standardization to
create greater interoperability and integration across applications, facilities, companies, and borders.
At each step of the supply chain from planning, sourcing, making, delivering, and returning, buyers and
suppliers need a standardized way to quickly identify and verify legal trading entities to limit corporate
identity theft and potentially fraudulent transactions.
A legal entity is created when it is formally recognized by the governing body of a nation, state or community
that has the authority to set and enforce laws relating to property and trade. The most common way for a
business to obtain legal status is through registration of its legal name in an authoritative business register.
The business register creates a record and assigns a local record number; this is the authoritative legal entity
identifier (ALEI). A business formed in one jurisdiction can also be required to register as a legal entity in
another jurisdiction where it regularly conducts business, which is called a foreign registration (as opposed
to domestic registration). Some legal entities, like government agencies, are typically formed through legal
actions such as proclamations, regulations, and acts and are not typically referred to by an identifier within
those acts. Thus, a government agency’s legal name is its ALEI.
Some legal entities attain proxy identifiers (identifiers issued by an organization that is not the originator
of the legal entity or object identified) through various sources and, unlike ALEI issuers that follow legal
requirements for assigning identifiers and granting access to the datasets they represent, there are no
requirements for proxy identifier issuers for the assignment of and access to the proxy legal entity identifiers
(or the datasets they represent) that they control. However, every legal entity has a government issued,
verifiable authoritative identifier, an ALEI, issued at its formation by the governing body under which it was
created and that maintains its legal existence; this governing body is the authoritative source of data on
that legal entity. As part of the supply chain meeting know your customer (KYC) and know your supplier
(KYS) demands, each legal entity can be verified with the authoritative source. This verification is typically
done by either searching authoritative source’s online database, with its own structure and terminology, or
asking (via phone call, email, fax, or postal mail) an employee of the governing body to search its paper or
electronic documents to verify the entity’s details. These methods are not suited for automated processing
and add time and cost to the verification process, especially for
...