EntityLocker
EntityLocker is a government platform for storing and sharing business documents digitally. Use this API to retrieve verified business documents after an authorized representative grants consent. This API enables consent-based retrieval of business credentials for vendor verification, KYB compliance, and partner onboarding.Consent-based verification
Authorized representatives grant consent to share documents. The system retains retrieved documents for 60 minutes.
Two integration methods
Backend API for custom B2B workflows or client-side SDK for web and mobile applications.
How it works
1
Initiate session
Generate a unique EntityLocker session link for the business entity.
2
Business authentication
Authorized representative logs in and grants consent to share specific business documents.
3
Retrieve documents
Fetch the requested business documents and entity details in PDF or JSON format.
What you can do
Access business documents
Retrieve GSTIN details, Company Master Data from MCA, Udyam certificates, incorporation documents, and business PAN.
Verify business identity
Get company name, registration details, director information, authorized signatories, and shareholding patterns.
Automate vendor verification
Replace manual document collection with automated retrieval from government sources.
Time-limited access
The system retains retrieved documents for 60 minutes before automatically deleting them for security compliance.
Integration methods
EntityLocker API
Backend integration where you control the flow and handle session management.
EntityLocker SDK
Client-side integration using pre-built SDKs for web and mobile applications.
Common use cases
Use EntityLocker API when you need to:- Verify business credentials during vendor onboarding
- Validate company registration and incorporation details
- Retrieve GSTIN information for tax compliance verification
- Access MCA records for due diligence and partner verification
- Verify MSME status through Udyam certificates
- Replace manual collection of business documents
- Conduct KYB checks for B2B account opening
Frequently Asked Questions
What is EntityLocker?
What is EntityLocker?
EntityLocker is Indiaβs digital locker for business organizations. Itβs essentially DigiLocker for businesses, enabling secure storage, sharing, and verification of business documents and credentials.
How does EntityLocker API work?
How does EntityLocker API work?
EntityLocker API enables consent-based business document retrieval. An authorized representative from the business authenticates, grants consent to share specific documents, and you receive verified business data instantly through our API.
What documents can I fetch from EntityLocker?
What documents can I fetch from EntityLocker?
You can fetch various business documents including GSTIN details, Company Master Data from MCA, Udyam Certificate, Certificate of Incorporation, and other government-issued business credentials.
Who can authorize document sharing from EntityLocker?
Who can authorize document sharing from EntityLocker?
How long are documents retained?
How long are documents retained?
Our system retains documents for up to 60 minutes after retrieval and then automatically deletes them for security and compliance purposes.
Is Sandbox a certified Technology Solution Provider?
Is Sandbox a certified Technology Solution Provider?
Yes, Sandbox is a government-recognized Technology Solution Provider (TSP), enabling secure and compliant access to EntityLocker data through our API.
What is the difference between EntityLocker API and EntityLocker SDK?
What is the difference between EntityLocker API and EntityLocker SDK?
EntityLocker API: Backend integration with full control, ideal for custom B2B workflows
EntityLocker SDK: Client-side integration with pre-built components for faster implementation
EntityLocker SDK: Client-side integration with pre-built components for faster implementation
Can I verify individual documents with EntityLocker?
Can I verify individual documents with EntityLocker?
No, EntityLocker is for business entities only. For individual verification, use DigiLocker API.