Switching Compliance Platforms: An AML Migration Checklist
A 12-step AML checklist for switching compliance platforms: exit terms, 5-year BSA record retention, validation, parallel runs, and cutover.
TL;DR: A Secretary of State business search confirms that a state accepted a filing that created or registered an entity, and it reports that filing's status, formation date, and registered agent. Some states also publish officers or managers. It does not prove ownership, and "active" on a search page is not the same as good standing. Since FinCEN's final rule took effect on August 14, 2026, U.S. companies no longer report beneficial ownership to FinCEN. Delaware alone held 2,287,728 entities at the end of 2025, so the state registry is still the first public record a KYB review has, and reviewers need to know what each state does and does not publish.
What a Secretary of State Record Actually Holds
A Secretary of State business search is a lookup against the public index of entities that have filed formation or registration documents with a state's business filing office. The office goes by different names, such as Delaware's Division of Corporations. The record exists because a filing happened, and every field on it comes from that filing or a later one.
The core fields are similar across states:
Two fields vary the most from state to state: the people and the periodic report. Some states publish officers, directors, or managers from annual or biennial reports. Others publish none.
The record does not cover ownership. FinCEN's 2006 guidance on money laundering risks related to shell companies found that most states do not collect or require ownership information at formation or afterward, and that is still how state filing works today. The registry tells a reviewer that an entity exists and how it stands with the state. Owners and control persons come from the customer and from documents, which is the work covered in UBO identification.
Five States, Five Different Answers
Registry depth depends on the state. The table below compares five major formation and operating states, using what each state's own filing office says it publishes and charges. Fees and portals change, so check the source before building a procedure around any cell.
Sources: Delaware entity search and Delaware corporate information access, California Secretary of State FAQs, Florida Division of Corporations annual report page, New York Department of State FAQs, and the Texas Comptroller PIR requirements.
Delaware is the case that surprises reviewers most. The Division of Corporations says its free search results include active and inactive entities and are "not an indication of the current status of an entity." A Delaware result with a name, a file number, and an agent tells the reviewer the entity was formed. Whether it is still in good standing is a paid lookup. Delaware is also where much of the volume sits: the Division's annual statistics count 2,287,728 business entities at the end of 2025, 1,653,329 of them LLCs. A Delaware LLC files no annual report, so no periodic filing puts its managers on the public record.
Texas splits the record across two offices. The Comptroller's Franchise Tax Account Status, "previously referred to as 'Good Standing'," shows whether the entity has the right to transact business in Texas. The Public Information Report also asks for any parent entity that owns 10 percent or more. That reports corporate parents, not individual beneficial owners.
Active Is Not Good Standing
"Active" usually means that the state has not dissolved, cancelled, or revoked the entity. Good standing is a narrower claim: the entity is current on the reports and fees the state requires, and on taxes in states where the tax authority can suspend it. An entity can show as existing while it is behind on both.
The gap shows up in three places. In California, the Franchise Tax Board can suspend an entity for failing to meet tax requirements, and the Secretary of State can suspend one for failing to file a Statement of Information. In Texas, the Comptroller forfeits the right to transact business for unmet franchise tax requirements, after at least 45 days' notice. In Delaware, the free search does not report status at all. A KYB procedure that writes "active" into a good-standing field has recorded a claim that no source made.
Timing matters too. Florida entities that miss the annual report deadline can be administratively dissolved at the close of business on the fourth Friday of September. A customer verified in August can lose standing in October without any change to the account. That is a reason to re-check registry status on a schedule tied to each state's reporting cycle, not only at onboarding. When a customer provides a paper certificate of good standing instead of a live lookup, compare it to the state record. A fake certificate of good standing is easy to make and can only be caught against the register.
Foreign Qualification: The Second Registry Search
A company formed in one state that does business in another usually has to register there as a foreign entity. California's Secretary of State says a business must qualify before transacting intrastate business, defined as "repeated and successive transactions" in the state. A foreign corporation applying there attaches a certificate of good standing from its home jurisdiction. The result is two registry records for one company: the home-state formation record and the operating-state foreign registration.
For KYB, this means one search is rarely enough. A Delaware LLC with its office, staff, and customers in Texas should have a Delaware record and a Texas foreign registration. The Texas record, along with the Public Information Report, is where operating-state officers and the right to transact business appear. A missing foreign registration does not prove fraud. Many small companies register late. It is still worth noting when the application describes operations in a state with no filing.
Foreign registration also determines which companies still report to FinCEN. FinCEN's beneficial ownership information page says the final rule, effective August 14, 2026, exempts U.S. companies from BOI reporting and removes the requirement to report U.S. person beneficial owners. The reporting duty now covers only entities formed under foreign law that registered to do business in a U.S. state or tribal jurisdiction by filing with a secretary of state or similar office. The foreign-registration record is the filing that brings a company into that remaining category. The registry search does not return BOI, and the CTA reporting change did not change an institution's own CDD obligation to identify beneficial owners. That distinction, and what it means for an integration, is covered in depth in KYB API integration.
Reading the Registered Agent Field
The registered agent is the person or company the state designates to receive service of process. Every entity has one, and using a commercial agent is normal for a company formed outside its owner's home state. A commercial agent alone is not a finding. The address next to it can be.
The ICIJ found that more than 266,000 companies incorporated using the address of a single Registered Agents Inc. office in Sheridan, Wyoming, between 2019 and 2024, based on its analysis of OpenCorporates data. The agent told ICIJ that being listed on an entity record does not mean it has a controlling interest in or extensive relationship with that entity, and that is accurate. The point for a reviewer is narrower: when the agent's address is also the only principal office address the applicant gives, the registry has said nothing about where the business operates.
FinCEN's 2006 shell company guidance lists businesses that "provide only a registered agent's address" as a red flag. Useful registry checks around that field include:
None of these checks decides the case alone. Combined, they are the pattern described in shell company red flags, and they should lead to questions for the customer, not an automatic decline.
Automating Registry Checks Without Breaking the Rules
Teams usually automate state registry checks either by buying normalized registry data from an aggregator or by querying official channels directly. The choice depends on volume, on which states the book of business uses, and on each state's terms. Delaware's search page prohibits data mining and says automated tools "in any form" may lead to suspended access. Texas goes the other way: the Comptroller publishes a public API for franchise tax account status. New York offers a prepaid drawdown account at 75 cents per transaction for direct database access. A compliant automation plan starts with a state-by-state list of which channel is allowed.
Speed is not the hard part once access is settled. Interpretation is. A well-built registry step should:
Workflow design for the wider onboarding queue, including where registry checks sit next to document collection and screening, is covered in how to speed up business verification processes.
Where Sphinx Fits
Sphinx's agents run the registry step as part of a KYB investigation inside the tools the compliance team already uses. They pull formation and foreign-registration records, keep status and good standing separate, compare agent and office addresses with the application, and record which source supported each field. Sphinx Atlas extends that work to ownership mapping and address validation, so a clean registry record is checked against the rest of the evidence. Analysts still decide edge cases, such as a missing foreign registration for a company that says it is in the process of registering.
Frequently Asked Questions
Does a Secretary of State business search show who owns a company?
No. A Secretary of State record shows that an entity was formed or registered, its status, and its registered agent. Some states also publish officers, directors, or managers. FinCEN's 2006 shell company guidance noted that most states do not collect ownership information, so beneficial owners have to come from the customer and from verified documents.
What is the difference between active status and good standing?
Active usually means the state has not dissolved or revoked the entity. Good standing means the entity is current on required reports, fees, and in some states taxes. In California the Franchise Tax Board can suspend an entity, and in Delaware the free search does not report status at all, so a KYB file should record the two separately.
Do U.S. companies still file beneficial ownership reports with FinCEN?
No. FinCEN's final rule, effective August 14, 2026, exempts U.S. companies from BOI reporting. Only foreign-formed entities registered to do business in a U.S. state still report, and they do not report U.S. person beneficial owners. Covered financial institutions still have to identify beneficial owners under the CDD rule.
Why do some state searches list officers and others do not?
Officer data comes from periodic reports, and states require different reports. Florida's annual report and California's Statement of Information list officers, directors, or managers. Delaware LLCs file no annual report, and New York LLCs list only an address for service of process. A blank officer field in those states is expected and is not a finding.
Is a registered agent address a red flag?
A registered agent address alone is not a red flag, because every entity is required to have an agent. The concern is an applicant whose only address is the agent's, especially when the formation is recent and the business shows no operations elsewhere. FinCEN lists businesses that provide only a registered agent's address as a shell company indicator.
