> ## Documentation Index
> Fetch the complete documentation index at: https://developer.sandbox.co.in/llms.txt
> Use this file to discover all available pages before exploring further.

# Overview

> Retrieve verified business documents from EntityLocker via consent-based verification

# EntityLocker

EntityLocker is a government platform for storing and sharing business documents digitally. Use this API to retrieve verified business documents after an authorized representative grants consent.

This API enables consent-based retrieval of business credentials for vendor verification, KYB compliance, and partner onboarding.

> **Consent-based verification**
>
> Authorized representatives grant consent to share documents. The system retains retrieved documents for 60 minutes.

> **Two integration methods**
>
> Backend API for custom B2B workflows or client-side SDK for web and mobile applications.

## How it works

**1. Initiate session**

Generate a unique EntityLocker session link for the business entity.

**2. Business authentication**

Authorized representative logs in and grants consent to share specific business documents.

**3. Retrieve documents**

Fetch the requested business documents and entity details in PDF or JSON format.

## What you can do

> **Access business documents**
>
> Retrieve GSTIN details, Company Master Data from MCA, Udyam certificates, incorporation documents, and business PAN.

> **Verify business identity**
>
> Get company name, registration details, director information, authorized signatories, and shareholding patterns.

> **Automate vendor verification**
>
> Replace manual document collection with automated retrieval from government sources.

> **Time-limited access**
>
> The system retains retrieved documents for 60 minutes before automatically deleting them for security compliance.

> **[Get notified on consent](https://developer.sandbox.co.in/api-reference/kyc/entitylocker/endpoints/webhook.md)**
>
> Receive a webhook when a session succeeds or fails, instead of polling the session status.

## Integration methods

> **[EntityLocker API](https://developer.sandbox.co.in/api-reference/kyc/entitylocker/endpoints/initiate_session.md)**
>
> Backend integration where you control the flow and handle session management.

> **[EntityLocker SDK](https://developer.sandbox.co.in/api-reference/kyc/entitylocker-sdk/getting-started/introduction.md)**
>
> Client-side integration using pre-built SDKs for web and mobile applications.

## Common use cases

Use EntityLocker API when you need to:

* Verify business credentials during vendor onboarding
* Validate company registration and incorporation details
* Retrieve GSTIN information for tax compliance verification
* Access MCA records for due diligence and partner verification
* Verify MSME status through Udyam certificates
* Replace manual collection of business documents
* Conduct KYB checks for B2B account opening

## Frequently Asked Questions

> **What is EntityLocker?**
>
> EntityLocker is India's digital locker for business organizations. It's essentially DigiLocker for businesses, enabling secure storage, sharing, and verification of business documents and credentials.

> **How does EntityLocker API work?**
>
> EntityLocker API enables consent-based business document retrieval. An authorized representative from the business authenticates, grants consent to share specific documents, and you receive verified business data instantly through our API.

> **What documents can I fetch from EntityLocker?**
>
> You can fetch various business documents including GSTIN details, Company Master Data from MCA, Udyam Certificate, Certificate of Incorporation, and other government-issued business credentials.

> **Who can authorize document sharing from EntityLocker?**
>
> Only authorized representatives of the business entity can grant consent to share documents. This is typically verified through the entity's registered credentials with EntityLocker.

> **How long are documents retained?**
>
> Our system retains documents for up to 60 minutes after retrieval and then automatically deletes them for security and compliance purposes.

> **Is Sandbox a certified Technology Solution Provider?**
>
> Yes, Sandbox is a government-recognized Technology Solution Provider (TSP), enabling secure and compliant access to EntityLocker data through our API.

> **What is the difference between EntityLocker API and EntityLocker SDK?**
>
> **EntityLocker API**: Backend integration with full control, ideal for custom B2B workflows\
> **EntityLocker SDK**: Client-side integration with pre-built components for faster implementation

> **Can I verify individual documents with EntityLocker?**
>
> No, EntityLocker is for business entities only. For individual verification, use [DigiLocker API](https://developer.sandbox.co.in/api-reference/kyc/digilocker/overview.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.