Country defaults

Settings → Country defaults, needing country_configuration.manage.

A country configuration is what makes a country usable. An entity cannot be created for a country with no active configuration on the account.

What it controls

Intake checks

Which checks run automatically when an entity is created in this country. Chosen from: commercial registration, organization screening, individual screening, identity verification, address verification.

These are also what blocks approval if they have not completed — configuring a check here makes it required, not merely offered.

Screening dispositions

What a screening classification means in this country: whether a PEP match blocks approval, escalates, or merely informs. This is the single source the approval guard and the screening panel both read, so the panel and the block can never disagree.

Activity rules

Which ISIC activity codes are prohibited and which are high risk in this country.

These drive three gates and the activity_flag risk factor. Until a country has activity rules configured, those gates report not assessed rather than clear — an unconfigured country means nothing was judged against policy, which is not a clean result.

The ISIC vocabulary

Activity codes come from the ISIC vocabulary synced from Wathq. Every level-3 code carries a regulating authority, which is the signal behind the "licence for a regulated activity" gate.

If the vocabulary has not been synced, the entity page says so rather than presenting an unmatched activity list as clean.

Registration number formats

Per-country validation. Saudi Arabia requires the 10-digit unified number beginning with 7 (7XXXXXXXXX). Countries without a rule accept any non-blank value.

Seeded countries

Saudi Arabia, United Arab Emirates, Kuwait, Qatar, Bahrain and Oman are seeded. Only Saudi Arabia has provider integrations; the others exist so entities can be recorded, and their checks will be limited accordingly.