Status

Endpoint Overview

POST /api/v1/epfo-async/establishment-details/status

Description

The EPFO Establishment Details Async Status endpoint allows you to retrieve the results of a previously initiated asynchronous establishment details lookup. After submitting a request to fetch EPFO establishment information, this endpoint is polled using the client_id returned from the initial call to obtain the full details once processing is complete.

The response includes comprehensive information about the establishment — including its registration and validity status, primary business details, address, EPFO office association, payment history with employee-level data, director/authorized signatory information, and additional compliance identifiers such as PAN, CIN, ESIC, and MSME codes.

Key Benefits

Asynchronous Processing: Decouple the request and response cycle for faster user experiences — initiate a fetch and poll for results at your convenience.

Comprehensive Data: Retrieve a rich dataset covering validity, business, compliance, payment, and director details in a single response.

Compliance-Ready: Access PAN verification status, CIN codes, and MSME/startup classifications to meet regulatory and onboarding requirements.

Payment Transparency: Obtain recent EPF remittance records including TRRN, employee count, payment amounts, and individual employee names.

Use Cases

BFSI & Lending

HR & Staffing

Compliance & Legal

Verify the legitimacy and compliance status of a business entity before sanctioning loans or credit facilities.

Validate EPF payment history to assess workforce stability and financial health of an employer.

Cross-check PAN and CIN codes during KYC/KYB (Know Your Business) onboarding.

Authenticate director details as part of due diligence for commercial lending.

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer <YOUR_JWT_TOKEN>.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.app

Production: https://kyc-api.surepass.app

⚠️ Never share or expose your JWT token in client-side code or public repositories.

Request Parameters

Request Headers

Header	Required	Description
`Authorization`	Yes	Bearer token for authentication. Format: `Bearer <JWT_TOKEN>`
`Content-Type`	Yes	Must be `application/json`

Request Body

Parameter	Type	Required	Description
`client_id`	string	Yes	The unique client ID returned from the initial async establishment details request. Used to poll the status and retrieve results.

Example Request

{
    "client_id": "establishment_details_async_client_id"
}

Process Response

Response Parameters

Top-Level Fields

Parameter	Type	Description
`status_code`	integer	HTTP-equivalent status code of the operation (e.g., `200` for success).
`success`	boolean	Indicates whether the API request was processed successfully.
`message`	string	Human-readable message describing the result (e.g., `"Success"`).
`message_code`	string	Machine-readable status code (e.g., `"success"`).
`data`	object	Container object holding all retrieved establishment data.

`data` Object

Parameter	Type	Description
`client_id`	string	The client ID used to fetch this result.
`establishment_id`	string	The EPFO-assigned establishment code (e.g., `"DLCPM0001014111"`).
`status`	string	Processing status of the async job (e.g., `"success"`).
`details`	object	Nested object containing all establishment details.

`details.validity_status`

Parameter	Type	Description
`establishment_code`	string	The EPFO establishment code.
`establishment_name`	string	Registered name of the establishment.
`establishment_status`	string	Description of the establishment's EPFO status.
`registration_status`	string	Current login/registration status on the ECR portal.
`post_coverage`	string \| null	Post coverage detail, if applicable.

`details.establishment_details`

Parameter	Type	Description
`establishment_name`	string	Name of the establishment.
`establishment_code`	string	EPFO establishment code.
`pan_status`	string	PAN verification status (e.g., `"VERIFIED"`).
`section_applicable`	string	EPF Act section applicable to the establishment.
`primary_business_activity`	string	The primary business activity category of the establishment.
`esic_code`	string \| null	ESIC code, if available.
`ownership_type`	string	Type of ownership (e.g., `"REGISTERED SOCIETY"`).
`date_of_setup`	string	Date of establishment setup in `YYYY-MM-DD` format.
`address`	string	Registered street address.
`pincode`	string	PIN code of the establishment's address.
`city`	string	City of the establishment.
`district`	string	District of the establishment.
`state`	string	State of the establishment.
`country`	string	Country of the establishment.
`epfo_office_name`	string	Name of the EPFO regional office managing this establishment.
`epfo_office_address`	string	Address of the EPFO regional office.
`zone`	string	EPFO zone to which the establishment belongs.
`region`	string	EPFO region code and name.

`details.additional_information`

Parameter	Type	Description
`establishment_id`	string	EPFO establishment ID.
`cin_code`	string \| null	Corporate Identification Number (CIN), if available.
`esic_code`	string \| null	ESIC code, if available.
`lin_code`	string \| null	Labour Identification Number (LIN), if available.
`startup_order_number`	string \| null	Startup India order number, if applicable.
`startup_order_date`	string	Date of startup order in `YYYY-MM-DD` format.
`msme_order_number`	string \| null	MSME order number, if applicable.
`msme_order_date`	string	Date of MSME order in `YYYY-MM-DD` format.
`pan_number`	string	PAN number of the establishment.

`details.payment_details` (Array)

Parameter	Type	Description
`trrn`	string	Transaction Reference and Receipt Number for the EPF payment.
`month`	string	Month and year of the payment (e.g., `"OCT-24"`).
`number_of_employees`	integer	Number of employees covered in this payment.
`amount`	string	Total payment amount (formatted as a string, e.g., `"1,68,172"`).
`ecr`	string	Whether an Electronic Challan cum Return (ECR) was filed (`"YES"` or `"NO"`).
`employees_list`	array of strings	Names of employees included in this payment record.

`details.director_details` (Array)

Parameter	Type	Description
`name`	string	Full name of the director/authorized signatory.
`designation`	string	Designation of the individual (e.g., `"DIRECTOR"`).
`date_of_birth`	string	Date of birth in `YYYY-MM-DD` format.
`father_name`	string	Father's name.
`residential_address`	string	Residential address of the director.
`position_date`	string	Date when the individual assumed the position, in `YYYY-MM-DD` format.

Example Successful Response

{
    "data": {
        "client_id": "establishment_details_async_oNNiOnwngacfhtyycnsw",
        "establishment_id": "DLCPM0001014111",
        "status": "success",
        "details": {
            "validity_status": {
                "establishment_code": "DLCPM0001014111",
                "establishment_name": "DELHI RACE CLUB",
                "establishment_status": "CODE NO ALLOTTED WAS BEFORE ONLINE REGISTRATION STARTED.",
                "registration_status": "PERMANENT LOGIN CREATED BY OWNER ON ECR PORTAL",
                "post_coverage": null
            },
            "establishment_details": {
                "establishment_name": "DELHI RACE CLUB",
                "establishment_code": "DLCPM0001014111",
                "pan_status": "VERIFIED",
                "section_applicable": "OTHER ESTABLISHMENTS IN WHICH EMPLOYING 20 OR MORE PERSONS AND NOTIFIED BY THE CENTRAL GOVT.",
                "primary_business_activity": "COMPANIES/SOCIETIES/ASSC/CLUBS/TROUPES FOR PERFORMANCES",
                "esic_code": null,
                "ownership_type": "REGISTERED SOCIETY",
                "date_of_setup": "1941-01-13",
                "address": "RACE COURCE MUSTAFA KEMAL ATATURK MARG",
                "pincode": "110001",
                "city": "NEW DELHI",
                "district": "CENTRAL",
                "state": "DELHI",
                "country": "India",
                "epfo_office_name": "DELHI (NORTH)",
                "epfo_office_address": "28, Community Centre, Wazirpur Industrial Area, ",
                "zone": "DELHI AND UTTARAKHAND",
                "region": "DL - DELHI (NORTH)"
            },
            "additional_information": {
                "establishment_id": "DLCPM0001014111",
                "cin_code": "U12345MH2024PLC087432",
                "esic_code": null,
                "lin_code": null,
                "startup_order_number": null,
                "startup_order_date": "1800-01-01",
                "msme_order_number": null,
                "msme_order_date": "1800-01-01",
                "pan_number": "ABCCP1234D"
            },
            "payment_details": [
                {
                    "trrn": "1012411000987",
                    "month": "OCT-24",
                    "number_of_employees": 6,
                    "amount": "1,68,172",
                    "ecr": "YES",
                    "employees_list": [
                        "DHARMENDER",
                        "GHAN SHYAM",
                        "ISHWAR DIN PATEL",
                        "NATHU",
                        "P RAJAGOPALAN",
                        "PARVEZ ALAM"
                    ]
                },
                {
                    "trrn": "1012410000986",
                    "month": "SEP-24",
                    "number_of_employees": 10,
                    "amount": "1,68,167",
                    "ecr": "YES",
                    "employees_list": [
                        "KULDEEP SINGH",
                        "MEWALAL",
                        "MURARI LAL",
                        "NANDLAL",
                        "RAM ASHISH",
                        "RAM HIND",
                        "SAGAR KUMAR",
                        "SARIKA",
                        "SATISH KUMAR",
                        "SHAHAB RAZA"
                    ]
                }
            ],
            "director_details": [
                {
                    "name": "MANINDER SINGH NARULA",
                    "designation": "DIRECTOR",
                    "date_of_birth": "1955-09-09",
                    "father_name": "RANBIR SINGH NARULA",
                    "residential_address": "83/42, PUNJABI BAGH WEST, NEW DELHI-110026",
                    "position_date": "2020-08-24"
                },
                {
                    "name": "SHIV KUMAR GROVER",
                    "designation": "DIRECTOR",
                    "date_of_birth": "1959-01-01",
                    "father_name": "MADAN LAL GROVER",
                    "residential_address": "8, FIRST FLOOR, HEMKUNT COLONY,OPP NEHRU PLACE, GREATER KAILASH, NEW DELHI-110048",
                    "position_date": "2020-07-29"
                }
            ]
        }
    },
    "status_code": 200,
    "success": true,
    "message": "Success",
    "message_code": "success"
}

Possible Error Responses

Unauthorized (401)

Invalid Client ID (400)

{
    "status_code": 401,
    "success": false,
    "message": "Unauthorized. Invalid or missing Bearer token.",
    "message_code": "unauthorized"
}

Returned when the JWT Bearer token is missing, expired, or invalid. Ensure you are using the correct token for the environment (sandbox vs. production).

Integration Best Practices

Security Recommendations

Store JWT tokens securely using environment variables or a secrets manager — never hardcode them in source code.

Use separate tokens for sandbox and production environments and rotate them periodically.

Transmit all API calls over HTTPS to protect sensitive establishment and director data in transit.

Restrict API credentials to only the services and IPs that require access using allowlists where supported.

Log API responses with audit trails to detect unauthorized data access patterns.

User Experience Guidelines

Implement a polling loop with exponential backoff when checking the async status — avoid aggressive polling that may hit rate limits.

Display a loading/processing indicator to end users while awaiting the async result.

Handle null values gracefully for optional fields like esic_code, cin_code, lin_code, startup_order_number, and msme_order_number.

Present payment_details in reverse chronological order (most recent month first) to emphasize current compliance.

Mask or restrict display of sensitive fields such as pan_number, date_of_birth, and residential_address from director details based on the user's access level.

Code Samples

cURL

Python

Node.js

Related APIs

EPFO Establishment Details (Async Initiate) — Initiates the async request to look up EPFO establishment details by establishment ID. Returns a client_id used to poll this status endpoint.

EPFO Member Passbook — Retrieves EPF contribution and passbook details for individual employees registered under a given establishment.

EPFO UAN Details — Fetches Universal Account Number (UAN) information and employment history for an individual member.

MCA Company Details — Retrieves Ministry of Corporate Affairs (MCA) company registration data including CIN, directors, and filing status.

GST Verification — Validates GSTIN and retrieves business registration details for cross-referencing establishment identity.

Compliance and Legal Considerations

Data Privacy: The API returns sensitive personal information including director names, dates of birth, father's names, residential addresses, and PAN numbers. Ensure this data is handled in compliance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA) in India.

Purpose Limitation: Use the retrieved establishment and director data strictly for the stated business purpose (e.g., KYB verification, lending due diligence). Avoid secondary use of the data without explicit consent or legal basis.

Data Retention: Do not retain raw API responses beyond what is necessary for the intended use case. Implement appropriate data retention and deletion policies.

Access Control: Restrict access to the API and its responses to only those roles and services that have a legitimate need. Log all access for audit purposes.

Accuracy Disclaimer: The data is sourced from EPFO public records and may not always reflect the most current status. Do not rely solely on this data for critical legal or financial decisions without independent verification.

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location 'https://kyc-api.surepass.app/api/v1/epfo-async/establishment-details/status' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data '{ "client_id": "establishment_details_async_client_id" }'

{ "data": { "client_id": "establishment_details_async_oNNiOnwngacfhtyycnsw", "establishment_id": "DLCPM0001014111", "status": "success", "details": { "validity_status": { "establishment_code": "DLCPM0001014111", "establishment_name": "DELHI RACE CLUB", "establishment_status": "CODE NO ALLOTTED WAS BEFORE ONLINE REGISTRATION STARTED.", "registration_status": "PERMANENT LOGIN CREATED BY OWNER ON ECR PORTAL", "post_coverage": null }, "establishment_details": { "establishment_name": "DELHI RACE CLUB", "establishment_code": "DLCPM0001014111", "pan_status": "VERIFIED", "section_applicable": "OTHER ESTABLISHMENTS IN WHICH EMPLOYING 20 OR MORE PERSONS AND NOTIFIED BY THE CENTRAL GOVT.", "primary_business_activity": "COMPANIES/SOCIETIES/ASSC/CLUBS/TROUPES FOR PERFORMANCES", "esic_code": null, "ownership_type": "REGISTERED SOCIETY", "date_of_setup": "1941-01-13", "address": "RACE COURCE MUSTAFA KEMAL ATATURK MARG", "pincode": "110001", "city": "NEW DELHI", "district": "CENTRAL", "state": "DELHI", "country": "India", "epfo_office_name": "DELHI (NORTH)", "epfo_office_address": "28, Community Centre, Wazirpur Industrial Area, ", "zone": "DELHI AND UTTARAKHAND", "region": "DL - DELHI (NORTH)" }, "additional_information": { "establishment_id": "DLCPM0001014111", "cin_code": "U12345MH2024PLC087432", "esic_code": null, "lin_code": null, "startup_order_number": null, "startup_order_date": "1800-01-01", "msme_order_number": null, "msme_order_date": "1800-01-01", "pan_number": "ABCCP1234D" }, "payment_details": [ { "trrn": "1012411000987", "month": "OCT-24", "number_of_employees": 6, "amount": "1,68,172", "ecr": "YES", "employees_list": [ "DHARMENDER", "GHAN SHYAM", "ISHWAR DIN PATEL", "NATHU", "P RAJAGOPALAN", "PARVEZ ALAM" ] }, { "trrn": "1012410000986", "month": "SEP-24", "number_of_employees": 10, "amount": "1,68,167", "ecr": "YES", "employees_list": [ "KULDEEP SINGH", "MEWALAL", "MURARI LAL", "NANDLAL", "RAM ASHISH", "RAM HIND", "SAGAR KUMAR", "SARIKA", "SATISH KUMAR", "SHAHAB RAZA" ] } ], "director_details": [ { "name": "MANINDER SINGH NARULA", "designation": "DIRECTOR", "date_of_birth": "1955-09-09", "father_name": "RANBIR SINGH NARULA", "residential_address": "83/42, PUNJABI BAGH WEST, NEW DELHI-110026", "position_date": "2020-08-24" }, { "name": "SHIV KUMAR GROVER", "designation": "DIRECTOR", "date_of_birth": "1959-01-01", "father_name": "MADAN LAL GROVER", "residential_address": "8, FIRST FLOOR, HEMKUNT COLONY,OPP NEHRU PLACE, GREATER KAILASH, NEW DELHI-110048", "position_date": "2020-07-29" } ] } }, "status_code": 200, "success": true, "message": "Success", "message_code": "success" }

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Top-Level Fields#

data Object#

details.validity_status#

details.establishment_details#

details.additional_information#

details.payment_details (Array)#

details.director_details (Array)#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses