---
title: "FINMA authorisation-list membership and warning-list candidates for a UID"
method: GET
path: "/api/v1/company/{uid}/finma"
deprecated: true
---

# FINMA authorisation-list membership and warning-list candidates for a UID

`GET /api/v1/company/{uid}/finma`

## Request

- Base URL: `https://bumit.ai`
- URL: `https://bumit.ai/api/v1/company/{uid}/finma`
- Auth: none required

> **Deprecated.**

Returns TWO independent checks in strictly separate sections. They are never merged into a combined FINMA status, and neither is a legal conclusion.

authorisation (FINMA_AUTHORISATION_CHECK): membership is FOUND_IN_FINMA_LIST, NOT_FOUND_IN_FINMA_LIST or UNKNOWN. FOUND_IN_FINMA_LIST means only that the canonical Swiss UID appears in the stored FINMA authorisation-list snapshot; it never means authorised, licensed, supervised, compliant or safe, and it says nothing about permitted activities. NOT_FOUND_IN_FINMA_LIST means only that the UID was absent from that snapshot; it never means not authorised. Linkage is exact canonical UID equality only — no name, city, branch, commercial-register, fuzzy or LLM inference. Multiple authorisation-category rows for one UID are all returned and never collapsed; FINMA's own category terminology is preserved verbatim in four languages as source facts.

warning (FINMA_WARNING_CHECK): result is NO_DIRECT_LIST_MATCH, POSSIBLE_LIST_MATCH or UNKNOWN. There is no confirmed state: FINMA publishes no authoritative identifier for warning entries, so identity can never be confirmed, and an exact normalized-name equality yields at most POSSIBLE_LIST_MATCH. Only entries whose subject type the source explicitly marks as a company are screened: natural-person entries are excluded from ingestion entirely and entries with an unestablished subject type are counted but never screened, because entity type is never inferred from a name, a legal-form suffix, the commercial-register text or a jurisdiction. NO_DIRECT_LIST_MATCH therefore means only that no direct match was produced among the entries eligible for company screening under the current BUMIT rules; it does not mean the name is absent from the complete FINMA warning list, and it never means the absence of regulatory concern. A warning-list entry never means illegal activity, fraud, an unlicensed business or sanctions. Matching is deterministic with no score, no threshold, no edit distance and no LLM. The warning-list Date is undocumented by FINMA and is exposed verbatim as source_date_value with source_date_dimension: UNKNOWN; it is never renamed and never used for ordering or state derivation.

Absence from either list is never treated as a removal, withdrawal or revocation. An unavailable, invalid or stale dataset, or an unusable UID or missing register name, yields UNKNOWN — never a negative finding.

Live FINMA ingestion is disabled and no retrieval path exists; this deployment serves synthetic fixture datasets, marked evidence_class: SYNTHETIC_FIXTURE.

## Path parameters

- `uid` string, required

## Response `200`

Two separate FINMA check results with scope, coverage, matching ruleset, claims, freshness, provenance and attribution.

## Other responses

- `404`: No legal entity is registered for this UID.
- `422`: Structurally invalid UID.
- `501`: No authoritative source is configured in this deployment; the capability is supported but unavailable.

---

[API](https://skmtc.dev/bumit/apis/bumit-api.md) · [All operations](https://skmtc.dev/bumit/apis/bumit-api/llms.txt) · [OpenAPI document](https://skmtc.dev/bumit/apis/bumit-api/revisions/913e5d3654f8?raw)