Risk & underwriting

Merchant onboarding is not a one-time event

You verified a license, an insurance certificate, and a business registration. All three expire.

May 27, 2026  ·  The Renny team

Merchant onboarding is usually built as a gate: collect documents, verify them, approve, and enroll. The gate is necessary. Treating it as the end of the verification work is where the exposure comes from.

Everything verified at onboarding is a point-in-time fact about a moving business. Licenses lapse. Insurance is cancelled for non-payment. Registrations are dissolved. Principals change. None of those events notify you.

What decays, and how fast

• Licenses. Fixed expiry dates, so this is the easy one — and the one most often tracked as a stored date nobody reads rather than as a date that triggers something.
• Insurance. A certificate proves coverage existed on its issue date. Mid-term cancellation is common and silent.
• Business standing. Registrations lapse and entities dissolve while the trading name continues operating.
• Behavior. The one that decays fastest and is hardest to see: complaint frequency, dispute outcomes, whether scopes hold, how documentation quality trends.

Tracked means it changes something

A stored expiry date is not monitoring. Monitoring means the date drives an action: a warning before it lapses, and a consequence when it does. And the warning has to come first, because the first a contractor learns of an expired license should not be a refused draw on a finished job.

A date in a database is not monitoring. Monitoring is what happens on the day the date passes.

Re-underwriting on a cadence

The strongest version is periodic reassessment of standing, computed from the record the platform already holds rather than from a fresh questionnaire nobody wants to fill in. Time on platform, dispute history and outcomes, change-order patterns, documentation quality, current exposure.

Then surface the drift: where a merchant's current evidence disagrees with the standing they were granted. Trust extended once and never revisited is how a merchant's record and their permissions quietly come apart, and the gap is invisible until it is expensive.