CRO Ireland — the Companies Registration Office for KYB

The Irish company register can tell you who may bind a company without being a director — if you know where to look. The Companies Registration Office (CRO) keeps the register of Irish companies under the Companies Act 2014. For a payments firm onboarding Irish business customers it answers the core KYB questions — does the company exist, who runs it, who can sign — but its filing windows, its strike-off machinery and a little-used category of “registered person” change what a CRO printout actually proves.

1. What the CRO is, and what it is not

The CRO is the statutory registrar for companies formed under the Companies Act 2014 and for external companies with an Irish branch. It operates under the Department of Enterprise, Tourism and Employment, and documents reach it through its online filing system, CORE. Section 897 of the Act lets the Minister make electronic delivery the sole permitted channel for a given filing, which is why nearly every form now travels that way.

It is a register of companies, not of ownership. Beneficial ownership sits in a separate register kept by the Registrar of Beneficial Ownership, covered in our piece on the RBO. Authorisation to provide payment or e-money services is shown in the Central Bank of Ireland’s registers. A CRO entry says a company exists and who its officers are; it says nothing about whether it may do regulated business.

2. Company types and the identifiers to record

The 2014 Act reorganised Irish company law around a default form — the private company limited by shares, or LTD, governed by Parts 1 to 15 — with other types in later Parts: the designated activity company (DAC) in Part 16, the public limited company (PLC) in Part 17, the company limited by guarantee (CLG) in Part 18 and unlimited companies in Part 19. The suffix is a quick consistency check: under section 26 an LTD’s name ends in “limited” or “teoranta”, abbreviable to “ltd.” or “teo.”.

Section 151 obliges every company to show its name, legal form, place of registration, registered number and registered office address on business letters, order forms and its website. That makes the customer’s own website a cheap first cross-check: a number that does not match the CRO record is a finding before you have ordered a single document.

3. Directors, secretary — and the 14-day gap

Section 128 requires at least one director; section 129 requires a secretary, who may be one of the directors. Section 149 obliges the company to keep a register of directors and secretaries recording name, date of birth, residential address, nationality, occupation and other directorships. Under section 149(8) the company must notify the CRO of any change among its directors or secretary, or in their particulars, within 14 days. In practice that notification is Form B10, filed through CORE.

Two consequences for onboarding. A properly appointed director can be missing from the CRO record for up to two weeks, and longer if the company is late. And the CRO holds what the company told it: the register is only as current as the company’s last B10.

Section 137 adds an Irish-specific requirement: at least one director must be resident in an EEA state, unless the company holds a bond in the prescribed form to the value of €25,000 covering certain fines and penalties. A board with no EEA-resident director and no bond is a ground for involuntary strike-off under section 726(c).

4. Who can sign — the “registered person”

This is the point most KYB procedures miss. Under section 39, the board may authorise a person to bind the company generally — not just for a particular transaction — and notify the CRO, which then registers the authorisation. That person becomes a “registered person”. Section 40(1) deems the board and any registered person to have authority to exercise any power of the company and to authorise others, regardless of limits in the constitution, for the purpose of any question whether a transaction binds the company.

Section 39(3) is explicit: where the board revokes the authorisation, the person continues to be treated as a registered person unless and until the company notifies the CRO. Section 40 has limits: its protection does not extend to directors, registered persons or people connected with them where the board exceeded its constitutional authority. For an ordinary counterparty, though, a registered person on file is the cleanest evidence of signing authority Irish law offers. Separately, section 41 lets a company appoint an attorney, generally or for specific matters; those powers are not registered, so ask for the deed.

5. The annual return, and why it matters for KYB

Every company files an annual return, Form B1, made up to its annual return date. For companies incorporated under the 2014 Act, section 345(3) sets the first ARD at six months after incorporation and each later ARD on its anniversary. Section 343, as amended, requires delivery not later than 56 days after the ARD. The Act as originally enacted said 28 days; guidance written before the amendment still repeats the old figure.

Section 347 requires the statutory financial statements, directors’ report and auditors’ report to be annexed to the return, except for the first. Lateness has a sting beyond fees: under section 363 a company loses the audit exemption for a financial year unless the relevant returns were delivered on time. A company that files late is therefore often also a company whose next accounts must be audited — a useful question to ask when accounts arrive unaudited.

Filed financial statements are the CRO’s most valuable KYB product. They confirm the company trades at a scale consistent with its expected payment volumes, and the directors’ report often names the principal activity in more detail than the constitution does.

6. Strike-off and restoration

Section 726 lists the grounds for involuntary strike-off: failure to file an annual return, a Revenue notice of failure to deliver a statement under section 882 of the Taxes Consolidation Act 1997, breach of the EEA-resident director rule, a winding-up with no acting liquidator, and no current directors on record, among others. The Registrar first gives notice of intention by registered post to the registered office, copied to the directors (section 727), and after the remedial deadline passes may strike the company off (section 733). The strike-off is then published in the CRO Gazette.

A struck-off company is dissolved. Under section 737 the Registrar can restore it administratively on application made within 12 months of dissolution, with all outstanding returns filed, a compliant board and secretary, a registered office and no outstanding B10 notifications, all within 15 months. Beyond that window, restoration is a court matter.

7. The CRO in an Irish AML file

Under the Criminal Justice (Money Laundering and Terrorist Financing) Act 2010, identifying a corporate customer means verifying its existence and the people acting for it on reliable, independent sources. The CRO is the natural source for existence, officers and registered office; it is not a source for beneficial ownership, which comes from the RBO and the customer’s own records. The section 33 identification rules set the standard the file has to meet, and a CRO extract is only as good as its date.

The Companies (Corporate Governance, Enforcement and Regulatory Provisions) Act 2024 inserts new registered-office verification powers into section 50 and a matching strike-off ground into section 726. When the Law Reform Commission’s revised Act was last updated, these provisions were not yet commenced, so check the commencement position before relying on them.

8. Three scenarios from an Irish onboarding queue

Scenario 1 — a signatory who is not a director. Facts: an LTD applies; the application is signed by its financial controller, who does not appear among the directors. Rule: sections 39 and 40 — a registered person on the CRO record is deemed to have authority. What the analyst does: checks the CRO record for a registered-person authorisation. If one exists, records it as the authority evidence. If not, asks for a board resolution or a power of attorney under section 41. Outcome: the file shows authority from a source the company cannot quietly withdraw.

Scenario 2 — a customer on the strike-off list. Facts: periodic review shows an existing customer’s annual return is five months overdue and the CRO has issued notice of intention to strike off. Rule: sections 726(a), 727 and 733. What the analyst does: contacts the customer, sets a review date after the remedial deadline, and prepares restrictions in case the company is dissolved. Outcome: if it is struck off, there is no company to operate the account; activity stops until restoration under section 737.

Scenario 3 — a board entirely outside the EEA. Facts: a newly incorporated LTD’s sole director lives outside the EEA. Rule: section 137 — one EEA-resident director or a €25,000 bond. What the analyst does: asks whether the company holds a section 137 bond and records the answer. Outcome: a bond is a legitimate structure. No bond and no EEA director is a strike-off ground and a governance finding for the risk assessment.

9. What to do, today

• Key on the CRO number and store the ARD so the filing calendar is testable.
• Update your procedure to 56 days for the annual return if it still says 28.
• Check for registered persons whenever the signatory is not a director.
• Cross-check section 151 disclosures on the customer’s website against the CRO record.
• Monitor strike-off notices for the existing book, not only at onboarding.
• Keep beneficial ownership separate: source it from the RBO and the customer, never from the CRO.

Related: RBO — the Irish beneficial ownership register · Remote onboarding in Ireland — CJA 2010 section 33 · Registro Mercantil — the Spanish company register · RCS — the Luxembourg company register