Correction (November 2026): this guide was written when domestic companies had to file. FinCEN's final rule of August 14, 2026 permanently exempted domestic companies and US persons from BOI reporting. The filing workflow below now applies only to foreign companies registered to do business in the US, reporting only non-US-person owners.
Founder & CEO Insight — Enow A. Jovial
Statutory Framework: The Corporate Transparency Act
Enacted under 31 U.S.C. § 5336 and 31 C.F.R. § 1010.380, the Corporate Transparency Act, as narrowed by FinCEN's August 2026 final rule, requires foreign reporting companies registered in the United States to report identifying information about their non-US-person beneficial owners to the Financial Crimes Enforcement Network (FinCEN). Domestic companies are permanently exempt.
Who Counts as a Beneficial Owner?
A beneficial owner is any individual who, directly or indirectly, satisfies either of the following criteria:
1. Substantial Control Test
An individual exercises substantial control if they serve as a Senior Officer (CEO, CFO, COO, General Counsel), have authority over officer appointment/removal, or direct significant financial and operational decisions.
2. Ownership Interest Test (25%+ Threshold)
An individual owns or controls 25% or more of the total membership interests, stock equity, capital profit interests, or convertible options of the entity.
The 23 Statutory Exemptions Matrix
While most small foreign registrants are not exempt, 23 specific entity categories are exempt from BOI reporting. Key exemptions relevant to tech and finance include:
| Exemption Category | Statutory Criteria |
|---|---|
| Large Operating Companies | Must maintain a physical US office, employ 20+ full-time US workers, AND report $5,000,000+ in gross receipts on prior year federal tax returns. |
| Inactive Entities | Established on/before March 1, 2020, holds no assets, has no foreign ownership, and had zero financial transactions in the preceding 12 months. |
| Tax-Exempt Entities | 501(c) non-profit organizations recognized by the IRS. |
| SEC-Registered Entities | Registered investment advisers, broker-dealers, and public companies. |
Mandatory Reporting Timelines & Trigger Events
```
[ Entity Formation Date ]
│
├──► Foreign company registered before Mar 26, 2025: filed by Apr 25, 2025; registering on/after that date: file within 30 days
│
└──► Any Change in Beneficial Ownership or Address: Must file Updated BOIR within 30 DAYS
```
Critical 30-Day Update Triggers:
- A founder or 25%+ owner changes their residential legal address
- An owner renews or changes their Driver's License or Passport number
- Membership equity shifts (e.g., selling 10% equity to a new partner crossing the 25% mark)
- Corporate officer changes (hiring a new CEO or CFO)
Who Still Files: The Decision Matrix
The August 2026 final rule replaced a universal filing duty with a formation-jurisdiction test. Run this matrix before spending anything on a filing:
| Entity | Owner profile | Files a BOIR? |
|---|---|---|
| LLC or corporation formed in a US state | Any owner, US or foreign | No — permanently exempt |
| Foreign company registered to do business in a US state | Has non-US-person beneficial owners | Yes — reports only the non-US-person owners |
| Foreign company registered to do business in a US state | All owners are US persons | Yes — files, but reports no beneficial owners |
| Foreign company not registered in any US state | Any owner | No — not a reporting company |
| Subsidiary wholly owned by an exempt entity | Any owner | No — subsidiary exemption |
What the Report Contains
A BOI report has two halves. The company half reports the legal name, any trade names, the principal US business address, the foreign formation jurisdiction, and the EIN or foreign tax identification number. The owner half reports, for each reportable beneficial owner, the legal name, date of birth, residential address, and a unique identifying number from an unexpired passport or driver's license, together with an image of that document. Nothing in the report asks for financial statements, bank balances, or tax returns — it is an identity register, not a financial disclosure.
Penalty Exposure: The Daily Accrual Math
The $591 daily civil penalty compounds from the first day a report is late, and the 30-day update clock runs from the date of the change, not from the date you notice it:
A report filed 45 days late accrues $591 \times 45 = \$26,595$ in civil penalties. At 90 days the exposure reaches $591 \times 90 = \$53,190$ — before any criminal exposure, which caps at a $10,000 fine and up to 2 years' imprisonment for willful violations under 31 U.S.C. § 5336(h)(1). The update clock works the same way: an owner who changes residential address on January 10 must file the updated BOIR by February 9. Filing on February 20 is 11 days late, accruing $591 \times 11 = \$6,501$.
The Full 23 Exemptions, Grouped
The four categories in the matrix above are the ones founders meet most often. The full exemption list in 31 C.F.R. § 1010.380(c)(2) runs to 23 categories, grouped here by the regulator that already supervises them:
| Group | Exempt categories |
|---|---|
| Regulated financial entities | Banks, credit unions, depository institution holding companies, money services businesses, broker-dealers, securities exchanges and clearing agencies, other Exchange Act registered entities, investment companies and advisers, venture capital fund advisers, insurance companies, state-licensed insurance producers, Commodity Exchange Act registered entities, accounting firms, financial market utilities, pooled investment vehicles |
| Public and government | Securities reporting issuers, governmental authorities, public utilities |
| Tax-exempt | Tax-exempt entities, entities assisting a tax-exempt entity |
| Size and structure | Large operating companies (US office + 20+ full-time US employees + $5,000,000+ prior-year gross receipts), subsidiaries of certain exempt entities, inactive entities |
A foreign company that qualifies for none of these files. Note the large operating company test is conjunctive — all three prongs must hold at once. A foreign registrant with 25 US employees and $6,000,000 in gross receipts but no physical US office fails the test and files.
FinCEN Identifier: File Your Passport Once
An individual who will appear as a beneficial owner in more than one report can apply for a FinCEN identifier — a unique number issued to the person — and give that number to each reporting company instead of re-submitting passport images and addresses every time. The company reports the identifier; FinCEN maps it to the stored identity. A reporting company can also obtain its own FinCEN identifier for use in later filings. For a founder who sits on three foreign registrants, one identifier replaces three separate identity dossiers, and an address change updates once against the identifier instead of three times against three reports.
Real-World Case Study: Multi-Member Holding Company BOIR Audit
In an enterprise scenario, a foreign SaaS holding company registered in Delaware generating $2,100,000 in ARR, $520,000 in EBITDA, and $190,000 in COGS managed commercial banking via an FDIC-insured checking account under corporate EIN credentials.
Following a seed equity financing round, two angel investors each acquired a 15% equity stake while a venture partner received board observation rights and veto power over executive compensation:
- Under the Substantial Control Test of 31 C.F.R. § 1010.380, the venture partner was classified as a beneficial owner despite holding zero direct equity, because executive veto power constitutes substantial corporate governance control.
- Concurrently, an existing co-founder relocated their primary residence across state lines. Under FinCEN rules, this address change triggered a mandatory 30-day updated BOIR filing window.
- By maintaining automated KYB and AML compliance registries, the company filed the updated report within 12 business days, eliminating potential civil exposure of $591 daily.
- The analytical break-even threshold proves that structured compliance tracking avoids devastating corporate liability and maintains clean banking underwriting status.
4-Step FinCEN BOI Compliance Execution Protocol
- Verify 23 Statutory Exemption Classifications: Cross-check employee headcounts (20+ full-time US workers) and prior-year tax returns ($5,000,000+ gross receipts) against Large Operating Company criteria.
- Execute Ownership & Substantial Control Audit: Map cap tables, option pools, and operating agreements to identify every individual holding 25%+ equity or executive operational authority.
- Assemble Verifiable Identification Dossiers: Collect unexpired government photo identification (US passport or state driver's license), legal residential addresses, and corporate EIN verification letters.
- Submit Direct E-Filing via FinCEN Portal: Transmit the initial BOIR report through the official government portal (BOIR.fincen.gov) and store timestamped confirmation transcripts in permanent corporate records.
FinCEN BOI Compliance Checklist
- [x] Confirm the formation-jurisdiction test first: a US-formed entity files nothing; only a foreign-formed entity registered in a US state files.
- [x] Map every 25%+ owner and every substantial-control person: include officers with veto or appointment authority even at 0% equity.
- [x] Collect a FinCEN identifier or a full identity dossier for each reportable owner: legal name, date of birth, residential address, and an unexpired passport or driver's license image.
- [x] File the initial BOIR within 30 days of registration taking effect through BOIR.fincen.gov — there is no filing fee.
- [x] Calendar every 30-day update trigger: address changes, ID renewals, equity shifts crossing 25%, and officer changes.
- [x] Store the timestamped confirmation receipt with the corporate records; it is the only proof of timely filing FinCEN issues.
Exempt organizations appear in the reporting map as the exception, not the rule, and the Form 990 playbook covers the return they do file: the 990, 990-EZ and 990-N thresholds, Schedule A, and unrelated business income.
The registry side is only half the story — the bank side is the CDD rule: our FinCEN CDD beneficial owner certification playbook covers the 25% ownership and control prongs, the Appendix A form, and the FIN-2026-R001 relief.
Cash reporting is the transaction-side cousin of the ownership registry: our IRS Form 8300 cash transaction reporting playbook runs the 10,000-dollar threshold, the 15-day clock, and the structuring ban.