Download a stored verification document for a business customer. The endpoint locates the business's most recent verification record, fetches the stored file matching the requested file_role, records a client-visible audit entry, and streams the file back as a download.

Authentication & access

• Requires a client API token: Authorization: Bearer <token>.
• The caller must hold the kyb.businesses.read permission and have the OWNER or OPERATIONS role.
• Document download must be enabled for your client. If your client's verification-detail configuration does not grant the document-visibility group, the request returns 403.

Path parameters

Document lookup

The endpoint reads from the business customer's most recent verification record (ordered by decision time, then fetch time) under your client. The requested file_role must correspond to a file attached to that record.

• An unrecognized file_role returns 404.
• A business with no verification record returns 404.
• A record that has no file for the requested file_role returns 404.
• A business_id that does not belong to your client returns 404.

Response

200 returns the raw document as a file download (not JSON). The response carries:

• Content-Type set to the stored file's content type (falls back to application/octet-stream).
• Content-Disposition: attachment with the original filename.
• X-Content-Type-Options: nosniff.

Error responses

Standard 401 (authentication), 403 (insufficient permission or role), and 429 (rate limit) responses apply to every endpoint and are documented in the Error reference.