An Australian Company Number is the nine-digit identifier assigned to a company registered in Australia. It is used to identify the company in official records, searches, and corporate filings, and it distinguishes the legal entity from other business identifiers such as an Australian Business Number.
What the identifier means in practice
An Australian Company Number is a legal entity identifier, so its main value is consistent reference across company registers, filings, and due diligence checks. It is not a login credential or a security control, but it is often the anchor that external systems use to confirm they are dealing with the correct company rather than a trading name or a related entity.
Why it matters for records and verification
The identifier reduces ambiguity when organisations search for a company, reconcile corporate data, or match records across regulators, banks, counterparties, and internal systems. That matters because identity errors at the business-record level can create downstream onboarding, payment, contracting, and reporting mistakes. For broader registry and identifier governance, the IANA registry model shows why stable numbering schemes are useful for authoritative lookups, even though the subject here is corporate rather than internet infrastructure.
How it differs from other business identifiers
Australian company identifiers should be understood in relation to other business numbers, especially when a company uses multiple identifiers in different workflows. The same legal entity may appear under different reference fields depending on the purpose, such as tax, procurement, or compliance, so teams should avoid assuming that one identifier automatically substitutes for another. That distinction is important because inconsistent identifier handling can lead to duplicate records, failed searches, or misapplied approvals.
Common operational uses and pitfalls
In practice, the number is used to validate that a record belongs to the registered company, not just to a brand name or an informal business entry. Common pitfalls include storing it in the wrong field, treating it as proof of authority rather than proof of entity existence, or failing to keep associated company data current when names or statuses change. Internal systems that rely on company identifiers should also preserve the full context around the record so the number can support traceability without becoming the only source of truth.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 sets the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| NIST CSF 2.0 | ID.AM-01 — Physical devices and systems within the organisation are inventoried | Company numbers support authoritative inventory and entity lookup across business records. |
| GV.OC-01 — Organisational context is established and communicated | Legal entity identifiers support clear organisational context in records and filings. | |
| Recommendation — Use entity inventory and authoritative lookup processes to keep company records consistently matched. Align registry and filing records to the correct legal entity before sharing or processing them. | ||
| ISO/IEC 27001:2022 | A.5.9 — Inventory of information and other associated assets | Company identifiers help maintain accurate records of organisational assets and related data. |
| Recommendation — Keep business-record inventories aligned to the authoritative company identifier. | ||
Related resources from NHI Mgmt Group
- Why does business verification need to go beyond checking a company name and registration number?
- Why do AI agents increase the number of NHIs?
- How should organisations offboard a shadow AI tool that was connected to company systems?
- Why do personal laptops create more identity risk than company-issued devices?
Deepen Your Knowledge
Free weekly newsletter
Subscribe to the NHI & AI Identity Journal
The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.
Bonus 33% off our NHI Course when you subscribe.
Reviewed and updated by the NHIMG editorial team on November 9, 2026.
NHI Mgmt Group — the #1 independent authority on Non-Human Identity, IAM, and Agentic AI security. nhimg.org