SBA Grant Loan Platform FAQ - Developer Notes

1. How will client get Keys for the API

Client will need two keys to access the APIs for the Forgiveness platform: First, they will need vendor key that will uniquely identify their organization as a consumer of these APIs. This will be provided as part of their on-boarding.

Second, they will need to obtain a API key.This will be provided as part of their on-boarding.

2. Where is endpoint URL

Environment: All the forgiveness API’s are exposed in the Sandbox and Production environment

Environment URL
Sandbox https://sandbox.restaurants.sba.gov/
Production https://restaurants.sba.gov/

3. FQDN (Fully qualified domain name) to be whitelisted for calling API’s

restaurants.sba.gov for prod

Also to upload and access documents (Amazon S3), here are the details

Environment URL
Sandbox lenders-cooperative-sandbox-app.s3.us-gov-west-1.amazonaws.com
Production lenders-cooperative-prod-app.s3.us-gov-west-1.amazonaws.com
DR lenders-cooperative-prod-app-2.s3.us-gov-east-1.amazonaws.com

4. ITIN - Individual Taxpayer Identification Number

a) ITIN edit checks allows nine digit number beginning with number 9 and 4th-5th digit between 70-99
b) API will support ITIN with Tin_type of 4
c) ITIN is allowed for both borrowers and owners
d) Supported in both UI and API

5. What is the regular expression used to validate EINs and SSNs?

For SSN -
The REGEX is: “^(?!000|666)[0-8][0-9]{2}-(?!00)[0-9]{2}-(?!0000)[0-9]{4}$”
For EIN -
Last 8 digits not in this list:
‘00000000’,‘11111111’,‘22222222’,‘33333333’,‘44444444’,‘55555555’,‘66666666’,‘77777777’,‘88888888’,‘99999999’