The rule
A field or document is locked when it is acomplete criterion of a verification profile whose status is pending or approved. Everything else can be changed with PATCH /v2/customer/{id} or POST /v2/document.
Criteria shared by several profiles are locked if any of those profiles is
pending or approved. Criteria evaluated by none of the customer’s locking profiles stay editable, which is what lets you add a profile to a pending or approved customer. Documents you already uploaded for an earlier profile are re-checked for a newly added profile and appear in its criteria.pending until that check completes; data fields carry over as complete immediately.
A rejected PATCH returns 400 customer/field-locked-by-verification-profile and applies nothing. The body names each locked field and the profile locking it:
parameter: "documentType" and names the locking profile in detail. Removing a profile from enabledVerificationProfiles while it is pending or approved returns the same code with pointer: "/enabledVerificationProfiles".
Always immutable
firstName, lastName, dateOfBirth, email and phone cannot be changed after creation in any status. Create a new customer if these are wrong.
Individual customers
Locks follow the customer’skyc_profile_* entries. The table shows which profiles evaluate each criterion; a criterion is locked while any ticked profile is pending or approved.
Example — profile A pending or approved, adding profile C. Everything in column A is locked.
gender, countryOfBirth and nationality (for a non-EEA+ customer), plus the proof of address and W-8BEN uploads, are open because only C evaluates them. Once they are in, kyc_profile_c goes pending and locks them too.
Example — profile A rejected. Nothing is locked. Fix the fields listed in criteria.errors, re-upload documents if asked, and the profile is resubmitted automatically.
Business customers
PATCH /v2/customer/{id} is not yet available for business customers, including changes to enabledVerificationProfiles; it returns 400 customer/operation-not-allowed. Document uploads for the business and its representatives are unaffected. Contact support@spherepay.co if an existing business needs a new profile.
Related guides
Verification profiles overview
Statuses, criteria and requirements per profile.
Onboard a customer with profiles
Choose profiles at creation and add one later.