server-side validation (companies)