It is a requirement of US and UK export regulation for cryptographic goods that we identify positively the recipients of such systems.  In order to comply with this we must satisfy ourselves as to the identity of the organization making use of these services.