Easiest approach is for these companies to add a TXT data with a public key on their website domain that matches the one being used here. This way places like iris can verify that they are the owners of that account.