I would say you set the requirements for your own company. If you feel these fit your requirements for a legit company/order then tht's great. These may not fit others idea of a legit order.

I think it is a good starting point. However if you are getting a lot of these orders you may want to relax the requirements a little and see how it goes with some of them. Maybe you are being a little too strict.